Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
File: xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json)
Hash identifier: 9lVQebgHcEd+qHrD8opRAORsTrx+vS0/qlMOhDvhHD8=
Subject key identifier: 65:45:28:92:ED:75:CC:38:18:A9:77:63:72:F7:77:90:D8:B4:E6:CB
Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Certificate serial: 019750466B57C6E849AB094DB4CE20568D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
Manifest number: 0A39
Signing time: Sun 08 Jun 2025 16:01:21 +0000
Manifest this update: Sun 08 Jun 2025 16:01:21 +0000
Manifest next update: Mon 09 Jun 2025 16:01:21 +0000
Files and hashes: 1: O93k6bKhYCgLqm1pwPcFwndFJfc.roa (hash: mGQ92ARMuHfH2tnd6YZOf6zGRFHFURqcW968Yoazf28=)
2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: T5z0FTQ9NN+DMyQMeIdG1pp59hHXjb7U7lpMb46miUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:6b:57:c6:e8:49:ab:09:4d:b4:ce:20:56:8d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Validity
Not Before: Jun 8 16:01:21 2025 GMT
Not After : Jun 9 16:01:21 2025 GMT
Subject: CN=65452892ed75cc3818a9776372f77790d8b4e6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:8f:d7:64:78:0e:18:0c:ce:80:1e:13:56:
02:c3:d5:a0:7f:20:28:e9:d4:ce:8a:29:db:ad:df:
95:5f:34:ce:91:42:3e:74:bb:d1:56:86:6f:32:0f:
d4:00:3a:2a:9c:99:1d:e3:10:ee:62:b4:db:3c:54:
cf:54:c8:24:dd:ae:b0:c3:42:9c:64:d5:2d:4f:08:
1d:8b:85:9f:dd:92:9a:72:56:42:56:08:dd:11:f6:
6d:2f:8e:ad:d3:b4:0f:40:93:78:b0:e3:b5:1c:09:
ff:32:55:fe:aa:16:4f:63:d0:f3:1a:ff:f1:b6:7b:
4a:b3:a4:e5:9b:29:ff:ba:ac:0d:40:4f:f3:84:fb:
d2:93:15:e6:79:a7:c6:6e:02:08:55:46:1c:4f:80:
81:e5:cd:46:63:1c:e4:9b:0a:bb:61:d1:4e:9d:92:
01:af:f7:c8:79:ea:9b:8a:fd:0a:4a:1b:74:4e:3f:
aa:81:dd:60:2d:05:d1:70:00:dd:d9:c7:2f:9a:72:
76:be:df:9b:22:f0:20:08:81:b4:44:f3:6f:6c:5c:
95:8d:60:f1:9f:23:0c:00:4f:2a:fa:d0:05:06:18:
dc:e3:ed:c4:ce:8a:81:7d:c4:f4:c4:df:04:67:df:
e8:17:29:07:73:09:fe:02:fd:d7:cd:79:7b:f1:ff:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:45:28:92:ED:75:CC:38:18:A9:77:63:72:F7:77:90:D8:B4:E6:CB
X509v3 Authority Key Identifier:
keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:47:75:4c:fa:fb:4b:7a:f5:b6:59:c1:7e:ec:19:bf:40:9d:
d2:6b:a5:63:1b:bc:b6:f4:5d:86:04:68:dc:83:51:4d:4f:6b:
73:18:79:2e:3c:ca:8f:ec:3f:28:ca:8a:3c:e3:51:ee:8d:df:
f1:37:f8:12:3b:e5:cb:7d:72:29:87:4c:46:e6:8b:89:2e:aa:
47:31:55:79:aa:0a:ce:79:ce:77:ae:6b:4c:e3:df:f5:bf:bc:
1e:2f:dc:cb:64:1c:77:67:69:d2:b4:46:00:66:29:fb:88:ea:
97:51:85:7e:88:50:02:0f:c2:e3:ad:b1:dd:92:75:79:f0:c1:
24:1b:f4:b5:f4:4c:11:a9:ea:fa:9e:a5:3f:e2:19:92:50:83:
ca:32:61:51:46:5f:37:ac:22:84:06:a1:fb:38:e5:a9:90:6c:
10:2f:2b:d3:09:7f:72:2b:ae:db:27:9b:d0:43:25:3b:05:a1:
85:89:c3:54:dc:dd:6c:fd:cb:26:91:d2:e2:4c:d6:19:d3:98:
88:b7:58:87:d9:b0:27:2d:09:9d:4a:26:13:9c:51:64:84:94:
47:63:22:a2:c2:a3:b0:8f:57:ed:35:c5:92:69:fc:b1:f7:9b:
78:25:7b:9b:7e:ef:70:e2:d3:a8:35:76:5f:4f:8b:30:a4:ca:
63:79:69:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:23:52 2025 by rpki-client