Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier: LvQvU2Jq44DQlkP8FoSKAYrRURiiwJkUFApTft+p7KI=
Subject key identifier: DB:F6:5E:5E:C9:13:AB:81:DB:7C:09:24:55:A1:95:93:59:88:CE:D4
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 01976094A097DFCA40B8DF6B62DBDE4B4E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number: 0575
Signing time: Wed 11 Jun 2025 20:00:42 +0000
Manifest this update: Wed 11 Jun 2025 20:00:42 +0000
Manifest next update: Thu 12 Jun 2025 20:00:42 +0000
Files and hashes: 1: Wk_9wtGClVrtYODuHEtURJ-3oHQ.roa (hash: s/nXb34IkLeKLlmquub76FOlWdViv6YcrY3Wh7bVOcc=)
2: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: RpgmsrCergenJe0+alv94GGdqDEhbqCR0PHb2fhWjxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:94:a0:97:df:ca:40:b8:df:6b:62:db:de:4b:4e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: Jun 11 20:00:42 2025 GMT
Not After : Jun 12 20:00:42 2025 GMT
Subject: CN=dbf65e5ec913ab81db7c092455a195935988ced4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7b:2a:40:b0:8c:64:6e:c0:c7:21:11:6a:f5:
0d:fc:35:e9:36:29:66:72:33:66:5f:7c:19:71:76:
06:d3:3d:ae:b3:a6:3f:4a:38:cf:51:fd:2f:63:a8:
79:89:4b:49:2a:94:42:db:5d:3b:60:5c:0e:36:46:
d9:13:7d:b9:ed:ff:b6:af:8a:3e:cf:9d:87:62:e1:
b9:db:3b:b8:c2:f3:22:68:c4:be:b0:33:86:84:99:
09:f6:33:fc:7c:6e:24:ab:7f:82:b8:f5:73:c3:cd:
f9:fd:ff:0f:78:25:c8:61:f3:10:20:af:49:2e:c2:
4e:58:71:ce:58:c4:3a:8e:05:c1:10:22:ba:24:4f:
22:fc:8f:71:e7:86:fa:b3:04:21:ac:0b:ba:77:51:
8e:e1:c2:9c:7c:49:8d:96:48:8a:a5:69:69:a0:33:
34:50:8a:b4:f1:45:2b:54:5f:9a:c9:35:a6:11:07:
90:39:5d:93:3f:40:2b:6e:12:72:36:32:37:e6:95:
2a:04:b3:72:f4:fd:5f:1c:08:0d:ec:7c:a1:c0:47:
6d:3a:96:9d:3c:b5:5d:e1:d6:3d:f0:15:30:d4:f8:
4c:ab:eb:d5:de:68:e7:db:b8:09:75:f6:46:f3:29:
2f:16:80:d4:c2:42:cd:90:22:69:52:ef:c7:80:4c:
85:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F6:5E:5E:C9:13:AB:81:DB:7C:09:24:55:A1:95:93:59:88:CE:D4
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8b:d6:e1:9a:ae:f6:98:43:49:4f:dd:b3:39:39:c9:ce:a6:
08:de:50:e6:45:d6:59:47:f9:61:ec:44:7e:d2:1a:b0:2c:63:
15:71:2c:b6:24:89:22:c5:45:67:1c:62:56:09:ae:5b:66:d5:
84:6b:86:1b:54:7a:b1:f4:42:d1:47:db:b8:6b:25:cb:6d:08:
9f:9a:33:6b:03:ff:bf:a9:29:d1:55:06:0c:de:de:95:9d:07:
91:1a:2c:18:69:50:ea:22:fb:68:72:1c:12:f2:d4:7b:5c:a4:
1b:c4:87:c5:7e:89:44:75:6a:54:eb:65:c4:4b:51:e4:4c:41:
87:29:14:33:35:2c:02:4d:8f:4f:b4:c3:bc:ad:a2:9b:b2:7b:
79:8b:24:c5:0f:70:98:00:ac:35:91:9b:69:8a:07:41:57:0b:
be:f3:04:e3:b0:94:07:33:14:9d:47:8e:a2:d0:6c:9d:ea:ca:
d3:3e:a5:cb:5a:27:66:43:ef:ed:7c:6d:d7:7a:18:80:90:1e:
ce:65:8a:0c:9e:e4:0f:44:c6:12:d0:d2:dd:2e:f4:b4:f5:e2:
7e:5d:14:a9:54:f1:c6:e8:a5:cc:68:e5:f1:25:c5:d5:d7:49:
aa:3f:8f:7a:2c:f3:74:24:a7:17:62:3e:e2:bb:e5:35:41:5c:
f4:fe:17:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 01:24:19 2025 by rpki-client