Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
File: RcXBJi6D17-pAsLIYqFfHkLSVZE.mft (raw, json)
Hash identifier: NLivhVmyFTkM4YWkZaTkOjqfZ24ykTtRpcJWT3G6bHA=
Subject key identifier: 1A:FA:BC:D4:14:78:3E:AD:5C:F2:23:F5:F4:1E:FB:6D:C8:C0:B3:35
Authority key identifier: 45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
Certificate issuer: /CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Certificate serial: 01974AE85269DAF65936385435D15AC7774F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
Manifest number: 054E
Signing time: Sat 07 Jun 2025 15:00:28 +0000
Manifest this update: Sat 07 Jun 2025 15:00:28 +0000
Manifest next update: Sun 08 Jun 2025 15:00:28 +0000
Files and hashes: 1: 85JP1EmlrjP9cMbgQ-NLAJZsWYU.roa (hash: MO0sgGxlXYh61dJ8SPvOD77mPT9iIScGfPHBaJnXid0=)
2: RcXBJi6D17-pAsLIYqFfHkLSVZE.crl (hash: lWJAFH/gzIrG5ML01fcGxLpgUqPG2nZZ7FV+fzAp274=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:52:69:da:f6:59:36:38:54:35:d1:5a:c7:77:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Validity
Not Before: Jun 7 15:00:28 2025 GMT
Not After : Jun 8 15:00:28 2025 GMT
Subject: CN=1afabcd414783ead5cf223f5f41efb6dc8c0b335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:92:af:4e:ad:6c:6a:bb:b6:dd:b7:44:5d:9c:
b4:90:6c:42:7c:01:35:12:25:ae:97:0a:55:b6:88:
4d:a5:61:e8:e8:c6:45:b7:04:af:f0:24:88:35:64:
98:e7:df:fc:c0:6d:29:87:a0:8a:e2:65:4d:80:5f:
82:31:5d:23:42:4d:c5:7c:cc:89:1a:31:ab:d3:ca:
d5:a2:13:55:a3:8f:25:6c:c5:03:b3:2e:ea:fb:12:
ca:8f:52:14:68:fc:b5:22:71:85:14:cd:e5:89:45:
ae:d5:15:9b:3f:ee:0a:f7:d1:a4:5b:04:80:31:83:
10:80:42:19:92:a9:18:ac:a1:7a:4f:28:57:59:a5:
37:a7:fe:5b:82:76:a4:51:16:d4:40:cd:dc:0e:72:
b8:d2:92:d7:74:ab:49:b1:82:06:ea:ab:3c:21:79:
7a:eb:a9:da:30:1e:c8:fa:98:3b:f5:4e:d4:b1:31:
22:a4:c1:00:c9:d2:40:a2:0f:45:e4:f8:2e:79:c3:
64:a7:4e:a6:89:db:df:e9:2d:17:b8:ce:d2:19:a3:
d7:bd:9f:4e:71:5d:b2:83:4f:c0:63:f4:dc:e7:c1:
f9:66:35:e8:cc:e1:72:0d:d7:da:d9:c7:c5:42:4d:
b3:27:76:b7:ba:4c:16:1f:5a:78:49:44:21:3e:a1:
d9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FA:BC:D4:14:78:3E:AD:5C:F2:23:F5:F4:1E:FB:6D:C8:C0:B3:35
X509v3 Authority Key Identifier:
keyid:45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fc:4b:dd:78:4c:78:33:09:94:57:1a:d5:a9:86:94:56:63:
fe:93:2c:b9:93:e7:81:cf:65:d6:c5:23:5c:f0:11:9c:c4:31:
70:61:90:97:a3:85:53:4c:db:36:fb:b5:55:60:ef:5d:21:06:
ba:37:b7:22:d2:dc:f5:79:ed:b0:db:ab:db:bc:18:b5:6d:bb:
eb:6b:d0:2d:ef:19:6c:19:5b:d8:a2:d0:6d:49:38:5d:29:5c:
f1:4e:4b:b5:94:21:7b:e4:d7:9b:de:2c:5c:aa:94:7a:9b:03:
83:23:9e:97:f7:38:98:fa:15:01:73:96:ad:12:09:97:8b:60:
2d:56:07:c3:4d:a9:e0:50:86:4b:47:4f:e8:0c:e4:61:de:f0:
7b:8a:3a:b2:49:03:eb:88:17:57:ab:3e:1c:d2:9d:fd:3f:14:
52:db:35:b9:22:8f:6a:ec:19:5b:0f:75:34:5a:20:7c:eb:2e:
5a:3a:ac:07:19:22:7c:4a:fa:d6:c3:3c:df:03:77:49:23:be:
a3:18:c9:c3:34:0e:ac:74:c9:e6:92:ab:d9:ad:6d:e7:fb:b6:
da:9c:61:7c:93:c2:a8:45:78:5d:b1:86:ff:49:67:e2:73:4f:
f3:5a:41:0c:88:18:89:ea:b2:0b:a0:b9:e3:5f:e7:fd:2c:28:
8d:ab:79:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:15 2025 by rpki-client