Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
File: xrxZ-PdUTx6lulwYs44lc1F8kTI.mft (raw, json)
Hash identifier: 1RC7srFv7GmHrjBfKb5peox4xG4owGYESrvvmMWMo1k=
Subject key identifier: 5B:5E:2D:F3:1D:7C:B2:05:9F:86:60:2D:B6:04:C6:2D:68:B5:69:9D
Authority key identifier: C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
Certificate issuer: /CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Certificate serial: 01974D0E32CE3E992F11821FB5C0AAE28FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
Manifest number: 04A7
Signing time: Sun 08 Jun 2025 01:01:05 +0000
Manifest this update: Sun 08 Jun 2025 01:01:05 +0000
Manifest next update: Mon 09 Jun 2025 01:01:05 +0000
Files and hashes: 1: 6MomF24SoPaNk6ERP73wy8mqx3c.roa (hash: IjQTHFK2Z40w4CuSFshJCdouXIm82jCIjL5J78qv4kA=)
2: xrxZ-PdUTx6lulwYs44lc1F8kTI.crl (hash: ZTNdqxQIMMLLWRSFgJSf6Y7zxhVeJa498HX3SClbGvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:32:ce:3e:99:2f:11:82:1f:b5:c0:aa:e2:8f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Validity
Not Before: Jun 8 01:01:05 2025 GMT
Not After : Jun 9 01:01:05 2025 GMT
Subject: CN=5b5e2df31d7cb2059f86602db604c62d68b5699d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:2f:df:bb:3d:8e:a3:f5:4a:c7:10:4a:69:
20:b5:ad:d8:c9:64:93:d6:76:da:6a:4d:6f:df:1f:
54:45:ee:d1:9b:c4:43:a6:a3:b0:05:db:e7:82:be:
2e:9d:2b:7e:66:64:84:70:c2:03:eb:88:79:f2:75:
f1:9e:51:e4:1b:97:0c:f3:00:0b:79:34:eb:e0:cd:
56:79:31:c1:ee:d9:3e:37:85:c5:bd:55:8f:3f:43:
1e:9f:74:40:3c:a3:58:51:f5:bd:63:ca:ce:c6:5b:
b9:20:b4:f9:f0:0f:7d:fa:7e:ab:db:b0:d1:00:86:
53:c5:0a:6a:54:2f:55:b8:52:9c:7d:76:cb:f5:79:
d4:54:2a:71:1b:05:bc:dc:fa:c3:ab:61:c3:ee:be:
ba:09:ca:da:25:ae:15:28:f2:fe:2a:f7:1c:af:98:
fe:bf:5c:a0:e9:35:8b:cc:2d:18:2f:c6:7a:f1:85:
ef:14:71:26:41:6b:b2:4d:29:d3:6d:bb:c0:de:26:
a9:87:57:85:99:ff:27:13:27:87:a7:88:1c:00:c7:
63:55:05:66:99:42:3e:1d:71:46:22:12:b1:93:a1:
d3:78:82:c8:cb:8b:4f:53:c4:96:35:98:bf:60:dc:
ae:4b:d6:2a:23:b9:ae:3a:d8:ac:ca:93:90:0e:fa:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5E:2D:F3:1D:7C:B2:05:9F:86:60:2D:B6:04:C6:2D:68:B5:69:9D
X509v3 Authority Key Identifier:
keyid:C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ee:38:87:4f:b9:12:75:5a:77:e2:70:a8:44:9b:b0:5e:4b:
6d:cf:05:4d:ba:a8:90:b0:92:23:17:24:44:c1:0a:be:47:1a:
a7:c5:21:d9:83:0d:dd:6d:1e:56:8d:f5:bb:d5:66:2f:ac:81:
a2:c6:4d:3d:30:8e:fb:92:ee:a5:89:26:78:75:57:8e:4c:7e:
78:91:eb:a8:12:ed:a0:c3:f5:69:20:f4:c6:7e:09:75:0c:27:
bf:88:93:af:3c:d6:76:cc:f8:ec:4b:04:f0:4a:de:1e:1e:9c:
1f:ae:b2:0c:d3:a0:f7:08:7f:1b:c1:b9:fa:3d:4b:ec:c7:a9:
fe:82:de:b0:7d:78:6c:8e:04:bf:0e:fa:04:e0:d7:ab:5b:3d:
d9:be:fa:2e:68:87:5d:ea:0d:51:32:22:03:a5:a4:a6:25:43:
ff:e8:fd:6c:e1:80:27:60:f3:e7:02:fc:79:43:49:85:8d:8a:
36:0b:27:e0:f4:36:5b:6e:d6:f2:0f:e5:b4:e4:52:ab:87:ac:
fe:03:3d:3d:53:62:78:98:a2:0d:a6:91:6b:6e:02:a9:00:6c:
c2:01:8c:66:38:c2:aa:c8:da:00:c1:36:ff:77:2d:90:ca:a8:
57:12:85:cb:d7:ba:0c:08:dc:86:88:1f:2b:bc:59:4f:59:97:
00:96:ba:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:52:22 2025 by rpki-client