Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
File: xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json)
Hash identifier: nQ1nLYbW0q2XdgPeuN02aCBvtAICBG9JIUblT7OD4Ec=
Subject key identifier: 85:4F:CC:B5:F7:5E:9A:D6:40:57:64:98:A9:B5:8F:F2:29:F5:4D:48
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Certificate issuer: /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial: 01976CCFCD17516F3ED52737E8E069BF22FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 05:00:47 +0000
Manifest this update: Sat 14 Jun 2025 05:00:47 +0000
Manifest next update: Sun 15 Jun 2025 05:00:47 +0000
Files and hashes: 1: BXeoSIu-_SRx3A6HaJlOPOszvDk.roa (hash: GGULqsTNy/97TMMZdfL/fue1ku/lCYDFj0fY/D6J2uE=)
2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: 3eSHlkhOwEMoLLtDys3xOPVipUg4J8yFtgMpsEHHzQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:cd:17:51:6f:3e:d5:27:37:e8:e0:69:bf:22:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
Validity
Not Before: Jun 14 05:00:47 2025 GMT
Not After : Jun 15 05:00:47 2025 GMT
Subject: CN=854fccb5f75e9ad640576498a9b58ff229f54d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0a:39:4c:a4:6a:27:14:b5:03:de:27:b9:4d:
f6:5c:65:9d:6d:68:c7:79:d4:09:11:bb:70:f2:b9:
96:55:31:ac:fa:a4:24:ec:26:e3:f3:8e:2d:37:2b:
63:e5:90:88:5c:53:dc:9e:4a:a0:63:08:d1:87:6b:
39:50:45:9a:b2:03:cd:9e:ef:fa:94:67:0c:2e:ae:
c6:bd:56:e2:52:42:ad:0a:09:02:c0:88:fb:83:3c:
66:a4:a8:25:81:50:64:0b:b2:88:a4:13:44:a2:3f:
5e:99:80:a5:c0:98:9b:1e:fa:97:36:ee:4c:f3:a9:
70:46:47:da:10:00:72:60:6d:4b:f9:5c:ea:d5:5a:
04:09:3e:a4:cc:6e:94:5d:8d:60:1c:8f:88:4b:04:
0e:a9:bc:10:15:7e:f9:63:16:1a:7d:e0:cf:3b:d6:
9f:38:11:cd:b6:a9:01:6a:d4:d3:3f:fe:45:b2:b1:
ad:d8:3f:7d:cd:fa:97:91:ef:4a:00:be:91:70:9b:
d3:27:35:01:f4:62:b7:65:26:31:ea:70:31:d6:f4:
a5:80:05:30:a6:74:20:94:c1:f6:7b:39:e4:3f:95:
3e:dc:a9:2d:98:40:6b:a7:b5:62:6d:2a:d4:ce:e8:
90:97:19:31:40:0a:de:15:62:a7:e2:de:44:e8:f1:
d3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4F:CC:B5:F7:5E:9A:D6:40:57:64:98:A9:B5:8F:F2:29:F5:4D:48
X509v3 Authority Key Identifier:
keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:33:59:b7:77:d3:b6:9a:bf:97:d3:22:b9:48:87:57:da:5a:
86:a2:71:23:e2:46:e1:95:5a:d8:cc:4d:86:3c:0f:ec:5a:6d:
61:fb:25:93:de:81:da:ff:96:40:1f:f5:63:2c:47:f3:cd:41:
14:76:aa:6a:b5:b5:ed:9a:ee:fa:ef:18:dc:d1:8c:a6:d0:65:
2b:bf:13:3a:07:3b:e3:88:93:0d:2f:40:4a:d3:72:62:46:9c:
7e:23:ea:d7:c3:05:62:e2:a5:96:42:81:25:2e:5f:b8:1d:85:
28:e3:f1:c2:f4:c4:e5:ba:3b:b9:09:57:5d:d5:48:4e:53:1e:
04:88:cf:1f:4f:a1:2e:aa:2e:6b:11:fe:4d:84:01:09:ac:d9:
8a:10:70:da:73:70:9b:8d:86:0b:ca:7b:2a:d5:6d:07:4d:7b:
49:b8:8c:bf:a2:c0:ac:65:7e:c7:c6:ea:03:28:25:9f:29:f8:
03:88:62:04:d0:a6:8b:d7:48:47:a0:ba:72:3a:e2:9a:b6:62:
c7:b6:0d:ff:0a:95:9b:7f:54:62:4e:be:53:7e:8b:f8:6f:4a:
90:3f:85:1f:8d:a4:47:c6:b3:64:5e:17:0f:62:c5:fe:52:90:
f9:ea:39:bf:bc:28:01:e2:2c:07:13:d0:a3:57:0c:e7:67:d4:
ea:67:2e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:52:08 2025 by rpki-client