Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
File: xeu4t5Qi-y1tioLbfxrAtqpZs38.mft (raw, json)
Hash identifier: KHucvZKx05qhDKOFZclMaxV3tcbPx/rff91KKprNBDs=
Subject key identifier: 5C:45:0E:28:B3:A4:66:C2:C8:D5:A6:BA:AA:83:C1:CC:AB:C4:DE:29
Authority key identifier: C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
Certificate issuer: /CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Certificate serial: 01974C321D9D3BDBBFFB283A0A455448AFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
Manifest number: 14A1
Signing time: Sat 07 Jun 2025 21:00:42 +0000
Manifest this update: Sat 07 Jun 2025 21:00:42 +0000
Manifest next update: Sun 08 Jun 2025 21:00:42 +0000
Files and hashes: 1: xeu4t5Qi-y1tioLbfxrAtqpZs38.crl (hash: VIfCWwMnNxufz6YQDhsqUyT4t7xrg1SZ55HSe95iqn0=)
2: zG4ly3FhpsRy_muFf41M8ZKPF5o.roa (hash: 9tm7KsG1SMgxDQdJBogQZSZKc5Vw7KrlfAJHfrS64mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:1d:9d:3b:db:bf:fb:28:3a:0a:45:54:48:af:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Validity
Not Before: Jun 7 21:00:42 2025 GMT
Not After : Jun 8 21:00:42 2025 GMT
Subject: CN=5c450e28b3a466c2c8d5a6baaa83c1ccabc4de29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:39:21:9c:2d:5d:aa:5b:f9:19:3c:1b:6e:fe:
64:8e:c5:18:e9:b7:8e:7b:02:af:e6:20:5d:d9:55:
f0:62:22:66:4c:d7:74:91:6e:0a:d4:43:c8:ae:03:
6b:08:69:c7:78:ca:3b:e6:a7:42:0d:57:bb:0a:dd:
db:82:67:b2:7c:12:72:20:41:36:e0:71:cd:ee:ec:
19:41:49:9b:6e:9a:3e:ed:af:31:1f:ed:f2:36:db:
3c:3c:a8:3b:53:a0:b5:fa:bb:2e:6e:f5:d0:b5:a7:
eb:eb:77:57:e6:51:4d:2c:25:1d:07:88:e8:06:6b:
92:a9:fa:ba:e5:51:6e:2b:c2:9a:6b:ab:61:19:01:
4f:d5:95:69:af:92:3b:d8:15:5d:e7:a5:a0:79:49:
6e:2a:e2:33:a2:32:57:78:ff:64:b4:86:43:be:de:
1e:f0:b6:07:9c:03:e4:27:ca:ef:74:7f:72:ad:8f:
e2:26:e3:7f:c3:4e:7e:25:ed:21:f7:81:8b:e9:60:
67:09:43:e1:b5:90:52:69:51:9e:c2:67:cf:8f:e6:
8a:37:78:63:93:66:23:91:a1:c5:cf:db:6b:30:05:
65:97:93:e2:76:ca:dd:28:36:83:0b:ca:38:b2:75:
75:29:d8:da:13:ff:79:e8:c1:93:00:ba:f8:38:ec:
27:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:45:0E:28:B3:A4:66:C2:C8:D5:A6:BA:AA:83:C1:CC:AB:C4:DE:29
X509v3 Authority Key Identifier:
keyid:C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:27:3f:a7:a0:94:57:e7:2c:8b:06:fb:4a:3e:ed:7f:00:8f:
bf:61:93:ec:a8:52:6d:cf:ad:d4:e3:39:55:46:2d:db:8c:cf:
74:3c:b5:65:26:8c:c1:4c:69:6c:77:63:d6:3d:bd:8d:f2:41:
17:19:1f:ba:aa:7e:c9:9b:31:a6:c8:17:e9:31:dc:19:a0:83:
43:88:be:b5:05:35:d6:aa:4a:d6:85:f5:db:34:7e:6a:17:99:
bc:de:49:8e:25:5c:e6:8c:41:4b:39:cc:10:ad:20:a6:63:8c:
59:b8:e9:b5:fe:ab:12:72:75:b4:ee:c5:37:c9:2e:4c:62:ed:
55:9a:a6:58:f5:a3:b9:51:76:74:be:95:40:77:40:51:e5:76:
47:03:5a:bb:79:0b:13:52:8f:6e:f4:e3:8e:ce:0b:6f:3d:f7:
1f:2a:a2:36:8d:ec:1c:61:ad:15:3b:ac:22:d4:0e:51:4c:b3:
b5:f4:fd:6e:a8:c7:d0:d6:16:e3:8a:1b:40:cd:53:0f:1d:2b:
5a:57:dd:e2:27:10:17:95:5f:09:46:cd:9f:94:80:25:ce:e1:
72:fc:1b:e9:41:69:c8:6f:c9:b3:b2:6c:88:d3:b3:90:09:0a:
0c:1f:43:a0:9f:28:1a:0d:71:cb:8c:e8:bb:34:55:f3:49:6e:
e8:99:35:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:30:23 2025 by rpki-client