Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
File: xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json)
Hash identifier: U8vDCANRgzn+Y6VtY6QRL7/LWQZXib5kvVYEUT6G1tk=
Subject key identifier: 13:6B:13:0E:FC:88:8A:C9:EB:E6:77:F5:54:10:AE:36:F5:99:9B:A8
Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
Certificate issuer: /CN=c5f2203bc0286702345ac465500b4488c031c6b5
Certificate serial: 019752A243AD87112DF117A8A103E4E16818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
Manifest number: 157E
Signing time: Mon 09 Jun 2025 03:00:55 +0000
Manifest this update: Mon 09 Jun 2025 03:00:55 +0000
Manifest next update: Tue 10 Jun 2025 03:00:55 +0000
Files and hashes: 1: TXaQaEN4XvnYBFgT0ib4CXdw4tY.roa (hash: 0gsLwdoudfPPIkVNaiLgsua+5TeHeS/a6jBdMi3m75A=)
2: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: Kd2MghXtOLm2Bpmj/jK34sth+c0y3MHCl9O58Hx0eS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:43:ad:87:11:2d:f1:17:a8:a1:03:e4:e1:68:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5
Validity
Not Before: Jun 9 03:00:55 2025 GMT
Not After : Jun 10 03:00:55 2025 GMT
Subject: CN=136b130efc888ac9ebe677f55410ae36f5999ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:d9:cb:db:e8:2f:67:6f:38:ea:be:da:cf:
9a:3c:51:f5:d5:a4:84:06:3f:46:18:06:9c:f9:a5:
ab:32:82:7f:1b:19:25:bd:38:f0:a8:ad:30:9b:9b:
01:5a:56:d4:3e:b5:bf:6b:ed:b2:9c:91:83:ee:88:
af:d5:47:b8:83:83:8b:f9:09:05:fd:5f:1e:bd:fb:
0c:70:b2:7b:0a:76:55:00:8a:e5:6e:69:82:5a:9a:
12:9b:db:0c:56:b2:c9:cc:df:ec:8d:37:ff:dd:f5:
08:fd:80:3b:b5:1a:f8:44:8c:01:5a:a3:c4:54:07:
c8:3c:09:af:71:c0:17:ea:28:e3:b4:14:9c:5f:4e:
77:a1:24:24:e9:3a:12:64:e6:02:fc:94:d3:d9:fb:
d9:f2:33:a9:c8:38:0b:af:da:b3:27:3b:98:0c:50:
ee:af:32:68:e9:ea:58:a2:a3:11:19:6e:b0:eb:4c:
f6:5a:ab:d5:ba:94:f5:1b:5b:10:d2:7f:49:f7:c1:
8d:e7:97:45:c8:ab:7e:41:a7:a0:c2:b7:89:23:f3:
1f:40:71:59:4e:fd:21:f9:6d:ee:89:ce:30:4c:1e:
fe:c5:8f:fe:e4:9b:0a:62:72:13:f4:41:d3:c5:15:
57:eb:4c:8a:c6:12:09:65:8c:76:1a:24:b4:c7:27:
43:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6B:13:0E:FC:88:8A:C9:EB:E6:77:F5:54:10:AE:36:F5:99:9B:A8
X509v3 Authority Key Identifier:
keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ae:64:1d:f3:46:cf:d3:2d:da:9d:29:6c:34:46:31:1f:3e:
40:1d:97:46:58:83:16:75:d5:86:e4:9c:da:6d:9b:e3:ae:67:
0e:4f:82:2d:2e:81:30:3b:7c:44:0c:d8:ba:81:6d:c9:88:ee:
10:fb:84:35:f3:f9:eb:8b:5a:67:79:1f:84:89:98:33:23:77:
28:31:18:f5:c8:3d:2c:cc:f1:e8:19:a1:6a:09:dd:be:59:9f:
06:e6:b6:40:4d:83:09:f5:ea:1e:4e:9f:df:64:5f:af:71:c6:
dc:9b:8f:11:f7:2b:3e:20:eb:7b:d5:f8:97:fc:8e:cb:45:f9:
f9:d0:26:1e:0b:c6:a1:d3:2a:87:e1:ee:d0:07:d4:51:1f:d7:
35:c4:de:a4:ab:56:9c:c1:16:47:f4:c2:5e:cb:a3:aa:eb:64:
fd:de:ad:36:69:73:5b:31:ef:23:89:fe:d9:50:e5:a7:e2:40:
97:f6:79:73:02:9a:c4:0e:1f:3d:5a:bf:1e:44:6e:ce:dd:dd:
8d:a8:df:f6:f8:40:08:5e:3b:20:de:b2:68:24:18:ce:4a:b3:
3a:2a:fd:b5:f6:2a:b9:0a:d3:24:76:cc:4b:43:06:63:47:ee:
2d:9e:30:9b:0e:ef:e1:0b:5d:fa:d4:ee:88:34:9c:a3:8f:79:
91:d6:ae:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:06:22 2025 by rpki-client