Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
File: xWYvmAINpON9UO07swICd08pLXo.mft (raw, json)
Hash identifier: wP4uQ9aiQ6iAznQ2TeVuxJafk0vnnSyyx06cTPsepQo=
Subject key identifier: A5:56:5E:00:8E:7F:B6:63:7E:D0:63:5A:54:94:FA:E1:01:37:79:E7
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial: 0197B70EE8F1763A927624EA08A6F9618AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
Manifest number: 0207
Signing time: Sat 28 Jun 2025 15:01:37 +0000
Manifest this update: Sat 28 Jun 2025 15:01:37 +0000
Manifest next update: Sun 29 Jun 2025 15:01:37 +0000
Files and hashes: 1: k3mYd88nhjXgIJYUkD0IW4wB334.roa (hash: ES4bfd/D7kl4HbO8JFVGRKGNEndi7/c5Oef8CAe6LiM=)
2: xWYvmAINpON9UO07swICd08pLXo.crl (hash: m/37sY1Ms1gzi1YZi6qTPwMAflxBd84avV4SjqAmnTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e8:f1:76:3a:92:76:24:ea:08:a6:f9:61:8a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Validity
Not Before: Jun 28 15:01:37 2025 GMT
Not After : Jun 29 15:01:37 2025 GMT
Subject: CN=a5565e008e7fb6637ed0635a5494fae1013779e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:26:d3:c6:c1:81:52:4f:85:83:ca:a4:94:70:
48:8b:42:6a:27:9c:9b:6b:24:c7:11:f3:f3:99:a3:
61:54:82:c5:d8:7c:eb:c9:58:a9:25:2e:24:91:57:
c5:09:44:54:2e:ee:2c:f2:bb:9f:0b:0d:fa:dc:5b:
0f:cf:69:95:ac:bc:fb:66:ac:10:32:29:00:36:b0:
0a:2e:8c:92:70:5f:26:69:33:91:8b:3f:c2:93:78:
34:ec:fd:61:c1:ef:1c:d4:1a:aa:15:6d:42:31:81:
21:e2:18:4e:2a:50:a5:a4:27:80:ce:2d:45:ca:ce:
2d:f2:e8:7c:b8:c8:7e:b6:8a:b7:fd:8d:8d:ef:49:
c9:cf:52:18:58:1e:7f:b1:7f:4e:89:43:ef:42:10:
04:f5:7a:47:6d:b1:e4:59:c6:c0:1b:e2:75:04:e2:
ae:4f:c0:85:0b:16:bd:25:51:0d:b2:22:bd:cb:40:
32:bc:01:c6:58:d2:c7:a5:2f:79:e1:24:ad:61:16:
d9:65:d0:76:27:15:b0:14:c8:04:29:ad:7e:7f:54:
bb:00:da:af:a7:95:55:5f:1f:1c:f0:7e:14:6b:e2:
13:8f:69:21:2d:93:2d:c0:39:15:fc:86:ec:64:fd:
e6:2a:a7:58:46:6e:3f:f5:62:be:82:e8:f5:4c:03:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:56:5E:00:8E:7F:B6:63:7E:D0:63:5A:54:94:FA:E1:01:37:79:E7
X509v3 Authority Key Identifier:
keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:76:7f:bc:ae:c5:c1:f4:07:a5:41:16:50:5b:67:14:41:a8:
b2:d8:b4:16:e7:f2:61:42:a2:de:ea:22:52:b0:4b:85:67:a7:
fb:b7:7b:64:45:ee:2d:ad:f2:23:94:fd:7e:73:73:f0:9d:88:
3d:ba:57:96:8e:90:4f:a2:d6:a1:88:5e:3c:0c:78:f3:56:7e:
be:86:1a:c8:3b:0c:4d:b0:71:9a:f4:1f:bc:88:ed:80:b7:4b:
76:fb:78:de:81:09:60:e3:3a:33:e4:4b:1b:e8:23:6f:3e:f7:
d6:b2:0e:5d:d8:ee:44:fc:98:59:d7:7b:5c:bd:e0:a9:45:12:
0a:d5:fa:f6:f3:38:ab:de:47:f7:be:b4:12:49:ac:c9:32:28:
ca:18:0b:b5:e9:90:12:c6:5b:7e:38:4b:78:3a:5b:c4:81:66:
3a:1f:2e:d2:b7:04:ae:3a:a7:bc:23:67:d3:52:1d:c0:a3:e8:
62:0a:0e:75:64:4f:c6:1d:cc:48:bf:e0:72:23:0b:47:ae:c5:
3e:72:96:c4:72:1a:42:c5:15:ae:d5:7d:07:4a:65:98:5d:18:
1a:61:a5:17:8b:1c:48:1b:5b:a7:e9:d1:48:e4:73:06:80:86:
cc:6c:e5:a2:21:76:0f:2c:28:ce:28:d4:93:9e:82:22:cc:c7:
c8:0c:a2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:24:46 2025 by rpki-client