Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: kyS0UMLZlbhsjhHEf/VkzA7zMdTVKJE9G48jmpwFGWE=
Subject key identifier: 03:D9:9C:A7:5C:4F:9C:36:C1:41:C0:9E:12:51:89:1E:77:E0:E8:5E
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 01974EFC63641EC82C0FFB13E7F8A10B103A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 10:00:52 +0000
Manifest this update: Sun 08 Jun 2025 10:00:52 +0000
Manifest next update: Mon 09 Jun 2025 10:00:52 +0000
Files and hashes: 1: LllBFDs2gYBZI_Py2Vbfk71EYWc.roa (hash: jTm21xMBscMU1inWn9X97hwUinpmwWspFNpJiHwAkIk=)
2: wreINdEXrzvFl4TS78nixyXhWT4.roa (hash: BY0i1f9j/EXwIFUv/m6UVc3+37fV7YdiWDXciFmQ0+g=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: 28eXYIQJTe4BMN/iGCx2DkRb20ePuuNuV/ghWcNYphs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:63:64:1e:c8:2c:0f:fb:13:e7:f8:a1:0b:10:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Jun 8 10:00:52 2025 GMT
Not After : Jun 9 10:00:52 2025 GMT
Subject: CN=03d99ca75c4f9c36c141c09e1251891e77e0e85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:70:c8:b8:1a:72:93:d9:3a:63:fa:52:38:
69:da:8f:16:63:c4:c7:97:a3:84:1d:5a:da:08:09:
8b:7d:a6:27:8e:67:99:55:eb:e4:0a:97:d1:55:7b:
68:63:12:8d:dc:8e:38:9c:0e:6b:6e:b9:1b:2c:fa:
b5:17:14:52:b5:e7:56:08:94:73:cb:cf:6e:bf:03:
82:c8:c3:9d:b9:43:98:b0:56:0f:e2:4e:c1:38:f0:
f5:e8:fe:26:01:b8:10:c8:93:58:08:af:24:9d:c2:
b9:2f:08:f6:2b:8b:43:1d:28:ed:8d:4a:68:94:61:
cf:2e:79:3f:9f:29:01:55:3a:69:c7:49:f8:30:11:
2a:b1:50:66:f0:22:81:72:3c:92:19:67:c3:80:77:
fa:cf:60:27:45:2f:04:2d:53:11:b4:ae:2c:7e:f1:
93:fc:7d:b3:1f:f2:b2:48:39:e7:1d:27:a5:1b:35:
ff:01:78:69:bc:60:84:e4:06:c8:0b:f4:3f:7c:19:
6a:d6:4f:36:ef:31:cb:6d:81:10:8d:f7:fa:5b:b7:
c1:bd:70:8c:ea:bf:58:0c:df:c5:69:d9:ff:3b:48:
2b:e2:87:ae:54:b1:64:e6:c6:76:94:bd:72:a2:51:
c7:71:b3:a7:91:fb:fe:6a:68:e0:69:df:47:6b:59:
ad:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D9:9C:A7:5C:4F:9C:36:C1:41:C0:9E:12:51:89:1E:77:E0:E8:5E
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:84:78:5f:86:b1:7c:06:34:96:67:8b:f3:ce:00:f8:c1:a5:
94:1b:73:50:d1:18:d6:9b:aa:88:c9:0f:0e:0e:94:ca:ef:f3:
d2:b3:00:d4:a6:b7:40:c5:b3:e4:80:d5:25:85:b4:1a:91:b0:
74:32:b6:e7:14:00:bc:2f:8a:5b:98:4a:1c:83:2e:5c:b4:1b:
cf:a5:db:7f:f1:6a:8e:51:2b:82:7a:87:0d:11:7d:74:c6:9d:
23:83:31:e8:6e:1b:4d:4f:1b:21:4e:f0:14:c6:28:1a:c7:dc:
39:8f:d1:0c:8d:41:25:30:47:6d:6d:52:f2:5b:0a:82:7d:41:
4a:5f:52:51:23:b9:38:81:f1:1a:87:17:76:4f:3f:e2:17:44:
83:cf:19:16:b1:51:d8:01:de:09:93:b9:eb:30:09:c6:45:c0:
5c:3c:e5:00:cc:1e:30:28:70:6f:e8:38:82:38:6e:e6:0d:45:
13:c5:27:8d:56:5b:2a:78:68:23:49:41:fe:eb:2f:95:18:a3:
e0:a3:c8:da:88:d7:1e:61:25:0d:b7:ac:01:9d:69:61:a3:04:
26:0c:fb:5a:e6:1b:fb:f8:0e:65:e9:5a:82:c2:50:4c:20:4b:
a0:09:85:ab:01:81:19:3e:91:82:a9:d5:83:2c:97:54:16:e2:
39:d2:2d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:40:51 2025 by rpki-client