Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: zQy0lgSBfrIclKHvQrQod8wrw1DpWMhfMbpL8xvXegs=
Subject key identifier: 14:AE:00:0E:51:67:98:15:D3:C9:74:F2:DF:24:59:39:33:89:E2:E3
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 019747B0B653401E874A91F949820F821618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 00:00:52 +0000
Manifest this update: Sat 07 Jun 2025 00:00:52 +0000
Manifest next update: Sun 08 Jun 2025 00:00:52 +0000
Files and hashes: 1: K9i5BAZ6MzcgF9CzcPcItueT7VY.roa (hash: SAFMofRuJhJyuX+kxWxAf3VBKLBtrOMj73WD80i1Rgo=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: pIcWvt6swINAMwMwgH/McLRmTEa7FsSTMWSY6Y6S7JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:b6:53:40:1e:87:4a:91:f9:49:82:0f:82:16:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Jun 7 00:00:52 2025 GMT
Not After : Jun 8 00:00:52 2025 GMT
Subject: CN=14ae000e51679815d3c974f2df2459393389e2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:97:cc:96:23:29:e3:91:af:62:fd:05:0e:
49:3b:ad:95:4c:69:fc:23:c9:98:61:ca:e3:53:f4:
e4:7b:d7:f6:4b:72:22:86:96:a1:97:58:b9:4f:05:
fa:6a:af:37:10:af:d7:38:b3:6b:5a:3f:12:4e:d7:
28:62:16:b7:e5:43:9a:e6:e0:57:d1:25:78:c3:6c:
a8:5a:3d:58:39:60:c4:60:83:ad:29:2b:84:10:80:
5d:b9:67:9f:49:4f:5d:3d:64:7b:28:5a:51:45:97:
12:c3:5f:05:c4:dc:49:35:cc:1c:95:08:32:27:c6:
ad:f2:86:67:17:99:ca:40:69:a2:df:75:d7:ca:db:
b0:f0:3b:08:83:a7:ca:8a:e8:6e:9e:0f:d3:4f:08:
83:69:aa:6a:bd:02:45:c7:0f:9a:e3:b9:c6:e8:e1:
87:b7:33:e4:c4:4f:a3:47:0b:29:c8:ed:aa:c5:fc:
ef:53:f9:38:4b:72:2f:03:17:fd:34:87:86:3f:04:
5c:0d:c2:2a:a2:2e:95:cf:74:62:a6:9f:e7:e2:9a:
b4:ed:f4:d1:e7:d7:91:a6:b4:72:2a:76:96:38:13:
0f:45:33:88:7d:18:6d:21:7b:4c:5c:7c:31:01:e2:
41:66:f0:e6:6d:8a:5b:9b:68:83:de:70:7e:d2:da:
e4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AE:00:0E:51:67:98:15:D3:C9:74:F2:DF:24:59:39:33:89:E2:E3
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:67:67:47:cb:a5:eb:d1:35:8d:cd:62:c8:89:86:33:97:58:
a8:02:d8:43:04:f5:db:83:b0:63:04:aa:31:d7:c7:a6:8d:41:
c4:2e:97:86:f2:62:a8:ce:4d:0b:eb:9f:d3:aa:84:20:72:3d:
87:1e:0d:54:1c:7c:a2:53:48:40:47:f4:ce:db:7b:f3:e4:84:
0f:8c:d6:90:bd:62:e4:7e:97:50:0f:8b:94:99:76:e5:52:06:
fc:15:89:1a:ff:b5:19:bf:0e:3f:7d:0b:d4:db:89:16:71:28:
29:4a:1a:8d:d8:92:f7:c1:86:6a:df:b2:67:b6:f5:8c:52:d2:
22:56:79:12:4e:fc:6e:1d:8b:84:15:66:75:d4:24:d3:4e:2f:
a9:f6:95:36:9c:7e:5a:83:02:f8:22:99:87:1d:74:92:1f:f9:
11:03:f1:9e:c5:f4:09:89:db:33:36:31:11:a3:29:fd:5a:b8:
6d:85:e1:1d:90:f0:1d:32:ac:62:06:ca:39:96:32:31:a2:0e:
9d:2b:8c:81:d3:6b:81:1e:9b:3f:38:2b:f8:5f:eb:7e:5f:15:
4f:46:46:fb:16:d3:29:e1:67:a1:77:98:12:2a:4d:cd:a4:eb:
7d:d0:5a:8b:f1:b1:76:61:20:c8:ea:2f:25:b1:06:58:f6:a0:
27:a6:b8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:24:57 2025 by rpki-client