Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
File: XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft (raw, json)
Hash identifier: Ns0XDFHVriklJfyw6ij6D/uc+Rk1TZXdvn2Ipa9mQZI=
Subject key identifier: 5F:F2:71:FD:01:C7:84:81:27:6C:46:7E:D7:DF:84:72:D0:6B:3F:BB
Authority key identifier: 5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82
Certificate issuer: /CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82
Certificate serial: 01974742F65FE46609621943CF0CAA14D8FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
Manifest number: 4E
Signing time: Fri 06 Jun 2025 22:01:00 +0000
Manifest this update: Fri 06 Jun 2025 22:01:00 +0000
Manifest next update: Sat 07 Jun 2025 22:01:00 +0000
Files and hashes: 1: 3uPLM02UL2awUH-Kuoh6brdmF8Q.roa (hash: 7YTaX8xKCH2MetKx49NBdkYFZn8uvSI3o4szPzVZP/w=)
2: XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl (hash: b2x+mnup+FsHVvv62Qpfn1pRSe7coz/pVxeMjozMHnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:f6:5f:e4:66:09:62:19:43:cf:0c:aa:14:d8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82
Validity
Not Before: Jun 6 22:01:00 2025 GMT
Not After : Jun 7 22:01:00 2025 GMT
Subject: CN=5ff271fd01c78481276c467ed7df8472d06b3fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:0c:bf:04:d5:9e:ea:42:66:ef:a3:71:30:
1d:a4:8a:e0:7b:d4:30:3d:5e:4a:48:ff:3e:02:a3:
8f:ee:15:1b:4f:d3:af:44:ed:ed:79:ae:e5:78:14:
95:61:fd:35:15:72:73:9b:4f:93:6c:f1:ea:7b:53:
38:86:cd:98:8a:28:c5:56:74:1f:38:0e:f8:c9:4d:
8d:07:ca:94:c4:e8:43:1a:eb:4d:d6:61:2d:07:f6:
e2:03:65:3a:b5:51:f6:1e:cb:a6:bf:11:48:27:8a:
39:55:24:32:d0:df:b5:d7:5a:01:a1:11:b6:db:1d:
17:e0:10:fc:3c:32:5f:80:71:fe:4d:cd:64:4a:07:
b5:d9:4b:ab:42:b6:51:83:89:e0:db:52:93:fa:de:
3c:6f:21:3e:2e:aa:f1:af:30:ea:fa:fc:b9:13:31:
0a:62:f1:27:aa:93:92:81:16:66:71:86:98:e0:e8:
aa:95:07:1a:68:5b:a9:89:ea:d8:3d:e2:b5:18:1e:
01:13:1c:ab:b1:75:82:38:a6:b8:47:27:9d:f9:2b:
78:3e:b4:3f:29:b8:2b:14:ba:08:85:ee:40:4f:b5:
74:27:b8:5c:da:79:c3:f9:13:a9:0e:34:fa:1d:b1:
1c:3e:43:78:5b:ea:04:e5:c4:bb:37:02:16:4b:4a:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F2:71:FD:01:C7:84:81:27:6C:46:7E:D7:DF:84:72:D0:6B:3F:BB
X509v3 Authority Key Identifier:
keyid:5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:10:06:a7:02:29:48:17:99:6d:ac:6b:10:53:db:54:1d:3d:
f9:81:1d:1c:c6:f2:f5:69:ea:f0:b4:11:73:ab:05:ac:45:78:
1f:7d:b9:4b:06:29:5a:89:33:9a:5f:c9:c1:26:0b:c1:51:23:
36:da:b1:7c:3d:73:8e:5f:12:a7:de:81:57:73:d7:51:0c:59:
6b:c7:ed:b6:0d:62:74:36:72:31:b5:66:b6:9e:6f:fc:36:ed:
ce:96:65:3c:13:76:79:37:dc:7f:f7:4b:b7:e6:80:ed:ca:02:
ff:8b:b4:40:95:94:6f:a1:6d:1b:ad:0a:91:65:fe:20:18:20:
37:9c:f0:89:df:e4:3c:29:df:8e:17:aa:6e:29:63:95:d5:ee:
d2:2b:a0:3b:06:6c:8c:0c:9e:ad:fc:03:4d:bf:2f:4f:76:22:
25:52:2b:28:9c:3a:e1:a6:3d:ad:e8:ff:b4:c2:44:f3:9b:c1:
4a:ca:2a:21:2f:30:c1:44:96:2e:85:8d:78:d0:69:be:97:1d:
35:84:fe:85:83:fb:24:4c:04:b2:14:41:a2:6e:3a:3d:e3:16:
0d:00:43:a1:41:a2:c1:26:f0:cc:a3:3c:d4:3b:9d:24:a2:f2:
43:5f:8f:ba:0d:2e:7b:5c:09:46:67:94:f2:49:48:67:57:4a:
12:e0:65:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:27 2025 by rpki-client