Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
File: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft (raw, json)
Hash identifier: gKx3V8vyFjjreHzeJX5g/AZxnauNvM05B+WFI2F5k1k=
Subject key identifier: AE:62:63:BC:29:87:91:80:F0:9B:94:D0:B4:B9:7F:DF:AD:28:F2:EF
Authority key identifier: 5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
Certificate issuer: /CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Certificate serial: 0197B70EB6B639A4C8AFBF0125314D22286B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:24 +0000
Manifest this update: Sat 28 Jun 2025 15:01:24 +0000
Manifest next update: Sun 29 Jun 2025 15:01:24 +0000
Files and hashes: 1: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl (hash: YUpFMb7raqz8rFSZDeyiMQZaZ449HP9bLSMa/fw8uUk=)
2: bCRc9uQxEBTdq_mIpQMeeuXw3bI.roa (hash: UVWoEpSiUbWJCwz2N/6iz5YS+S24UWKlT6JFJC9rbJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b6:b6:39:a4:c8:af:bf:01:25:31:4d:22:28:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Validity
Not Before: Jun 28 15:01:24 2025 GMT
Not After : Jun 29 15:01:24 2025 GMT
Subject: CN=ae6263bc29879180f09b94d0b4b97fdfad28f2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:13:8c:30:ca:54:7f:95:44:8e:dd:a8:ec:
6a:a6:8e:09:65:98:6f:a7:3b:da:88:7b:5f:32:9b:
c7:d0:ad:c2:51:d7:ea:59:07:f3:a6:7d:7f:b1:fc:
a7:2f:94:3c:99:a6:19:fb:0e:0a:53:4a:32:7e:2b:
ed:aa:3c:51:8a:ec:f2:9b:72:88:d5:3d:de:bf:c4:
28:9d:14:e4:84:ef:96:ca:e6:56:99:16:e6:a2:19:
99:9e:43:3f:2f:c8:60:a1:e9:9f:e9:3b:4b:d2:c2:
53:5c:e7:18:3e:01:6e:8f:a3:6f:f3:16:1b:c7:3d:
50:e4:97:49:99:2a:1e:63:ed:0a:f0:81:2f:db:b7:
88:89:7b:ff:2a:8b:24:18:9d:91:6e:50:85:0f:10:
0e:1c:90:01:9b:bb:c6:c1:17:a7:9e:0f:89:79:5e:
73:98:e7:65:d2:d4:42:0e:60:76:14:86:21:c1:e6:
b4:e2:5c:b1:3d:54:a0:1a:4c:3f:9f:7c:a2:c8:4a:
46:49:d8:f6:7b:3f:fb:00:25:cc:d5:1b:78:08:94:
73:36:53:d4:fe:77:0f:f3:89:02:5c:fb:e0:bb:14:
23:bc:bf:d2:31:a7:99:78:5e:82:2d:c8:67:7f:53:
f9:84:0a:ba:d8:bf:06:15:c4:eb:a6:2e:b5:3c:9c:
f2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:62:63:BC:29:87:91:80:F0:9B:94:D0:B4:B9:7F:DF:AD:28:F2:EF
X509v3 Authority Key Identifier:
keyid:5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:61:f3:d3:9c:82:2e:47:be:4d:86:19:eb:ec:82:77:cb:9e:
36:a8:c2:e2:ae:5a:72:b7:96:63:d2:e1:8b:d0:b4:38:40:6d:
75:ee:a6:47:b5:54:f5:ec:bd:5e:2b:a9:fb:fe:68:d0:f1:35:
a9:d2:50:3d:61:f4:bc:cf:18:0e:7b:14:e7:9a:dd:92:c8:e3:
01:0a:0d:9b:6a:07:1a:b3:22:6a:83:de:d2:dc:7b:bf:24:7e:
fc:49:ce:1c:25:72:23:9d:d4:fd:3c:ef:f5:d0:44:dc:db:3a:
14:11:5d:69:60:c3:7d:b1:45:d0:cd:44:db:5a:04:f0:3a:76:
c1:11:b5:bb:1f:25:64:d7:e9:a3:27:55:9a:5d:8c:64:26:da:
a4:22:f8:24:37:08:d4:1b:64:07:7e:cc:97:45:09:5f:48:87:
6f:0b:0c:a1:02:ed:0d:0a:f0:5b:6a:a8:e6:ee:bd:ef:cf:29:
cd:83:21:5e:e5:d2:d0:3b:67:15:3e:fb:3e:b0:9d:2c:25:81:
b4:f8:dc:f4:31:3f:f6:6c:f9:da:75:a1:49:bf:19:84:1e:b5:
c2:b9:40:08:07:6c:cc:f2:c1:cc:81:af:c3:02:eb:13:72:ca:
c5:1a:23:cc:e3:b7:f3:ba:02:04:2f:cd:4d:ff:81:db:d6:b8:
a2:fa:67:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:04:49 2025 by rpki-client