Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft
File: XEzh8ZMxT2k5vxw_nawjafYpWFo.mft (raw, json)
Hash identifier: xnpyVjSdPk72DO3pvdSXMj/xxGvttDb+nnYiy4yCm9k=
Subject key identifier: 31:7B:66:D9:CE:50:4C:F1:CF:24:CC:81:BE:E7:02:BA:6A:AB:75:7C
Authority key identifier: 5C:4C:E1:F1:93:31:4F:69:39:BF:1C:3F:9D:AC:23:69:F6:29:58:5A
Certificate issuer: /CN=5c4ce1f193314f6939bf1c3f9dac2369f629585a
Certificate serial: 0197481E33C42366395FFC5D84543C866FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEzh8ZMxT2k5vxw_nawjafYpWFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 02:00:28 +0000
Manifest this update: Sat 07 Jun 2025 02:00:28 +0000
Manifest next update: Sun 08 Jun 2025 02:00:28 +0000
Files and hashes: 1: NeVlE-PzPHn5ppNlSgj87PhylgM.roa (hash: +i1WA9cuFFrQg1WFh0BGIYlKWMIvdmOqwrDe9C8B0aM=)
2: XEzh8ZMxT2k5vxw_nawjafYpWFo.crl (hash: QIBu0lN5nDHWNG26DRVDVE/cLFux3U7J2liHcqcDIN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEzh8ZMxT2k5vxw_nawjafYpWFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:33:c4:23:66:39:5f:fc:5d:84:54:3c:86:6f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4ce1f193314f6939bf1c3f9dac2369f629585a
Validity
Not Before: Jun 7 02:00:28 2025 GMT
Not After : Jun 8 02:00:28 2025 GMT
Subject: CN=317b66d9ce504cf1cf24cc81bee702ba6aab757c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:65:f0:43:51:11:bb:6b:e9:89:e5:c0:dc:
f5:f5:59:3e:95:d0:0d:65:81:25:12:b7:c1:83:f7:
e5:58:91:fe:53:74:67:b1:19:b7:c1:21:d3:b8:cf:
e0:1c:dd:ad:70:0c:ca:30:c7:94:01:95:da:fa:ad:
9a:77:34:52:f1:fc:f4:21:26:b1:fa:bf:b0:35:1e:
31:64:29:c2:d7:35:8e:17:b4:a9:40:65:65:e2:e4:
47:ed:a0:88:11:d3:19:20:e0:f4:03:65:f5:13:bf:
7d:fe:b5:65:65:50:84:dc:3e:f5:90:f5:c8:d9:fb:
89:6f:34:c8:31:cd:77:c7:59:b0:c4:93:37:a8:43:
f4:cf:5e:61:ec:5e:45:36:ff:a3:e8:9d:0c:94:7d:
00:3f:8e:8c:4c:c7:a2:fc:cb:b3:44:33:62:15:b5:
9c:3c:b7:80:cc:40:22:8d:98:21:ff:7d:17:b8:58:
3e:e1:87:47:38:f8:43:31:7b:e4:fd:58:f5:83:4f:
90:7d:99:66:d4:f6:d5:43:ed:78:d0:f9:15:06:b0:
2a:b5:58:c5:5b:b4:21:ab:12:87:f0:c1:79:1c:b2:
0c:18:4e:75:07:9a:23:7a:4b:6b:70:d1:cc:47:6c:
04:45:03:e6:5e:ce:f8:52:90:96:f0:18:15:91:e8:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7B:66:D9:CE:50:4C:F1:CF:24:CC:81:BE:E7:02:BA:6A:AB:75:7C
X509v3 Authority Key Identifier:
keyid:5C:4C:E1:F1:93:31:4F:69:39:BF:1C:3F:9D:AC:23:69:F6:29:58:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEzh8ZMxT2k5vxw_nawjafYpWFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ff:85:4f:b2:2d:1d:0e:b3:d0:f0:40:78:fc:c0:21:da:c1:
8e:d8:17:db:77:fd:3a:f9:5d:5e:36:01:cb:05:a2:26:59:04:
77:3a:09:50:06:15:4e:c6:92:bc:35:13:05:90:f8:5e:4e:5d:
db:1a:38:ba:0f:f5:90:c3:9c:02:d7:4c:59:6a:ba:36:06:90:
a6:ea:03:b7:a3:81:16:2a:a4:8b:15:71:2c:ad:17:aa:0e:f9:
85:d6:93:ad:f9:22:e1:38:f2:bf:5b:e2:4a:41:1d:51:c9:67:
df:d9:12:9a:0f:f1:2d:f9:53:0b:2c:5f:d3:20:4d:a7:a8:f9:
5c:8e:ba:6d:65:e9:0b:d1:95:d2:06:a7:a5:5e:01:6b:f0:18:
4b:62:e1:04:49:1c:67:20:c3:f0:e4:57:09:d6:91:3d:3c:82:
0d:65:3d:b7:61:9c:6d:aa:8f:ba:21:0d:f5:d7:e6:73:ea:a8:
b5:b4:68:ed:75:ef:d5:9c:e3:7d:d0:c0:fd:38:c7:6c:6c:09:
53:81:f6:77:93:c7:32:6f:46:40:39:e8:22:c5:6f:e6:1d:fe:
07:8e:89:b9:b7:33:2d:cd:de:ff:13:43:f2:f5:ac:45:fb:e0:
ca:cc:53:4e:3f:f8:fc:c4:65:dc:8b:f7:34:5e:c6:60:37:df:
6e:c8:33:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:30:55 2025 by rpki-client