Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: B2kk2AIaIrp3yU4X4Fi5Zg1b1T0K2cRKm+PaNNXjhJs=
Subject key identifier: 35:7C:97:1A:C5:46:DE:1A:D9:DA:26:21:50:61:F4:2D:94:3A:CB:B0
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 019749681B17B90C9966D4BE4A538B88ABB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 102B
Signing time: Sat 07 Jun 2025 08:00:48 +0000
Manifest this update: Sat 07 Jun 2025 08:00:48 +0000
Manifest next update: Sun 08 Jun 2025 08:00:48 +0000
Files and hashes: 1: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: 8EsVNw7l7DbHv35SsWoumU+su/7mXqmIZ5aJVmejij8=)
2: xq3w8Wz_hOjqLagFRh_rUp9lCwM.roa (hash: TgceUdzJ8ko0xPfAB7dusGM3rsCqRGqcd0Fbo4I7cfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:1b:17:b9:0c:99:66:d4:be:4a:53:8b:88:ab:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Jun 7 08:00:48 2025 GMT
Not After : Jun 8 08:00:48 2025 GMT
Subject: CN=357c971ac546de1ad9da26215061f42d943acbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:1d:cc:8e:c6:a8:57:ab:e1:33:09:14:28:
18:7c:03:81:3f:ff:5c:dc:58:05:db:d6:7e:29:72:
29:f0:71:5b:c9:59:cb:24:50:3b:46:ed:07:40:0b:
35:b2:74:b7:fc:c8:90:de:68:11:e2:c8:32:82:f6:
26:53:aa:20:a9:89:ab:49:f4:b8:3a:17:5b:23:89:
be:2b:3e:8f:b1:ce:c5:96:c3:f7:72:16:63:c8:66:
18:95:b9:cd:33:a5:30:8a:84:4c:09:e6:c5:c2:e7:
02:ed:4f:68:21:3b:67:9f:e2:dc:6e:08:0f:60:7c:
0e:b8:d4:a0:5f:f6:f9:39:d6:e9:2c:1f:51:bb:a7:
8e:e5:c0:b3:31:7e:18:bb:8a:45:9b:27:68:75:78:
d1:e3:4c:f9:e3:e0:9c:c7:9d:64:45:5a:0f:9d:a5:
63:8a:61:19:09:8b:61:d6:a5:12:18:a7:8b:fa:d4:
49:cd:8d:3d:9f:a5:3b:99:25:01:9d:81:39:02:a9:
8d:2f:ed:3d:7b:fc:e9:b0:ac:d3:ab:3e:5f:46:74:
91:ab:dc:af:be:1b:f8:08:3b:07:c2:3e:21:ad:04:
76:81:dc:13:61:3a:fa:2c:3d:26:d1:7a:8c:e1:7f:
f8:90:ec:aa:41:e4:c1:15:ba:2b:1e:23:34:03:8a:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7C:97:1A:C5:46:DE:1A:D9:DA:26:21:50:61:F4:2D:94:3A:CB:B0
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3b:23:96:49:7c:82:24:9f:6d:7e:37:5b:4c:8f:2b:31:ce:
4d:39:fb:7f:aa:c3:a2:81:0e:9e:2f:66:82:9f:9b:5d:9f:cf:
9c:86:58:60:b9:21:ae:86:a6:9e:9e:d8:fb:7b:2b:08:8c:93:
0a:a2:22:2b:55:66:cc:f1:61:c5:03:4d:af:96:ab:66:1e:53:
4d:a6:d6:31:9f:1e:0f:78:10:de:38:eb:eb:15:7b:ff:8d:7d:
37:fe:c4:53:67:28:43:a4:45:0e:9e:43:19:e0:40:51:50:0f:
9a:f5:20:28:01:48:d3:de:b3:5a:55:b2:c5:ae:e5:4c:c6:79:
55:58:2b:cd:3c:13:50:82:f3:ab:13:6f:72:48:93:3a:2e:ff:
05:98:4e:26:71:06:9a:87:a8:40:08:49:66:43:9a:56:6f:11:
90:6b:6a:ce:68:2d:09:6f:c0:ae:2c:e8:b1:27:80:e4:d7:0a:
8e:31:b2:34:3e:11:4f:fc:9e:c4:68:5a:26:db:d7:7c:d6:fe:
49:ab:47:1a:bf:bb:aa:d6:de:1a:65:01:a5:db:a6:5e:71:09:
84:e5:24:18:cf:a8:f5:4d:b9:45:5c:c3:ed:cc:d9:1e:5d:9d:
5d:b6:f5:3d:55:29:7f:08:a3:fc:03:e9:30:ea:51:68:38:c9:
43:04:df:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:50:09 2025 by rpki-client