Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: PE/tJYc6vKXAn9fIpzIpdbiGwORIp5ancM4fAaoU7L0=
Subject key identifier: 1F:0A:6E:07:5B:71:3B:C7:9E:FF:95:79:5E:9F:E0:AE:58:79:B4:FE
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 0197B7B341C12EBE28BD5D6430018E9A9E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 18:01:07 +0000
Manifest this update: Sat 28 Jun 2025 18:01:07 +0000
Manifest next update: Sun 29 Jun 2025 18:01:07 +0000
Files and hashes: 1: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: aT+wr3lSMqQNqx0MkzpOnBkqB9I8y3ykWlWbMbd0h4A=)
2: YAmmJhyB_h-uP0bt7pChaUBYkG4.roa (hash: 2QWIeh79LiaCKjIcaN8PoKc9z0fkWg1AUVaFtkD8eVc=)
3: zaC0t6T9u1Q0_OY_Bl-7YOJ-dj4.roa (hash: X6PkBgrYQTc2P1TK5XaK7RcCDi2KWFhHLiM0QrA4Z1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:41:c1:2e:be:28:bd:5d:64:30:01:8e:9a:9e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Jun 28 18:01:07 2025 GMT
Not After : Jun 29 18:01:07 2025 GMT
Subject: CN=1f0a6e075b713bc79eff95795e9fe0ae5879b4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f2:ee:67:30:9b:31:b5:61:8b:ca:e0:f9:c6:
c6:c3:c2:7e:82:8a:d4:ba:4a:e7:a8:1e:46:41:d7:
2a:90:7c:15:2f:51:d2:5a:40:0c:d2:74:11:23:75:
63:cb:54:8b:77:59:44:a7:d6:04:42:ed:db:14:35:
8f:93:63:91:0e:a0:1b:19:90:90:9d:d7:a7:0e:a5:
8a:f6:42:dd:67:d4:a2:8a:b4:e7:0f:8b:a2:e0:a0:
eb:18:d6:29:57:fa:99:93:17:72:af:6b:74:6e:13:
13:34:81:e5:ef:8b:57:50:a6:00:e7:99:b3:38:ab:
5a:2c:8e:23:2b:c9:93:c6:07:fa:20:2d:b1:7e:3f:
4e:cb:ce:5f:ae:bf:72:ad:3b:cf:ab:30:0b:a4:7b:
b6:ca:38:2e:00:f9:76:ec:9f:a6:4e:c1:12:e6:ff:
f2:01:e1:c2:5f:66:4e:37:0d:56:a9:08:4a:b9:16:
67:e4:23:88:8b:42:64:33:67:5a:a3:c3:62:b3:a0:
49:24:8f:ae:bb:a9:cd:65:0a:11:16:af:99:67:f8:
25:45:6a:a2:65:7d:d8:03:72:6c:b7:38:8c:53:ef:
53:9e:5e:f7:c3:02:61:b6:f7:45:10:64:0f:e4:c0:
bf:07:9d:ee:4e:b3:3e:4e:84:ea:87:79:3a:07:f5:
07:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0A:6E:07:5B:71:3B:C7:9E:FF:95:79:5E:9F:E0:AE:58:79:B4:FE
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:44:a9:ce:5b:b2:74:15:a4:06:44:fc:c9:df:36:dd:57:61:
39:56:b1:12:35:1c:31:39:ca:27:eb:7e:31:50:f8:a0:1c:7a:
a6:33:91:04:a6:c7:cf:95:3c:39:98:55:e8:28:13:bd:6b:44:
f1:31:c5:91:44:b2:19:df:a7:11:b3:76:e7:07:6e:00:eb:ad:
e4:b0:e8:78:55:ca:04:18:8b:83:77:43:04:d5:8f:73:87:a5:
5c:de:87:40:22:f2:18:63:ed:e6:10:46:5e:bd:62:d7:a9:f5:
a0:2b:bd:45:41:b0:50:04:2d:ae:f7:37:b5:42:7f:1d:50:ba:
b4:b4:c4:27:2d:a0:65:cd:6e:9f:90:9f:69:04:fa:a3:56:a1:
de:6b:1c:c3:ad:99:20:f3:cf:f1:d2:57:29:f1:3c:7b:67:ab:
06:e1:c7:6c:6e:63:e3:a6:64:f8:69:34:ac:47:3a:2d:bb:1f:
29:26:73:f8:7c:4e:c0:81:62:d3:07:c9:78:b3:70:90:21:d0:
57:2a:c7:90:7f:fa:ab:40:ed:7b:0e:ab:14:95:3a:6d:0e:be:
6e:63:24:c6:3a:2d:99:e2:91:d7:04:ef:12:9a:3f:9a:04:c0:
0f:fa:9c:dd:b8:4c:21:21:26:ab:74:94:4b:b2:11:e4:43:5c:
68:20:00:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:43 2025 by rpki-client