Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
File: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json)
Hash identifier: nHSeNYlmvkGBJJx/jfcF5EqBVCI/tEwgDa4Kz8cV/Ak=
Subject key identifier: 64:2E:13:A7:44:45:CD:27:7A:5C:A1:56:6D:2F:28:00:57:D3:7E:A0
Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
Certificate issuer: /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Certificate serial: 0197B6A18BEAB8A23ED54BCC404938A02E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
Manifest number: 019A
Signing time: Sat 28 Jun 2025 13:02:09 +0000
Manifest this update: Sat 28 Jun 2025 13:02:09 +0000
Manifest next update: Sun 29 Jun 2025 13:02:09 +0000
Files and hashes: 1: UTJh4MdSXt43NfiQTTlDvj1k9rY.roa (hash: N+wxIM6737IrF1om020wGAk+mgn7C7h6YeyPjzTJ2mQ=)
2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: PQuZxFjM2zHk8QP3vodiN8dvQUyA/2+LBrhebMYzebI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:8b:ea:b8:a2:3e:d5:4b:cc:40:49:38:a0:2e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Validity
Not Before: Jun 28 13:02:09 2025 GMT
Not After : Jun 29 13:02:09 2025 GMT
Subject: CN=642e13a74445cd277a5ca1566d2f280057d37ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:72:db:00:36:75:25:9d:72:b1:0b:e6:36:3b:
dd:b1:15:15:54:50:53:28:62:b9:e2:21:cd:4d:f8:
11:96:f1:c3:a7:d1:21:cf:fe:22:1b:7f:ec:1c:35:
8e:68:47:5a:73:04:05:2c:20:d8:f3:cc:4f:e4:f4:
c1:24:98:54:d6:a8:d1:55:ee:d9:0c:e8:8a:ee:8e:
af:e1:46:af:b4:8f:42:45:e3:4b:b1:cf:9f:b8:7b:
70:34:52:0e:08:e8:3e:1b:93:58:59:e7:ef:03:c2:
49:1d:cb:b5:8a:9b:5e:d4:ac:4c:83:0b:c0:86:8e:
bc:97:0c:ed:a4:e0:7d:cd:4c:de:2c:67:33:45:bc:
16:66:b5:72:f6:b7:0e:65:a3:67:b8:c2:00:02:c0:
72:be:21:b8:a4:e4:ec:32:c9:1b:4d:90:f6:6c:3a:
c5:c5:6c:8c:dc:46:3d:39:aa:4c:d1:09:31:25:1c:
7a:2b:35:28:f2:df:30:cf:bb:0f:9f:4a:44:f9:e4:
30:12:0d:22:16:a9:a4:44:74:c1:be:15:12:f3:5a:
9b:c2:b3:0b:af:99:0e:f0:cf:a3:a8:2c:94:5d:a5:
99:ce:b5:65:78:50:84:93:16:14:63:b9:fa:1e:d3:
09:6e:53:a4:67:70:69:7a:e4:89:fb:ba:46:56:90:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2E:13:A7:44:45:CD:27:7A:5C:A1:56:6D:2F:28:00:57:D3:7E:A0
X509v3 Authority Key Identifier:
keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:27:31:01:b0:69:7f:9d:a3:9e:76:06:f7:4e:74:a7:aa:d1:
10:a8:3c:3d:f3:da:21:e3:be:61:c9:20:68:1b:a5:e4:9b:f5:
1e:1a:b7:a2:24:17:e6:87:b2:15:38:3f:e5:06:70:d1:5f:19:
9b:a9:d4:8f:a5:02:a3:9f:ee:0a:70:e2:52:a8:fd:e3:09:f4:
a0:67:83:ea:ce:e9:b2:0a:a3:b5:bb:57:ea:a9:8a:37:5e:ec:
54:2a:68:94:f2:7d:d2:03:91:79:06:0c:77:62:00:6c:f0:e5:
07:5e:09:5d:ab:6e:76:db:12:bb:09:40:8d:68:8f:d3:5d:41:
a2:2a:7c:c4:df:90:18:bf:89:85:86:31:a6:97:be:0c:30:d1:
01:aa:c6:bf:6c:4b:b8:4e:04:41:c2:c9:48:6e:e6:ef:c7:49:
6e:1f:59:1e:e7:c1:4d:a1:09:cd:c9:67:16:87:aa:42:f5:47:
bc:ad:e0:77:7a:fa:61:65:ad:03:2f:d8:f8:ac:10:58:c6:82:
81:3f:9a:dd:26:80:d5:73:26:b8:57:0c:01:6a:13:e4:b7:b9:
fe:ab:de:e0:8e:ab:61:a6:f2:7e:d1:72:1c:72:e4:92:45:bb:
d5:44:c8:62:a1:eb:98:1e:fd:40:7e:9b:b6:7a:c9:23:46:4b:
3b:3c:a0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:27 2025 by rpki-client