Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json)
Hash identifier: rSVfc4Dg/EBlXcVwuchf6rjsMLtL6zH3mgp9RbyAttI=
Subject key identifier: 02:58:13:D2:E8:8C:D7:36:B7:C8:24:A3:25:75:CD:7C:5B:A5:AB:0F
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 0197B77C8012760C27E4CB1878BA45E32378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
Manifest number: 1019
Signing time: Sat 28 Jun 2025 17:01:19 +0000
Manifest this update: Sat 28 Jun 2025 17:01:19 +0000
Manifest next update: Sun 29 Jun 2025 17:01:19 +0000
Files and hashes: 1: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (hash: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=)
2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: lNtpgIUT2KdIL6EVEfGgfNRudFmli5shta4nFm0b5w8=)
3: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (hash: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:80:12:76:0c:27:e4:cb:18:78:ba:45:e3:23:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: Jun 28 17:01:19 2025 GMT
Not After : Jun 29 17:01:19 2025 GMT
Subject: CN=025813d2e88cd736b7c824a32575cd7c5ba5ab0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2d:e0:3e:66:89:9e:d9:8c:85:d7:c2:55:d4:
46:d1:6b:ed:60:ff:e9:36:0d:75:7d:60:27:d6:ad:
fa:ce:80:19:12:5c:b1:97:63:c5:92:4b:12:32:5f:
db:ae:38:0a:95:07:23:ac:bb:4f:5f:dd:c6:23:cf:
ef:cd:25:45:e6:1b:71:58:65:35:59:6e:b3:71:02:
67:43:07:3d:69:b9:fb:03:fd:65:81:74:b0:d1:d7:
8b:31:34:d2:39:7f:4a:c0:95:e9:ad:a8:3e:fc:c5:
94:aa:0a:b0:66:9c:7c:b3:09:82:72:25:52:5c:5d:
ba:b5:a5:92:6b:4b:72:ae:f1:b3:32:e1:7a:dc:d6:
be:6a:60:4a:ff:f5:58:c8:3d:60:0f:21:24:22:7a:
b8:21:9c:79:9e:2f:54:38:66:48:4c:c7:2f:d6:71:
2c:a7:45:e9:26:73:4e:a8:9d:00:18:41:1e:0e:e1:
2d:d3:c9:26:03:32:7a:40:6e:61:c1:ea:ab:46:f1:
c4:2b:44:f3:1e:70:17:10:de:55:53:49:71:49:71:
b9:d9:14:e0:90:a8:28:f6:aa:75:87:bd:72:8f:7d:
91:93:ce:89:d6:54:0b:61:e3:fa:e3:6e:c3:32:b6:
bb:d0:e5:8d:6a:ea:e5:87:db:aa:7c:c1:9c:84:96:
78:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:58:13:D2:E8:8C:D7:36:B7:C8:24:A3:25:75:CD:7C:5B:A5:AB:0F
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1f:24:04:4a:c2:13:47:ac:fa:08:d9:fa:a3:90:6c:65:42:
21:c2:3b:fd:6d:8e:5a:84:6d:fd:60:83:23:61:b2:81:c8:be:
3b:ee:fc:37:ae:9d:0b:98:55:d6:dd:90:cd:14:f6:13:d1:6a:
79:40:21:f8:a2:b6:20:9b:74:f7:a8:7a:51:27:ac:82:ee:41:
f3:04:50:d7:6c:8c:e9:f5:2b:9e:1d:6b:7b:9a:b4:1b:b6:9c:
c7:68:94:d2:35:42:ea:00:e5:d4:4d:2b:5d:21:e4:c2:df:35:
a2:4a:e5:a4:6f:b3:98:b7:b1:d7:96:11:5f:28:e3:4f:89:42:
2a:ec:64:76:0d:a9:cc:ab:7f:1f:4e:bc:08:14:d4:8a:84:0b:
05:7a:db:d0:c3:45:80:45:cc:fd:14:9e:f2:78:d2:23:00:a3:
2b:cb:dd:3e:67:a8:89:5f:5a:b3:fb:66:e3:3c:9b:98:5f:cf:
74:fb:19:f7:5e:82:2e:ac:00:16:67:68:8b:be:cb:06:70:5b:
78:c2:20:e8:e8:de:64:e1:5a:53:cb:34:3b:a4:00:4d:5e:74:
7d:da:4e:29:3f:37:11:05:62:74:5f:58:36:cb:19:80:32:f2:
44:94:5b:c7:84:e5:3a:61:ae:b2:e2:95:a8:01:ef:b4:81:3e:
01:08:40:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:01 2025 by rpki-client