Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
File: XLtvfRHev55LqLH2nDg7j8PErhI.mft (raw, json)
Hash identifier: X8HZ3O1llVt54/OO1RhZMfJhY8rug95hhNdBcJcEPko=
Subject key identifier: 01:F1:AC:3B:48:1A:FD:E7:8D:B4:76:69:90:F8:D8:5D:14:83:E0:9C
Authority key identifier: 5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
Certificate issuer: /CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Certificate serial: 01975158FEF869BFD6C3A0920AA9B983A37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
Manifest number: 09A6
Signing time: Sun 08 Jun 2025 21:01:16 +0000
Manifest this update: Sun 08 Jun 2025 21:01:16 +0000
Manifest next update: Mon 09 Jun 2025 21:01:16 +0000
Files and hashes: 1: GeKBRab06m2Sa_WEDlm2vrbqt80.roa (hash: rshNYrEYAk6Ccd9rs6FmkxFoBRIeaz8vJy7lI8MW13k=)
2: XLtvfRHev55LqLH2nDg7j8PErhI.crl (hash: 2NnMwnqxn5AmGbcQemauML1dHbh5xUbywLrzGJHmI14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:fe:f8:69:bf:d6:c3:a0:92:0a:a9:b9:83:a3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Validity
Not Before: Jun 8 21:01:16 2025 GMT
Not After : Jun 9 21:01:16 2025 GMT
Subject: CN=01f1ac3b481afde78db4766990f8d85d1483e09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:68:d4:fe:a2:7b:df:58:5b:d4:d1:49:aa:97:
6d:05:72:6c:35:74:a1:8f:5e:62:01:c5:ae:02:4b:
ee:38:66:ef:b6:c2:ee:39:24:3e:c0:44:83:1c:b8:
1b:59:dd:7a:57:b1:92:d4:a1:00:db:3e:f0:0b:49:
a3:3a:f3:c3:4e:ec:dc:e4:d8:2b:24:a7:6d:87:48:
54:6c:ed:cc:5c:06:3f:f4:12:6e:96:a8:86:a6:e6:
98:36:7d:6e:24:00:e7:fd:b3:8d:5b:d4:93:f5:6c:
33:9e:34:ad:f8:21:67:6b:b9:99:38:98:3d:a4:92:
25:b9:f1:b6:08:16:0f:90:bd:83:e3:06:03:23:0c:
a3:30:4a:4a:4c:ae:5c:da:ca:d1:57:a4:38:c4:0d:
34:52:4a:13:84:99:97:68:87:9e:44:b9:b9:28:2a:
66:da:e4:b1:53:27:51:19:67:66:9a:49:e0:54:7b:
19:14:c2:b1:09:02:dc:44:35:21:99:78:5c:70:b7:
52:84:83:6d:cf:dc:28:ba:16:c7:31:34:3a:cb:18:
5f:31:76:f2:e9:4c:ac:ec:e8:09:7d:bf:6f:5a:24:
a2:ef:74:ee:96:e2:63:20:ff:ec:34:f1:a9:dc:76:
39:28:b1:f1:b9:c7:fe:d6:3d:b2:6a:41:c0:4a:19:
7e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F1:AC:3B:48:1A:FD:E7:8D:B4:76:69:90:F8:D8:5D:14:83:E0:9C
X509v3 Authority Key Identifier:
keyid:5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1a:bd:3a:5e:8e:93:19:4b:08:4a:18:38:66:5f:9c:2b:1b:
22:95:de:e4:26:6f:b5:81:81:fd:0c:05:4d:cc:fe:f2:a8:30:
8f:a2:51:1c:3c:40:a7:d2:f5:ae:66:05:0d:17:9f:4f:58:f9:
79:89:1b:fe:2e:18:34:07:c5:19:15:fd:f6:d7:b4:fe:e1:a5:
29:f3:94:35:ee:de:39:f9:2f:f6:54:47:a7:99:d0:e5:c0:70:
df:df:f3:26:47:71:20:10:5b:60:03:2a:cf:88:d1:3b:8e:c8:
71:68:a5:17:ab:6b:1a:0d:0f:f5:41:49:57:77:cd:3b:3f:58:
4f:67:57:bf:67:f3:c3:e3:91:03:a4:1e:ce:24:fd:2b:24:3d:
10:a6:8a:09:ab:90:4c:6b:6c:30:1c:0b:52:bb:0d:ee:a9:35:
7f:6b:cc:09:ca:4f:33:55:1a:68:b2:b2:b1:12:ff:1f:a9:ac:
9e:11:2f:57:28:30:56:cb:d2:21:62:a1:49:81:a9:ed:72:46:
b6:18:d9:fd:27:53:bc:5a:b7:82:dd:aa:20:c5:67:65:ec:8b:
5a:1b:b9:46:18:50:17:22:83:2e:5f:76:b7:02:e3:f7:8a:ed:
c4:08:a0:e7:90:e4:e6:01:23:2c:2e:93:18:41:51:a0:41:f4:
fa:6e:31:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:56:23 2025 by rpki-client