Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier: lxhroK34TuIfuqEGlZvCc+wJIKgPQaz6EbLAs0bTBZ4=
Subject key identifier: A0:F2:93:68:07:E4:25:01:9C:F9:D2:F5:D9:7C:C8:11:5B:4F:7B:87
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 01975AC93D2AE18CA66EB3DB7E8EB4082902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number: 0572
Signing time: Tue 10 Jun 2025 17:00:27 +0000
Manifest this update: Tue 10 Jun 2025 17:00:27 +0000
Manifest next update: Wed 11 Jun 2025 17:00:27 +0000
Files and hashes: 1: Wk_9wtGClVrtYODuHEtURJ-3oHQ.roa (hash: s/nXb34IkLeKLlmquub76FOlWdViv6YcrY3Wh7bVOcc=)
2: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: 6tKXnFa9CGgLHdyphDe+/W68h1s2ae+RTfOOqbeanUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:c9:3d:2a:e1:8c:a6:6e:b3:db:7e:8e:b4:08:29:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: Jun 10 17:00:27 2025 GMT
Not After : Jun 11 17:00:27 2025 GMT
Subject: CN=a0f2936807e425019cf9d2f5d97cc8115b4f7b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:7e:f2:63:37:fe:f6:47:cd:33:d7:80:a3:
91:13:c9:13:02:9a:f5:6b:4c:05:cb:7d:ca:cd:2d:
77:4f:9d:f2:69:c2:2d:db:5c:bd:71:5b:e2:41:cf:
32:53:c2:23:8d:2f:42:af:66:8b:4a:db:88:7d:fd:
2c:de:c1:ee:a8:f2:fe:1d:3a:20:32:d2:03:a7:50:
96:96:ff:b5:d5:03:29:99:b9:b4:88:ef:d3:07:2f:
a6:4e:58:91:5f:05:02:ff:89:56:e8:71:55:7c:15:
b1:f0:21:57:36:b5:a3:a3:dc:60:cb:be:b6:41:42:
25:26:28:1e:31:8a:d7:d2:87:43:33:d5:32:43:e5:
fe:b7:e6:a5:06:d8:e1:0f:9f:13:c6:3a:00:45:db:
d7:e6:bc:9b:11:38:7d:36:40:e8:16:0a:61:d8:9d:
ae:ab:4b:cb:76:df:37:aa:ea:25:bb:86:a9:34:82:
05:38:33:5e:a7:b8:43:00:ec:b9:4d:bf:a9:4e:72:
af:c2:73:3e:95:e9:65:f0:14:b5:a8:1d:1c:bd:00:
8e:88:17:62:35:1d:80:ec:98:c5:6b:73:2f:56:df:
f4:31:b8:7d:71:f4:df:fd:90:dd:fe:b0:8d:53:0b:
9b:8f:ca:7c:cc:12:c1:a3:a7:fc:91:ba:bb:9a:9d:
07:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F2:93:68:07:E4:25:01:9C:F9:D2:F5:D9:7C:C8:11:5B:4F:7B:87
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fd:af:93:4f:41:cf:43:a1:de:f0:a4:a5:b5:7e:6a:70:44:
a0:82:98:5f:85:40:ca:0b:6d:b2:c6:ef:cf:20:20:61:61:a4:
2d:4c:6d:73:ff:d1:b8:42:08:0a:71:be:49:60:29:6a:72:f6:
76:4c:d2:48:d7:c5:dd:12:b4:8d:7e:3d:80:09:2d:9e:c0:d4:
6b:69:7e:18:27:5f:3b:30:96:99:09:27:47:fa:a0:c3:7d:90:
cc:fd:90:07:84:3c:ed:ae:0d:f8:20:08:b9:d6:5e:31:bd:7a:
3e:75:8a:32:0c:c1:e0:68:90:f5:eb:1c:79:e5:f7:0a:31:d4:
0c:49:62:3b:35:32:df:82:a8:61:59:2e:0c:fb:0f:3a:c2:08:
8f:ca:b4:19:90:d7:2a:e8:9c:56:57:f6:6c:cd:8b:d5:00:e3:
3b:e2:e2:8f:e6:cb:3b:9f:07:24:5a:56:e6:73:c2:af:90:c1:
84:d4:17:0b:d3:1a:da:ec:5e:04:79:5c:b9:c9:7a:0c:d8:58:
46:45:47:5b:ef:68:1f:bc:f2:3f:10:b0:80:67:98:a3:39:fe:
09:99:ff:a1:14:c3:0f:cd:e3:e4:df:3b:31:ef:80:4b:70:d9:
6e:1b:42:ff:dc:76:fe:7f:10:d8:cd:3b:57:55:74:30:20:57:
cc:79:04:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:16:38 2025 by rpki-client