Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: Xmd+jYEVWctEH1Gtb6L6vntmrJeVStyLYVbrk8Gat/4=
Subject key identifier: F8:E0:DB:B9:E6:E1:DE:D4:6F:3C:F1:39:52:D5:4E:CE:5D:BD:91:7C
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 019739F49E270947DBB91F60304560FD3A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 1576
Signing time: Wed 04 Jun 2025 08:00:21 +0000
Manifest this update: Wed 04 Jun 2025 08:00:21 +0000
Manifest next update: Thu 05 Jun 2025 08:00:21 +0000
Files and hashes: 1: LTquGO6JvOxW-LYJu4ZO5vl58sw.roa (hash: v+hhHffkC8MxjORjl69a74aTRaVaz0829ZGGCSWHn0k=)
2: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: Tx3kV1AnHp8xj5dWmuZ+Cp02JbBV9lqF/xIvPt/ZXdY=)
3: YOp8_XwcgPGtX480oZMMv5FkFTE.roa (hash: JNbcPg+eKKH2RwoC8Uz9lo+3KmcraBTljIvma3VhA6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:f4:9e:27:09:47:db:b9:1f:60:30:45:60:fd:3a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Jun 4 08:00:21 2025 GMT
Not After : Jun 5 08:00:21 2025 GMT
Subject: CN=f8e0dbb9e6e1ded46f3cf13952d54ece5dbd917c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:96:ce:e3:4e:21:c2:09:ff:0f:50:fa:fa:8b:
50:fd:e6:d1:f5:12:b7:45:b0:9c:b2:b3:b6:a8:95:
0f:87:d6:71:a4:1a:3a:e8:ae:ad:a1:ee:ac:42:80:
1d:99:73:26:13:b5:2c:ca:75:57:f7:75:99:24:40:
42:90:3c:27:15:38:d3:49:60:71:a3:7f:fc:54:b9:
d1:70:a2:42:28:b1:7e:bc:28:b0:26:b4:1f:0b:3d:
1b:e7:62:2e:e0:6a:f5:9e:04:77:45:4a:81:1d:28:
e9:c5:6e:30:28:9e:e5:6b:d4:31:0e:1c:37:20:e1:
d3:0f:93:28:fd:29:a7:f8:42:21:01:82:55:c5:b9:
50:aa:8d:ed:ee:53:81:d2:11:75:84:2e:fa:65:27:
09:61:64:03:9e:91:8c:d4:2d:01:86:9a:42:6b:d5:
ac:e6:09:02:b3:be:6f:00:cd:49:ad:bb:ca:f4:5d:
3d:c7:a5:dd:fe:36:f2:06:d8:af:4c:bb:a0:4e:1d:
ee:39:d3:fb:8c:1f:dd:9a:75:62:66:de:b2:45:96:
3a:3e:4c:a7:05:3e:50:4b:1c:31:30:ae:3b:a8:f9:
b6:54:f9:99:ea:39:12:8f:83:fb:37:4b:3f:fd:a7:
bc:6e:54:6b:e7:d3:7d:c4:84:46:4c:2e:14:be:be:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E0:DB:B9:E6:E1:DE:D4:6F:3C:F1:39:52:D5:4E:CE:5D:BD:91:7C
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:bb:ff:04:41:e9:50:b8:e1:7b:39:82:5a:1a:f7:84:48:17:
cd:67:d9:22:37:28:f8:e2:80:05:60:30:9a:72:d7:45:38:84:
21:13:02:7a:3b:52:d8:70:4f:88:1d:ad:54:09:98:a7:9f:66:
62:56:e7:39:f0:f8:5d:1b:03:ec:0d:56:07:81:f5:ba:ba:9a:
2a:a8:b9:17:70:d3:4c:25:70:30:9f:c8:a6:60:53:cc:90:25:
7d:50:b7:0a:f3:a5:de:99:36:11:53:72:0b:4d:ee:eb:f7:c2:
0b:57:91:51:83:ca:f4:9c:4a:4f:e9:4d:56:b2:a6:c0:9e:90:
05:9e:ba:ef:3f:88:80:88:5b:7b:27:a5:7e:a4:7b:b2:29:2d:
d6:d5:b9:b6:70:f6:06:fe:e3:1e:51:00:bb:23:72:0f:b1:39:
0f:0c:f8:d7:64:92:02:cb:a3:c5:a2:45:e7:ca:bb:02:12:51:
22:e3:d4:1b:a6:92:18:d5:5d:e3:39:da:be:d3:3b:56:99:3a:
12:0f:5a:11:e1:d6:47:42:7c:94:08:a8:aa:1b:bd:72:73:30:
fd:d5:9b:42:42:59:dc:44:67:01:bc:34:93:44:74:26:7a:3b:
2a:46:01:0c:db:96:2c:2e:f9:89:35:94:ef:5d:92:95:14:d6:
59:fa:c0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:07:08 2025 by rpki-client