Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier: tex/xxz6B7d3zUqa5bZjgIop1U+eZ0Wbn3Ds7X8UI/8=
Subject key identifier: 21:87:AC:6C:5F:E4:57:B3:56:BE:57:C6:44:E1:14:9F:90:7D:30:99
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 019754FE3731177F9B71A25394B1E1D5D37D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number: 056F
Signing time: Mon 09 Jun 2025 14:00:35 +0000
Manifest this update: Mon 09 Jun 2025 14:00:35 +0000
Manifest next update: Tue 10 Jun 2025 14:00:35 +0000
Files and hashes: 1: Wk_9wtGClVrtYODuHEtURJ-3oHQ.roa (hash: s/nXb34IkLeKLlmquub76FOlWdViv6YcrY3Wh7bVOcc=)
2: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: lcJ5oDNoUjF74ArNGmTFZtiBmqxSyKVFXEkRdrpQtkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:37:31:17:7f:9b:71:a2:53:94:b1:e1:d5:d3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: Jun 9 14:00:35 2025 GMT
Not After : Jun 10 14:00:35 2025 GMT
Subject: CN=2187ac6c5fe457b356be57c644e1149f907d3099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:79:c9:3b:56:4d:76:04:a7:26:85:43:03:
38:ca:d6:b2:57:67:02:c0:cd:82:49:b3:bc:f4:60:
cd:07:37:b4:67:53:80:04:b6:fd:f2:9f:fc:dd:38:
a1:6f:d5:ef:02:47:4a:c9:05:96:20:41:4e:e4:3f:
84:2b:38:fb:e4:d4:f0:f8:e6:71:a6:8f:b0:22:7c:
c0:36:12:c7:f8:d9:8b:83:cf:ca:74:35:c8:d6:d4:
9b:85:f5:57:e2:a2:bc:0c:bd:e2:96:94:5a:68:2d:
35:97:7e:c5:9e:e0:ba:17:47:1a:6a:75:9a:e1:40:
d1:59:c7:05:48:80:0b:80:14:bb:b3:ea:11:79:50:
d2:cb:73:14:fa:9c:a6:6e:07:05:9a:92:c8:1e:f4:
b7:f1:81:5d:42:4a:d2:ff:ef:4c:f6:35:c9:21:e5:
94:30:af:67:ef:8b:f5:61:f1:c7:0f:fc:ff:d8:d7:
c2:bf:e4:a6:14:76:8e:c9:34:f0:88:ee:af:34:68:
93:80:54:7e:c3:9e:5e:0d:47:53:33:32:c3:f8:65:
b5:2b:76:b4:f0:54:7a:2e:3b:89:ef:d8:d7:54:a7:
bc:40:bd:a7:d9:b1:90:c2:9f:04:79:84:28:35:80:
f9:2b:c1:e3:c2:f2:c7:ee:bc:ae:6f:ba:19:e7:54:
33:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:87:AC:6C:5F:E4:57:B3:56:BE:57:C6:44:E1:14:9F:90:7D:30:99
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:86:4c:27:59:77:a4:15:f0:04:a4:e4:cc:70:69:4b:d5:e6:
d8:c0:4f:85:d2:61:78:7e:56:46:24:23:68:d0:57:79:1a:7f:
cb:65:8d:a2:29:2e:4c:7e:d4:7d:eb:cf:35:7c:c1:ae:48:bc:
b0:49:e2:8f:c8:c9:88:82:cc:46:e1:9f:29:4c:d6:c0:12:1b:
15:d3:f6:08:e0:08:c8:0f:c8:f9:dc:b3:65:6a:dc:17:2f:42:
a6:cb:43:34:10:2c:2a:9c:48:7b:f0:7a:71:43:a1:8d:4d:bb:
2f:58:d2:c9:20:45:a5:e6:49:71:c1:88:3e:fb:05:bf:49:9f:
c9:d7:d3:ed:40:b5:f1:41:cc:0c:de:36:ec:14:b1:4c:f7:5a:
28:eb:4e:d8:ef:40:d0:bc:41:78:a5:3e:70:8d:d0:13:1b:4c:
12:4f:39:2c:75:27:1c:a2:ee:51:61:cf:6a:89:2f:36:53:5e:
75:0f:24:af:c7:40:39:89:28:4c:b8:d0:42:c0:ae:9d:a9:43:
47:80:fe:6d:b2:21:a1:4b:11:ce:4f:f3:d4:d9:67:39:bd:11:
29:23:b1:e7:f9:97:b3:97:ee:b6:4d:8a:dd:98:95:aa:f0:17:
8f:67:29:5d:dc:3e:9a:d4:57:28:44:e6:c3:14:58:e1:56:66:
a8:1f:e0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:43:49 2025 by rpki-client