Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json)
Hash identifier: OnuDCysSQHphw7yBrivy640O6ZkWvm6S/uIF6nchWEQ=
Subject key identifier: C7:A7:39:35:A5:84:D8:0F:D8:AF:AD:1C:CF:F0:AF:2F:C5:51:36:70
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 0197692A164251F3F20AA44A91F9FD16604A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 12:00:55 +0000
Manifest this update: Fri 13 Jun 2025 12:00:55 +0000
Manifest next update: Sat 14 Jun 2025 12:00:55 +0000
Files and hashes: 1: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: Fwp01wqBfTH18xMSaTyaukuInBWuOu38uR4xd6ZopHQ=)
2: aOlQW-HjiTaqNC1rxfk_lAkcv5A.roa (hash: ECnqpiibCaw2wJdogaxFoaIJMNjyCvBElHPR6vh8uaI=)
3: r0sx0dKkFtH5IxbLaEsFdTPr2X0.roa (hash: EBn7sEe1WosQ18UNra4vN2152bj1ofOm+tLWvyXPfXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:16:42:51:f3:f2:0a:a4:4a:91:f9:fd:16:60:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Jun 13 12:00:55 2025 GMT
Not After : Jun 14 12:00:55 2025 GMT
Subject: CN=c7a73935a584d80fd8afad1ccff0af2fc5513670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3b:1a:38:24:c4:2b:e1:27:5e:64:e3:1d:e7:
6b:31:c5:26:ea:35:4e:8f:cd:13:db:86:ad:73:82:
af:5b:6e:a5:f6:eb:27:c3:79:cf:08:5d:64:e6:e8:
39:bd:af:74:1d:bb:b1:0c:80:1a:61:84:e2:66:23:
ae:30:c3:3a:38:6f:a9:d3:2c:cb:03:55:07:4c:49:
34:0d:0b:98:73:8b:43:76:27:da:65:d5:15:d0:8b:
96:1c:a7:f2:d5:db:14:b4:8f:83:66:5e:83:00:50:
cb:3e:41:04:bb:84:bf:ac:5f:8e:d8:99:bb:93:7e:
60:48:1a:51:7b:7b:ef:d9:be:64:5e:b2:22:a6:c9:
12:84:4d:64:dd:00:be:59:54:ff:a5:8e:25:76:cc:
b2:e7:7b:8a:fa:3a:ab:59:7c:da:91:fa:3c:06:ca:
ac:86:04:06:e7:aa:9e:c9:ea:6b:4c:58:a6:e3:f9:
62:22:36:31:b3:b1:30:fe:e1:ca:06:2a:f6:c6:24:
50:74:cf:4d:ff:f4:fd:d3:0a:c2:73:d5:42:f1:43:
a7:99:ec:b1:39:09:34:ec:32:07:8f:97:fe:bb:5d:
de:f9:b7:8b:78:5c:36:fd:49:0d:ec:fa:0d:47:3e:
3b:52:aa:12:c4:d2:37:07:88:45:8b:f1:4d:ce:14:
04:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A7:39:35:A5:84:D8:0F:D8:AF:AD:1C:CF:F0:AF:2F:C5:51:36:70
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:39:04:4c:1a:0d:d6:b4:da:7c:96:64:66:2a:af:50:cb:2c:
ea:72:ff:d5:36:96:24:f8:37:c6:bf:99:0c:21:40:9e:f4:59:
5b:e7:4c:c9:a6:55:8a:45:8c:33:f8:fe:c4:93:b7:a1:9b:8a:
68:bb:b4:f2:18:88:8c:30:54:30:39:c6:fc:0a:02:f3:32:22:
8e:ad:75:ea:fb:5a:cc:84:69:b0:34:f1:82:0a:8e:bc:1f:ea:
62:8d:88:a8:2c:54:da:0e:54:ac:33:52:70:32:3e:4e:f7:bd:
c4:8f:2b:7e:72:65:d8:fd:ee:b4:b4:c7:ad:d9:ec:ad:99:8c:
73:18:7d:2b:61:69:9e:c3:76:e6:71:d9:89:79:f2:c9:83:a7:
3c:5f:d3:0e:00:5c:fa:ca:67:70:e7:07:02:5f:89:c9:c9:ca:
3a:20:f6:f8:11:a7:23:f9:6c:5f:0c:42:87:44:b5:b5:8f:99:
02:ca:06:37:bb:1a:23:a4:f7:72:c5:f9:5e:75:cf:6d:73:f1:
09:f7:69:b7:cf:68:aa:5e:df:3c:cc:e1:61:d9:e0:fa:a0:4c:
e3:25:bd:4d:8d:2f:7a:48:4d:aa:d1:13:a0:25:75:30:f1:00:
be:30:ff:59:1d:b9:c0:67:2c:b5:3d:b1:5e:f1:2d:e1:a5:a5:
05:60:cd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:54:12 2025 by rpki-client