Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
File: x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft (raw, json)
Hash identifier: 1niyT0BiUbJ3ZjBsh02sUyuagKfk6t7ctDKb3yB/scM=
Subject key identifier: 52:29:BD:76:AD:7B:43:18:4B:01:A5:67:3E:CA:6E:4F:D2:4B:83:11
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial: 01974666C0B97A6A45074E936E426FB2B75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
Manifest number: 137E
Signing time: Fri 06 Jun 2025 18:00:28 +0000
Manifest this update: Fri 06 Jun 2025 18:00:28 +0000
Manifest next update: Sat 07 Jun 2025 18:00:28 +0000
Files and hashes: 1: BmvH7Z7uqcJeleMQ8G7clQImys0.roa (hash: lHLdYcAsPsm30xzIk5bUgfaHNZnvFrDG5BK0e9ZCPyo=)
2: x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl (hash: CwwxxQmLy4G61wNHbVR0ZFHnR7S18FVG5rW6ieouw7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:c0:b9:7a:6a:45:07:4e:93:6e:42:6f:b2:b7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Validity
Not Before: Jun 6 18:00:28 2025 GMT
Not After : Jun 7 18:00:28 2025 GMT
Subject: CN=5229bd76ad7b43184b01a5673eca6e4fd24b8311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:85:e4:ee:68:c2:d3:f8:35:ad:e6:05:2e:
b1:03:84:1d:a3:02:d4:d5:55:d9:b5:1a:46:b5:16:
0c:35:48:1a:38:97:07:4c:29:6e:1b:c9:66:8c:b4:
c9:c5:f1:80:f2:c6:a0:74:a5:e4:aa:04:e3:42:af:
95:88:91:0c:30:1f:bb:9c:ab:46:f6:28:fc:2e:b8:
86:f1:f5:8b:45:34:2c:5f:1f:6b:69:1b:51:91:96:
4a:ef:d8:ed:49:ad:b6:74:c9:27:98:50:b4:c7:5c:
19:98:4c:19:5b:d8:6e:de:99:37:a3:c9:7b:86:27:
c8:e8:37:93:dd:07:43:91:ae:a1:c1:82:4e:f1:16:
60:79:3e:c7:5f:71:49:cd:57:03:71:86:ca:8f:5c:
ef:eb:87:83:5f:52:b2:e8:9d:89:d8:c3:67:73:45:
90:2e:6e:f4:11:df:cf:ce:11:2c:d0:6c:89:d9:17:
ee:1d:ee:61:2e:2f:9f:8b:da:24:ff:66:e4:c6:5a:
43:d1:ca:b2:c7:7b:b6:86:4c:bd:df:1e:d1:32:50:
b1:1c:54:f3:69:c9:2f:bb:ec:93:4e:6a:46:87:8f:
46:cf:50:70:34:99:bb:0f:c7:01:75:90:7c:a7:59:
fd:55:f0:b1:5b:6f:44:fa:95:b2:75:a4:de:44:fe:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:29:BD:76:AD:7B:43:18:4B:01:A5:67:3E:CA:6E:4F:D2:4B:83:11
X509v3 Authority Key Identifier:
keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:25:5d:f3:71:23:5f:7c:90:4e:4f:7c:73:e7:5e:d8:d1:b3:
af:d7:bd:9a:b7:12:82:28:d5:75:6f:72:2b:e1:d7:26:33:95:
f9:3b:fc:01:d8:67:3d:1b:ce:c9:e8:22:1c:92:62:18:6b:27:
d8:7f:03:ea:5f:7d:9f:dd:11:ab:10:5b:b4:27:30:88:3e:67:
eb:40:20:72:d7:2a:67:48:b9:2d:07:69:1c:c9:cb:e4:0d:8c:
c3:4a:56:3d:18:cd:e0:33:63:57:41:4f:24:5d:8d:a6:64:80:
87:47:5c:a2:5c:e9:50:58:0b:b9:44:45:c0:4b:31:2e:b7:9f:
ca:4a:fc:77:20:af:b3:2f:12:f7:36:a6:42:ca:d9:34:f8:6d:
74:f2:e1:e4:22:20:6e:b9:94:02:d4:a8:12:e1:d0:ec:3b:9e:
e7:2f:22:c5:88:44:37:17:97:e2:56:43:9e:68:e2:f7:21:3c:
63:63:be:48:30:7f:f8:97:59:56:0f:ba:60:fe:e0:2b:66:6d:
fd:04:d2:5f:69:9c:28:90:6a:4b:5c:1b:1a:48:b7:33:67:bd:
6e:58:ca:a9:77:6e:e6:11:ab:13:89:8e:3d:c3:ce:e9:8d:63:
59:6e:3d:cd:9d:46:8a:cb:7c:d0:f5:04:45:79:2b:39:eb:d7:
64:90:89:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:46 2025 by rpki-client