Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
File: xv9UHPNkGToqAK2hQkSs00wUA4o.mft (raw, json)
Hash identifier: GIpWPmTHgUVVPS1wcHBuOHSa0KoXL4VGZ61jzuTTLVo=
Subject key identifier: B6:43:88:01:17:A1:92:05:DA:0F:14:8C:8B:F1:50:2B:C5:70:66:3E
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Certificate issuer: /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial: 01974FD7E900218CA5F09160356E905BA514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
Manifest number: 01EE
Signing time: Sun 08 Jun 2025 14:00:39 +0000
Manifest this update: Sun 08 Jun 2025 14:00:39 +0000
Manifest next update: Mon 09 Jun 2025 14:00:39 +0000
Files and hashes: 1: FMgcehrq11NYnach5jymNFMSCJo.roa (hash: 23485LoqiVIG63SHNB561yBglraAa3rXuSfMUv494ng=)
2: h0nRURZObDQGUY3lgCCRW5dgsdU.roa (hash: tHlLzC2mNo3zNr8LZV0r1UgQyBm2/nkWYYJopdfozpA=)
3: jPHsQlGx_ZTE4YgBiHZXwzUhhaA.roa (hash: qBF1JuuPaQkLpju5JJkqO3MhIuKn8gMr+bEddTrSCho=)
4: nvo5kYS5Gt5n8tNt2QdYcZApDBc.roa (hash: zlWPVIjJT4fAh1Xfi/EWmZKxdKql19zmnHIxNlxz2Ss=)
5: xv9UHPNkGToqAK2hQkSs00wUA4o.crl (hash: wNpa0+1lhD24Hg0yl/LZw5NOZKOyz++5E+2QFF/Yg44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:e9:00:21:8c:a5:f0:91:60:35:6e:90:5b:a5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
Validity
Not Before: Jun 8 14:00:39 2025 GMT
Not After : Jun 9 14:00:39 2025 GMT
Subject: CN=b643880117a19205da0f148c8bf1502bc570663e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d3:ec:f1:12:07:db:c5:e4:b7:fd:78:d5:fb:
77:9e:0b:c2:e9:b8:a9:41:bb:f4:f0:66:9a:1f:a6:
e1:3b:6c:86:ba:1a:b1:b6:8b:e6:69:af:b2:71:0e:
53:bf:04:c6:63:74:61:fc:38:83:c4:79:7a:fa:d8:
ff:4b:85:db:4e:33:2d:16:e0:7b:45:e5:0b:41:91:
4c:d4:eb:3f:08:b9:a5:8f:24:78:ea:fd:e3:2d:69:
7d:b8:bf:27:b3:59:3b:ef:9a:23:35:e8:31:37:b7:
8c:e5:56:47:6f:52:eb:03:9c:26:54:79:68:24:13:
78:b1:df:f0:24:37:eb:ac:75:65:24:e9:e6:c9:0c:
cd:dd:82:42:ff:60:1a:21:13:59:64:34:c9:da:18:
37:02:a3:79:c7:86:8b:ee:0a:b7:b2:06:1d:e3:b9:
51:99:2d:a8:93:35:b8:ac:ec:b2:7e:d5:ec:bd:1e:
bf:f8:2e:c3:e2:a2:6e:1a:36:48:6c:1a:ba:75:1c:
dc:ee:10:3d:8f:75:f7:93:ed:8d:42:57:e2:97:f3:
80:74:d0:f7:f5:9b:07:5d:92:b9:b5:6c:b5:37:41:
27:b0:cd:2b:2f:b3:40:70:eb:7a:8d:20:72:11:7b:
d1:61:f8:9d:0a:d2:fa:c1:ea:dc:51:71:16:3d:61:
4d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:43:88:01:17:A1:92:05:DA:0F:14:8C:8B:F1:50:2B:C5:70:66:3E
X509v3 Authority Key Identifier:
keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:44:31:7d:ba:56:ef:5c:83:a8:53:9d:50:30:dd:37:9e:54:
8f:de:5a:93:34:cb:a3:f7:ca:af:36:3a:98:e0:b7:e8:9e:05:
a9:b8:b3:bd:56:ce:50:d9:1c:50:9f:a4:6a:79:00:d2:9f:68:
17:06:15:55:dd:3e:fb:45:e8:c9:f8:68:6b:0c:f9:6c:3a:48:
e4:06:25:52:a8:b9:5e:e7:21:e7:53:85:ae:b5:89:03:38:47:
58:47:ac:51:cf:5b:b3:3b:03:16:39:73:8d:06:c8:9b:87:7b:
68:ed:80:57:ab:f2:89:87:78:f7:d3:a0:cb:d0:6d:aa:c4:2e:
17:42:00:65:ed:74:01:f7:c3:4e:0e:60:27:f2:1c:7a:b2:64:
d0:7e:5b:5c:16:ce:40:23:65:2b:0a:c3:3a:4a:48:5f:a0:61:
e2:d2:9b:a7:6e:95:02:d7:d7:88:a4:ed:3f:0e:46:7a:ed:a3:
0e:e9:e5:e4:de:a7:95:b8:14:51:ee:b1:47:2e:c1:54:07:5d:
b4:1d:ba:45:b0:60:7c:bb:7b:f6:08:fb:21:98:f3:69:8d:63:
21:4d:f7:ca:4a:ce:7d:88:53:a9:aa:03:39:b2:53:e6:81:02:
75:05:ec:80:a3:7c:39:18:7c:47:c1:eb:5c:ae:d3:5e:ff:f1:
c3:69:bc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:11:37 2025 by rpki-client