Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
File: XqFlPhd6opVUAIBcjHW9DWhYOvw.mft (raw, json)
Hash identifier: tBu5L7/bVOFokT983z6m5vqSnbiqpzr+ehZiT8bs+Ww=
Subject key identifier: 95:F9:E0:CE:77:3E:3B:EF:FA:35:58:34:2B:B3:AD:2D:DE:E3:3D:6E
Authority key identifier: 5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
Certificate issuer: /CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Certificate serial: 01974E8E8E0BCCC0DAA60D907C81BE813B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
Manifest number: 0A0F
Signing time: Sun 08 Jun 2025 08:00:54 +0000
Manifest this update: Sun 08 Jun 2025 08:00:54 +0000
Manifest next update: Mon 09 Jun 2025 08:00:54 +0000
Files and hashes: 1: XqFlPhd6opVUAIBcjHW9DWhYOvw.crl (hash: btvAYOb5x52oLDtwNEGcg5t0soGn2578dybyTd3aWsQ=)
2: pG0gZB0nkw3GnTji0o-IVbuNrD4.roa (hash: viA8g+053tZ6I/BKlBgt30tnVs0+WwkriBcMwHPLKm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:8e:0b:cc:c0:da:a6:0d:90:7c:81:be:81:3b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Validity
Not Before: Jun 8 08:00:54 2025 GMT
Not After : Jun 9 08:00:54 2025 GMT
Subject: CN=95f9e0ce773e3beffa3558342bb3ad2ddee33d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:24:d6:28:0f:3f:6f:b8:64:01:8f:4e:c6:f5:
25:f1:e3:45:41:b0:14:fd:1d:f3:69:ae:a2:b3:f1:
46:08:cc:d9:99:4e:ba:e6:d6:b2:f6:06:6e:b5:34:
a8:ca:c8:7f:b4:46:fd:ec:c7:77:d2:72:98:75:0c:
dc:4f:06:a2:35:f2:1d:2f:74:f0:5f:a1:28:f2:fc:
ef:7b:67:b0:94:01:4a:57:39:90:9c:6c:22:a0:7e:
ad:47:fa:13:d3:f3:8d:0c:8e:e3:15:d5:d4:e0:2b:
45:c9:32:4d:46:c7:e5:da:9a:1e:f4:00:d0:06:56:
5a:de:29:19:ff:d1:01:e4:7a:60:53:44:5f:a4:41:
68:9b:c3:32:a5:88:3d:a2:bb:d9:ff:03:43:8c:0d:
bc:a2:e6:e3:3a:ad:22:a9:15:52:6a:83:66:ba:38:
af:ac:13:ec:90:95:f0:54:11:7c:24:66:e8:00:00:
6f:53:43:fe:8c:f0:73:2e:01:7a:80:63:a7:af:ba:
03:04:d5:17:65:62:d4:9e:86:49:a9:e6:0b:11:6f:
cf:5a:e0:a7:17:df:71:55:53:f3:a3:12:4b:e8:9c:
bc:8b:2b:56:ce:34:06:23:f1:02:99:e5:f8:7a:c4:
83:74:a6:12:4c:35:e2:e4:fb:30:46:8f:ce:37:99:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F9:E0:CE:77:3E:3B:EF:FA:35:58:34:2B:B3:AD:2D:DE:E3:3D:6E
X509v3 Authority Key Identifier:
keyid:5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4f:34:1d:33:91:98:ff:a9:32:6a:52:7d:ca:01:61:ba:c0:
83:f6:b5:d4:a6:13:5f:b8:be:bb:a8:1a:df:88:15:53:c9:f9:
72:d4:6a:7e:f0:94:e0:cd:37:09:30:ab:c7:d6:8e:1f:fe:8a:
0f:ad:1d:0f:9c:2b:21:c9:96:bc:7d:db:58:09:5a:ea:52:ab:
18:f9:06:be:38:2f:4c:5d:90:5b:30:5f:ff:48:cc:53:f4:11:
81:3b:a8:18:37:f7:b8:e4:4e:5d:ec:c3:81:1b:fd:48:8f:f0:
7b:0b:9c:05:1b:c6:f0:10:79:1a:99:d7:5f:ce:d3:b8:4b:ac:
44:c2:46:c1:ac:a6:ef:70:74:07:59:e3:5d:b2:b5:6b:c2:3e:
bc:bc:34:26:c6:00:16:7d:32:98:01:b4:53:7f:f6:3c:52:7f:
2f:f7:6c:e5:9d:1e:fe:5e:10:67:3c:e3:ed:dd:a9:a2:a2:51:
cf:04:30:32:b7:e2:b7:02:27:1e:ea:b9:98:79:fa:5c:12:7f:
a7:54:fa:ac:2a:c3:a7:ac:4a:ec:56:d8:af:af:96:26:c1:d1:
7a:e4:d2:d6:16:32:a8:33:68:49:75:1e:c8:2c:0d:e1:54:54:
27:c2:78:ae:4d:eb:8f:8f:55:00:7e:2b:29:f4:1e:10:fa:0a:
c7:9a:fa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:25:34 2025 by rpki-client