Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: WEJGInMbuR29sKEKCYPHlE78hB2XLUowSPCZoJhLi28=
Subject key identifier: 4C:3D:7A:28:34:F7:B2:78:06:3A:22:94:50:EC:F0:CA:CB:5D:A2:07
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 01974C9FC0638B2F13CBDCE37BCA7A48CEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 1582
Signing time: Sat 07 Jun 2025 23:00:27 +0000
Manifest this update: Sat 07 Jun 2025 23:00:27 +0000
Manifest next update: Sun 08 Jun 2025 23:00:27 +0000
Files and hashes: 1: VV0lcvnlnG9WTkwgXPk5TRHRcZQ.roa (hash: DsDIMEW7TR5yp1+sD2rXx7TV58t745Rd1fkPc4+bsBs=)
2: a85p_GEp5p6Bf3FjSd5TigV6wZQ.roa (hash: wqCCsxCv3hdKMkQBIvYu4j0t7kjF+iiKKHzp3iWmOnw=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: KKmOYTiOmqS0yu3Q6+K2Tj9fqyvIURD+bP9nZxxfCQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:c0:63:8b:2f:13:cb:dc:e3:7b:ca:7a:48:ce:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Jun 7 23:00:27 2025 GMT
Not After : Jun 8 23:00:27 2025 GMT
Subject: CN=4c3d7a2834f7b278063a229450ecf0cacb5da207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:35:12:db:52:76:78:9b:6d:5f:54:91:b1:
d3:ce:63:a9:03:cb:f0:69:12:39:91:ab:b0:f1:b5:
f0:de:61:23:c4:4e:f2:ee:cc:c8:7a:6b:df:d6:af:
86:b9:b4:09:bb:07:2f:76:00:1a:6c:b4:6b:d7:73:
d8:c6:0a:3d:c0:08:fd:03:8d:55:29:b6:40:16:45:
35:62:7d:18:26:18:97:e1:99:8c:51:0d:3a:b3:eb:
db:06:42:c1:d7:f3:f2:9d:e2:90:10:a0:af:c7:49:
ec:52:d7:ee:4a:45:53:1d:c5:ec:4b:90:45:37:51:
3d:2c:e5:11:a6:ed:c8:bb:7b:40:44:8d:b9:70:c9:
94:63:62:9a:c2:d9:a1:23:92:b0:b6:38:f8:9e:52:
7b:dd:62:0a:4f:41:6f:50:f5:25:38:06:a5:05:29:
7f:90:b5:fc:a0:73:46:38:a6:ed:e7:6b:9c:dd:08:
b7:ed:35:4b:43:8f:a0:62:d9:9c:e9:45:a1:02:80:
4c:e9:ce:e6:ae:75:4b:3b:08:ec:1a:56:1f:94:5c:
63:36:da:40:9b:75:73:d8:95:d2:e8:55:f6:48:2e:
b0:84:49:e2:85:38:6d:87:84:a5:3c:bb:4c:7a:37:
63:0e:a9:ab:ad:13:64:af:43:68:21:75:20:8d:a5:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3D:7A:28:34:F7:B2:78:06:3A:22:94:50:EC:F0:CA:CB:5D:A2:07
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ee:b8:fe:f0:63:02:ab:df:b7:6d:41:a0:f9:8d:8f:94:9a:
b1:cf:b7:11:8a:16:db:2d:19:d2:c7:57:b9:2b:a4:2e:f0:ba:
1e:60:6e:82:3b:da:99:64:34:88:b1:f8:e4:04:88:72:00:bf:
9e:27:cc:9b:6f:e5:b2:5b:b0:06:e7:34:85:0b:e6:63:4b:73:
25:e3:d0:7c:20:b5:47:e4:9c:c7:41:30:69:ac:f8:82:49:59:
6f:f5:27:e8:a0:8d:84:43:7e:fa:17:47:c7:8b:cf:b8:a5:29:
c4:c2:8a:fc:ee:9b:db:3c:92:82:4d:79:e5:05:c7:9f:3c:36:
ae:b9:3e:08:17:66:e0:a1:f3:e9:c3:93:3f:dd:27:1a:1f:2f:
38:ad:52:be:fb:31:a1:b6:f0:18:fa:4b:21:52:80:44:3a:c1:
cd:9e:98:18:a8:8f:4a:f8:4b:03:27:3e:bc:18:b5:9a:4d:37:
56:cf:2b:b2:29:7e:f6:6f:05:9b:c1:01:bc:26:f4:97:4c:79:
3d:e5:69:c0:19:06:55:bc:57:f2:b0:90:cc:a8:58:05:6c:a4:
bc:f7:9e:7d:65:28:07:b4:0c:4c:0d:70:29:c9:ea:86:55:91:
d6:99:9b:a4:e5:26:ca:2d:8c:3d:c1:27:71:1f:8c:c4:35:5f:
8a:80:4a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:04:51 2025 by rpki-client