Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
File: XatFagUdSpN4i-9PrA0HvcDJ8M8.mft (raw, json)
Hash identifier: G/hRXqwAb31kFOV33SoHTGadfculPjBiIj4Y9aYp9mc=
Subject key identifier: 03:8F:A7:14:7D:38:18:90:EA:91:1B:52:6A:0C:D8:C6:F0:42:9E:03
Authority key identifier: 5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
Certificate issuer: /CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Certificate serial: 0197B70E9E86BD207E7230C8F4CF8C53F6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 15:01:17 +0000
Manifest this update: Sat 28 Jun 2025 15:01:17 +0000
Manifest next update: Sun 29 Jun 2025 15:01:17 +0000
Files and hashes: 1: XatFagUdSpN4i-9PrA0HvcDJ8M8.crl (hash: rKNrMjswPaqSOVcEytLfx4b4zv3mbsPW2ZHmZ1qK+Is=)
2: YkgHQRkVRrWyQ2p2wgLse2qkaoY.roa (hash: p9EN6Inc80zOT2cHk5ltmrKNAtRT7MPUi50PrYUILc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9e:86:bd:20:7e:72:30:c8:f4:cf:8c:53:f6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Validity
Not Before: Jun 28 15:01:17 2025 GMT
Not After : Jun 29 15:01:17 2025 GMT
Subject: CN=038fa7147d381890ea911b526a0cd8c6f0429e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:13:d8:68:84:d9:7a:2d:33:55:b5:c3:2d:
46:45:d4:0e:06:86:a3:dc:2c:2f:c4:cc:8b:69:ab:
b0:20:28:eb:23:03:2f:c3:62:86:59:d2:37:5b:b6:
15:51:f8:2a:25:cf:f4:f1:9c:2d:58:1f:01:61:70:
a6:19:dc:dd:33:4b:70:d1:de:41:bd:c2:01:86:e2:
d8:26:c3:a3:ec:81:20:69:04:a8:6d:21:0e:3c:b8:
cf:f0:d9:1f:49:87:da:9d:40:99:04:e9:17:b8:9a:
13:c9:a9:08:c6:b3:f1:87:43:81:ee:d7:42:6b:b1:
c5:8d:a9:3d:e2:64:2b:2e:72:6a:c5:9a:80:7b:dd:
ee:6d:36:51:a5:e2:ef:62:c3:7d:3f:b9:4b:12:0f:
78:1f:56:3b:a9:18:90:48:43:c4:f6:89:f0:63:a4:
a7:c1:89:0a:d4:85:58:3e:f6:9f:18:2a:e6:78:c6:
75:bb:60:12:22:d8:b5:89:66:75:c1:82:0a:11:b4:
bc:f8:55:1f:0b:01:42:a2:28:69:e8:df:2f:b8:08:
53:24:18:88:21:bc:b4:08:1c:b4:19:c9:a8:e3:f8:
8b:cf:a5:74:18:e1:51:ac:23:e3:eb:c5:5b:ab:b8:
6c:0d:5e:10:3e:29:b0:0e:4f:e9:f0:27:3b:a5:33:
81:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8F:A7:14:7D:38:18:90:EA:91:1B:52:6A:0C:D8:C6:F0:42:9E:03
X509v3 Authority Key Identifier:
keyid:5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:84:7c:fc:45:1e:92:c5:70:fb:02:db:70:1c:b8:30:4e:e4:
cd:16:7b:11:b3:4f:13:ea:03:fc:8a:2a:0f:ec:22:f0:e6:85:
9e:c2:da:c5:0c:cd:81:1a:c5:67:8a:d7:69:44:3d:c4:8a:bf:
0f:49:0d:d8:1e:f3:b3:22:12:8a:83:18:31:87:81:cf:0f:42:
b7:61:0a:fb:26:07:5b:1b:49:53:f7:10:b6:70:bb:2e:cf:f7:
40:c1:43:b5:40:c9:47:af:ca:95:5e:52:0c:35:d1:44:30:14:
dc:a5:7f:a1:6a:bb:c4:41:af:42:9c:f0:87:31:a2:b9:01:40:
3d:0f:23:c4:86:2f:4f:23:8b:cf:05:c0:ea:66:9d:cf:33:48:
83:37:c7:9b:0b:dc:c8:2e:a4:f1:2d:08:28:6e:27:ab:1b:c7:
b6:54:3a:8d:d0:86:bf:41:0b:fc:6f:80:e0:e5:ab:fe:b4:ca:
3d:c2:a7:17:94:dd:1f:d2:1f:35:61:f3:9f:a2:1f:23:75:c4:
84:c2:21:25:4f:4e:4c:99:b6:b5:7e:9e:e7:d9:7f:f4:a3:d1:
c9:e5:ea:82:51:00:25:14:07:4a:55:36:93:18:1f:b1:3e:d6:
2a:11:d4:66:13:a9:3b:46:53:0e:04:9c:2c:f9:b8:b7:a2:02:
c2:b0:14:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:59 2025 by rpki-client