Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
File: XjFIuezSDl_yRlqc0QGtqa5QjVc.mft (raw, json)
Hash identifier: JDMnq/HVceOiwDAtchNmZyxcOkcf3DG05BXVOo0IZH8=
Subject key identifier: 0C:98:D2:DA:67:F0:54:04:23:95:D0:D5:7D:1E:6C:A3:55:BD:F0:FE
Authority key identifier: 5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
Certificate issuer: /CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Certificate serial: 0197470C09599638A6BA64F75148FD13638B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
Manifest number: 1139
Signing time: Fri 06 Jun 2025 21:01:00 +0000
Manifest this update: Fri 06 Jun 2025 21:01:00 +0000
Manifest next update: Sat 07 Jun 2025 21:01:00 +0000
Files and hashes: 1: B13oDzfNi3hd7pt4m820H15kyF0.roa (hash: 2JCDi/GBgWbFY9zUUiXZMPd5rlTcvQp+8WchxjTTSRs=)
2: XjFIuezSDl_yRlqc0QGtqa5QjVc.crl (hash: 4AmxKoU5vd+v/vUG3Gcsdf1uiQ8/0wzQGxr0qwfYpCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:09:59:96:38:a6:ba:64:f7:51:48:fd:13:63:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Validity
Not Before: Jun 6 21:01:00 2025 GMT
Not After : Jun 7 21:01:00 2025 GMT
Subject: CN=0c98d2da67f054042395d0d57d1e6ca355bdf0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:9f:84:7b:84:69:92:57:77:ed:45:d5:cd:
61:bf:06:18:1d:dd:3e:a1:85:82:05:32:2c:c9:c1:
9f:58:d6:a1:c0:64:2f:64:e3:fb:20:b0:08:c7:09:
6c:2a:ae:8e:c3:f0:be:ce:8c:f0:57:93:0c:8a:c0:
f7:17:a0:aa:0e:38:e4:0c:f2:9b:7f:f4:ff:83:c8:
38:76:c4:31:fd:8a:c5:ec:5e:f2:13:e7:f1:87:48:
55:96:de:62:55:df:90:bd:f5:c8:f7:10:08:af:73:
0e:88:07:fe:db:5b:d4:76:53:7d:e0:7e:4f:5d:34:
58:9b:76:86:0d:4c:85:09:e4:6b:4f:0d:a3:5a:74:
6a:79:20:4c:b1:ca:a2:0c:89:01:1f:a5:84:af:7d:
1b:74:99:33:d4:f2:77:14:a9:d4:38:66:69:84:15:
1e:37:ff:46:ec:84:fc:83:6d:56:b6:78:a6:7c:67:
9f:bf:b7:9e:b1:54:5f:46:85:e7:15:74:9c:e1:0d:
4a:61:e9:62:90:45:62:da:25:2b:44:e4:46:d5:9a:
eb:cb:24:c3:25:bc:51:85:91:ba:10:c1:a2:a9:b8:
8f:c3:51:06:a1:c6:56:04:91:d8:0d:67:b0:2d:f6:
64:af:0c:65:6a:e7:bf:a2:0c:06:0d:61:26:8f:aa:
24:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:98:D2:DA:67:F0:54:04:23:95:D0:D5:7D:1E:6C:A3:55:BD:F0:FE
X509v3 Authority Key Identifier:
keyid:5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:07:13:f3:66:0e:75:73:2d:20:e3:05:b1:c8:6c:a6:b8:ec:
4c:e2:5e:f6:cf:e7:95:c0:a5:df:77:d5:b9:4b:1b:2a:3c:b1:
bd:14:9c:e6:d4:ed:56:9d:62:df:d0:b9:0b:2a:1b:df:67:62:
b3:e1:48:ba:67:fd:4d:d3:2d:9b:ad:db:7d:14:f0:6d:ac:3a:
f2:93:c4:2e:48:11:ec:f0:dd:da:13:2c:a3:32:78:91:64:3f:
03:af:d3:12:62:8c:65:11:05:e1:fb:1f:a2:18:07:2d:26:48:
76:bf:57:df:54:7f:f8:97:ed:a1:da:59:66:a9:8a:cf:60:73:
78:0d:4c:e2:19:55:d2:db:b1:e1:3d:72:5d:07:78:d2:0f:42:
26:07:00:9b:94:01:f5:87:29:99:a6:7f:14:eb:f8:e9:46:60:
96:b3:a2:09:c3:c8:f4:f0:58:a4:19:d2:66:81:46:bf:36:89:
3c:5a:d0:e2:b4:3f:fa:af:d9:85:ad:dd:ae:1d:e8:64:2d:ea:
9e:2c:0b:8a:fc:9d:ca:10:9d:45:2c:dd:8a:d8:65:c9:ac:b0:
52:d8:82:f7:4b:1c:e5:39:43:32:d7:48:cc:43:42:be:16:7b:
d0:3b:1b:40:16:f4:29:a0:fc:0a:dd:3a:20:5e:b4:28:1b:55:
f9:d8:f6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:16 2025 by rpki-client