Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
File: XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft (raw, json)
Hash identifier: wpxGJN5XCHzfQa4KI4dubEoKiYATeLTSTWRbApnchlA=
Subject key identifier: 4A:F6:3D:2B:0C:80:84:16:B1:C6:F5:48:E6:F3:30:A5:4A:FE:63:16
Authority key identifier: 5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
Certificate issuer: /CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Certificate serial: 0197493134ABA6C3B1D8CDD388B0EFD0E8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
Manifest number: BF
Signing time: Sat 07 Jun 2025 07:00:50 +0000
Manifest this update: Sat 07 Jun 2025 07:00:50 +0000
Manifest next update: Sun 08 Jun 2025 07:00:50 +0000
Files and hashes: 1: XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl (hash: 9VeKA3ulP64dcXOEt20ZiUpcAtBAJfFITMXuF9pq5yE=)
2: sHWJgB25eZ5MsxkzvHCaC9Q9eBU.roa (hash: tfZrpnb6Dc4xLEKe9XCNdEh3R+ehL6A7wZM06Ogyh8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:34:ab:a6:c3:b1:d8:cd:d3:88:b0:ef:d0:e8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Validity
Not Before: Jun 7 07:00:50 2025 GMT
Not After : Jun 8 07:00:50 2025 GMT
Subject: CN=4af63d2b0c808416b1c6f548e6f330a54afe6316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:4d:0b:75:5f:23:1e:40:5f:ad:c0:ff:f3:
3f:7e:04:63:fa:d1:06:a4:0e:c5:cd:db:0f:89:0f:
8b:f9:20:6f:b2:ee:f6:52:85:51:02:b6:0c:7f:6f:
0a:76:c1:2c:5f:e4:8d:b3:87:ed:78:1a:71:c0:a9:
77:92:ce:da:69:5b:e5:ef:9e:8a:72:fa:7d:79:12:
e7:66:ce:ca:9f:ef:9e:4b:b5:73:6d:6e:fe:62:12:
67:4b:9f:45:e4:77:b9:73:22:b7:26:6f:c7:b3:16:
3d:04:32:84:fb:7d:90:5b:06:36:ea:99:23:d8:5b:
71:4a:2c:70:57:c7:7b:d9:b5:02:3a:04:52:71:a6:
8e:5f:13:3a:a6:8a:5d:15:86:4e:be:6b:2c:2f:ac:
e8:45:d4:0a:b9:6f:c3:d0:41:fa:e1:c5:35:02:37:
0a:e5:85:fe:58:20:4f:f2:35:e0:76:2f:6e:ca:18:
5e:e8:e0:23:80:09:71:1f:1d:0b:c9:13:28:b0:29:
31:f3:12:52:5b:8a:52:53:66:b9:e8:42:5f:42:31:
43:27:3e:3d:14:4f:e9:50:ae:7e:2b:2e:b7:f3:72:
4e:75:49:60:2f:04:57:d0:88:ee:ff:8e:59:be:01:
77:e3:c8:c6:a9:d1:3a:b9:fd:45:e7:4d:48:6a:c0:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F6:3D:2B:0C:80:84:16:B1:C6:F5:48:E6:F3:30:A5:4A:FE:63:16
X509v3 Authority Key Identifier:
keyid:5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8d:f5:19:1c:c8:88:35:44:e6:3c:de:ef:3b:6f:6a:a7:65:
6e:49:97:57:23:2f:76:44:07:eb:2b:dd:74:bb:63:37:8c:08:
b6:1a:8b:bc:2a:cb:81:61:51:fa:e3:d2:de:7d:4f:32:26:35:
89:a1:8f:9c:cf:cd:d9:ea:13:2a:75:6f:75:3a:fd:87:78:71:
c2:b6:ff:39:e5:40:a2:a7:2e:39:e0:57:cb:d6:e2:ea:6c:48:
02:18:62:53:cb:66:20:4a:4e:03:14:d3:16:86:13:da:0a:92:
98:9b:f3:84:d4:c8:42:4c:d2:45:13:9c:3f:8f:c7:da:b8:22:
48:71:b5:41:b0:28:e5:f0:97:50:0f:98:92:7e:53:af:bc:b0:
c6:06:59:f5:c3:97:cd:67:1a:0a:5f:6f:04:83:85:50:dd:70:
dc:84:08:ce:3d:21:36:fe:b3:9c:45:f1:7a:f5:19:94:ab:74:
74:85:8b:f8:fb:9c:cc:92:d7:dd:3a:e3:10:c4:de:27:ae:65:
b8:6d:7a:e7:ea:0b:78:0a:dc:0f:ca:25:61:93:18:89:0c:95:
44:04:0b:aa:e9:ff:c1:59:e2:6e:7a:9a:7f:b6:2e:8a:89:2d:
7f:7c:ea:cc:90:7b:03:c0:78:47:f8:63:93:1e:ec:84:6d:6d:
62:a0:f1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:08 2025 by rpki-client