Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: 862Lw4l9VHzhKvhOtpmvAOCchX40i/NkVq4pJ+mgMUI=
Subject key identifier: 0A:6E:17:E0:14:C1:82:50:72:6C:92:39:2E:9A:31:39:84:FF:1E:4F
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 0197499ED9CCEEC09C63FDB09FF29435778A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 13ED
Signing time: Sat 07 Jun 2025 09:00:36 +0000
Manifest this update: Sat 07 Jun 2025 09:00:36 +0000
Manifest next update: Sun 08 Jun 2025 09:00:36 +0000
Files and hashes: 1: BhzUAWAmqJa_PA-L7yjY7FT9Af0.roa (hash: MUBzsjqvQyVXx3qdpZLrInMDFQqgnqT5UakUiyluBrA=)
2: HCKNxU6TCLkO6DVpZ3lA90mNVKU.roa (hash: Xh6VoAi/B2yrRWzytdRx21/eskMRRaoQHczwQgtUHG8=)
3: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: ehq3YuZ5q5qU80xqToINPkWe0j5WN9CuQox2aH5UMA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:d9:cc:ee:c0:9c:63:fd:b0:9f:f2:94:35:77:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Jun 7 09:00:36 2025 GMT
Not After : Jun 8 09:00:36 2025 GMT
Subject: CN=0a6e17e014c18250726c92392e9a313984ff1e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:9a:71:5c:ac:25:d7:eb:62:44:42:46:8d:
4e:c7:37:46:c7:27:03:cf:b4:fb:8a:55:18:25:49:
20:be:24:93:bc:c5:ab:54:9c:12:73:55:9b:06:44:
fd:af:28:f8:6b:f3:86:16:6c:6d:ae:0e:f7:ea:74:
56:d9:a8:ec:04:5b:1d:be:7f:2e:35:0f:22:f8:54:
9e:d0:7f:e1:67:8b:fc:4a:70:ce:e1:c0:e9:6f:ba:
61:fd:49:9b:b6:8f:a7:b7:2b:4c:8c:4d:7c:d7:82:
36:ee:89:af:b0:0c:a8:d8:fe:6b:02:51:2e:3b:96:
cd:69:43:45:b2:5b:c7:88:a1:94:a0:fa:6a:4b:0b:
6a:c1:82:30:38:06:0d:81:a9:fd:61:27:3e:60:25:
b8:18:d5:3b:0d:cd:8a:08:96:d8:f4:b1:7d:29:f8:
3c:70:98:fc:1f:db:a1:bb:d9:be:97:82:88:65:ba:
b6:11:02:6d:3a:03:c7:ea:a5:49:34:cf:6a:e0:99:
5c:7c:84:81:87:19:bf:86:7c:77:20:dc:2d:70:25:
8a:d0:e5:8b:16:e0:d4:df:d0:44:73:34:86:4a:25:
57:57:a6:b7:b8:b9:2c:ad:01:f5:78:da:dc:f6:b5:
22:2b:62:82:33:79:fc:1c:0c:4a:f1:9e:86:00:27:
8d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6E:17:E0:14:C1:82:50:72:6C:92:39:2E:9A:31:39:84:FF:1E:4F
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a1:c2:8f:80:eb:89:df:eb:0d:75:99:70:5f:26:d4:1b:64:
e8:77:74:a2:38:1a:c2:49:d8:3d:45:7b:52:ab:62:ec:57:4f:
7e:42:85:44:67:2c:9b:9d:87:27:37:da:0a:2c:ef:55:d9:6f:
60:12:21:75:d3:64:cd:5b:b6:03:d2:ab:c4:af:67:06:cb:89:
24:10:30:94:73:89:cf:a2:cb:90:dc:04:f5:2e:09:25:e6:49:
d9:08:e3:53:5c:c9:e0:25:ea:92:1e:5b:b8:11:fd:23:7b:5c:
ec:9d:71:92:59:e0:93:d6:97:ad:9c:b8:6e:64:a6:b2:a4:e4:
a0:8e:c0:18:c4:2b:fb:ef:96:3c:31:5d:9e:0b:77:37:1c:7b:
0b:d1:4e:35:0e:51:72:5f:b4:24:1b:1d:05:c8:53:d2:86:c8:
39:91:5b:3f:e1:d2:b7:6d:ba:9f:0e:17:ac:b3:54:04:73:b4:
17:d0:aa:92:ff:74:39:d1:98:64:9c:24:da:68:15:27:9b:b6:
41:52:3f:ef:cd:9a:80:5e:82:06:ac:3b:62:40:a3:0d:bb:f9:
a0:f9:5d:5a:e9:db:a3:5a:39:2d:9d:ce:ec:ba:be:a9:b5:e3:
d7:f8:d8:5e:a4:4d:42:bb:b6:3d:f6:32:20:f4:2c:ab:21:f6:
9f:ec:ba:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:41 2025 by rpki-client