Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
File: XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft (raw, json)
Hash identifier: nUjMtMbbAPpLvCMKIfH570JkjILg4SsQmmIsv3DXxpc=
Subject key identifier: 71:1C:2C:39:C3:B8:92:D0:02:BE:C0:BF:66:16:B2:78:5C:63:E5:64
Authority key identifier: 5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D
Certificate issuer: /CN=5e803b66b306008fb172c2dfd522b5655057360d
Certificate serial: 019750EA6D7E5F7A1228B669A5158FEEBE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
Manifest number: 11A0
Signing time: Sun 08 Jun 2025 19:00:30 +0000
Manifest this update: Sun 08 Jun 2025 19:00:30 +0000
Manifest next update: Mon 09 Jun 2025 19:00:30 +0000
Files and hashes: 1: Bu2qohV5DT207In6bmDkzPkl22w.roa (hash: yQgjgxJo0jD6Zb5Cbl39m04H6+9TPpDsNpPjtFWzK98=)
2: XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl (hash: g4fahfat2YA9j9taEDs6molZHTt1T6y2EBBnqtHdZIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:6d:7e:5f:7a:12:28:b6:69:a5:15:8f:ee:be:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e803b66b306008fb172c2dfd522b5655057360d
Validity
Not Before: Jun 8 19:00:30 2025 GMT
Not After : Jun 9 19:00:30 2025 GMT
Subject: CN=711c2c39c3b892d002bec0bf6616b2785c63e564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:28:95:7a:5b:4b:06:b7:c8:21:bf:ee:1d:
71:da:21:9e:0d:1c:ba:e5:e5:a3:86:b7:f0:dd:83:
4c:1b:f1:e1:a2:a8:be:f5:65:62:ab:bb:50:33:36:
67:92:a9:f6:57:2c:03:cd:a2:b4:a7:bd:dc:17:70:
1f:70:94:db:87:98:59:ee:cc:5e:ec:97:ad:54:e5:
4e:7d:2f:00:46:45:19:4d:ad:d0:6d:3d:9b:43:89:
53:cd:0f:9f:c2:19:76:09:b1:30:40:32:8b:49:11:
da:d9:f9:9c:fb:0c:a1:2c:09:56:bf:bc:ee:04:f1:
d7:ed:c6:5e:04:74:06:43:97:c8:a1:db:61:1a:02:
eb:77:55:eb:76:94:e5:ab:9e:d4:ec:0e:b5:65:09:
db:97:0f:78:12:6d:d8:56:0c:6a:47:fc:1e:fc:e8:
cc:59:60:70:1f:bc:6e:cd:af:81:d8:dd:c6:ba:56:
b4:fc:e2:c9:5d:9b:8f:7f:8c:16:6a:ad:50:92:4d:
5e:23:c9:14:dd:74:d2:82:50:ef:89:51:54:36:36:
71:67:f9:e2:ff:29:e2:b2:7e:29:1e:6b:0b:e9:b2:
66:0f:e0:e7:07:a4:31:b3:c1:ba:db:71:d6:8e:2a:
6f:90:49:5e:46:65:5e:7d:93:ef:8b:52:24:d2:8a:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1C:2C:39:C3:B8:92:D0:02:BE:C0:BF:66:16:B2:78:5C:63:E5:64
X509v3 Authority Key Identifier:
keyid:5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cc:03:79:b0:61:65:86:d6:d8:6d:7c:43:b8:51:44:a5:bb:
04:bf:38:87:4c:11:23:80:a6:c4:ed:9e:81:1d:4e:47:63:ae:
e6:ad:61:5e:51:5e:7c:60:89:ba:04:c7:31:a3:94:03:6a:d0:
23:19:43:b6:9d:b5:c7:7f:a9:1c:7f:9a:7f:b0:a8:e9:fe:71:
c1:b5:c2:f8:1d:6b:99:cc:f3:54:5c:26:10:1d:95:39:52:91:
51:c7:da:5c:1e:3e:1d:45:3b:a3:7a:7d:7e:5d:49:48:52:06:
93:84:ed:22:8e:66:20:d1:43:70:69:ac:68:80:9f:b4:e8:ea:
16:a4:3a:a7:48:b8:d3:2c:5e:89:ee:95:61:f3:5c:69:7d:c0:
18:3e:07:39:56:26:92:60:59:45:48:df:f3:f5:8d:2e:c4:a4:
5a:a3:48:6a:ad:27:f4:b4:8a:eb:17:72:42:d6:64:05:74:ec:
5f:66:84:7e:5f:6f:ef:89:2c:16:f4:d1:93:f5:f9:57:5f:18:
35:32:17:7f:73:b4:3c:64:54:54:8a:2f:95:95:c0:de:09:f5:
87:db:6f:34:3b:f9:05:1f:c1:90:ce:ae:08:92:ab:59:54:64:
ba:f7:e7:7e:8c:c0:f5:d8:92:20:0f:ad:26:05:7c:75:db:0f:
1e:bf:2f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:03:03 2025 by rpki-client