Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier: heWhn3Tvji783gdtqhp9DIUCHYRUTwYq2S44wpKJjhM=
Subject key identifier: F1:CE:76:E2:A5:62:1C:CD:D0:B8:E7:D2:1B:C9:84:64:79:88:E9:6F
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 0197556C48C54A892D1B868456791D960BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number: 08B1
Signing time: Mon 09 Jun 2025 16:00:49 +0000
Manifest this update: Mon 09 Jun 2025 16:00:49 +0000
Manifest next update: Tue 10 Jun 2025 16:00:49 +0000
Files and hashes: 1: xPJn9HaU4t51hbW5OBuJoCsPyo4.roa (hash: uz1JqEO2ZedJ66isTlXBDY0hlcT6/Q49MhmsWTQhugM=)
2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: xTj7iBnZt3Gul9LscTl/j6QUQIlCPMPrblqVFuKYhSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:6c:48:c5:4a:89:2d:1b:86:84:56:79:1d:96:0b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Jun 9 16:00:49 2025 GMT
Not After : Jun 10 16:00:49 2025 GMT
Subject: CN=f1ce76e2a5621ccdd0b8e7d21bc984647988e96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:e9:59:56:cc:16:79:8e:49:b9:10:76:5d:
5c:25:3a:fd:4d:92:5e:18:2e:84:ed:2e:bb:b1:83:
1a:fd:98:60:ff:ce:dd:1c:90:ed:d9:fa:45:f5:a9:
ba:cc:9f:f9:da:12:b7:30:8e:f1:e7:64:ee:80:50:
75:6e:9f:6e:f5:0c:fd:c0:d0:3d:30:a7:b9:34:98:
7f:fb:00:be:21:b0:ca:7d:1d:af:df:22:e5:bf:00:
6f:2a:08:9a:d3:11:82:51:ec:72:a4:b7:fb:49:cd:
15:7a:f0:13:8f:85:45:b7:5b:cb:14:15:11:f0:d0:
d8:d2:f0:50:6e:f6:51:aa:e9:d9:93:70:1f:22:da:
d7:ac:7a:40:3d:11:f1:3e:08:02:4a:bd:cc:d6:98:
c5:d3:67:55:a6:57:8f:ca:0f:c8:3b:9a:06:56:0c:
09:40:56:63:11:5e:4b:ab:1a:64:b4:da:4d:48:7c:
50:23:f3:59:57:29:0e:9d:d8:09:8f:94:5c:b2:4c:
d1:ac:df:23:c1:57:9e:bc:c2:f7:7b:16:63:fe:b6:
dc:89:f6:a0:f9:f8:33:71:57:a5:58:ed:cb:c4:ca:
f2:a7:8c:0b:2f:a8:a8:85:43:6c:4a:f6:b2:25:64:
af:c2:70:ce:52:d1:d7:60:36:28:9e:b2:78:3e:75:
d3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CE:76:E2:A5:62:1C:CD:D0:B8:E7:D2:1B:C9:84:64:79:88:E9:6F
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d5:0b:86:53:05:26:89:40:b8:f5:58:1f:dd:45:f0:73:c6:
25:b2:36:78:15:72:0d:bd:68:28:cb:95:10:a2:35:5b:2e:27:
d0:12:e9:a5:fb:64:a2:f2:77:03:f0:dc:80:6f:15:cd:bd:ea:
de:b5:93:41:f3:0d:13:c0:c2:ab:c3:63:00:ec:fe:72:18:a1:
8a:9e:a6:08:96:9c:e4:20:a6:1f:80:ca:9b:e5:2b:4b:c4:59:
22:44:89:9d:01:08:5b:f6:51:67:ce:fb:9f:fe:8e:eb:ec:9b:
00:75:b9:59:91:31:97:80:60:0d:b0:93:52:8e:8c:d3:2d:44:
97:fb:64:11:70:31:4f:74:49:eb:68:a1:8a:a5:50:b7:c5:45:
81:99:04:6f:cd:e3:7c:0c:2b:ba:eb:05:00:cc:95:5c:07:75:
fc:00:27:e7:da:59:dd:cd:99:c6:a9:18:aa:b5:21:b8:6d:ce:
01:5d:69:08:98:d1:de:de:dd:09:a3:93:04:4c:52:73:90:48:
2a:48:8a:8a:48:e2:2b:1d:76:05:05:32:a3:55:a7:21:ca:1e:
97:f4:4f:7e:e8:0c:d3:73:24:3a:c8:70:ba:a6:80:4b:39:06:
f3:bb:8a:7c:a0:2d:f4:76:b5:d9:fc:82:9a:a8:e3:cf:d4:80:
31:69:64:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:12:29 2025 by rpki-client