Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
File: XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json)
Hash identifier: A3MELLrQ9rUpKrGB1arnqKmfY5qR+TIQRMszjJBmEvM=
Subject key identifier: DC:3B:EA:8B:65:20:77:99:73:62:56:96:95:64:C3:87:3C:A6:03:F8
Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Certificate serial: 01975046BC6349F594607F9280775CB9F53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 16:01:42 +0000
Manifest this update: Sun 08 Jun 2025 16:01:42 +0000
Manifest next update: Mon 09 Jun 2025 16:01:42 +0000
Files and hashes: 1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: +GMjjRB3FOxsPngZyWFyCMpJqTS86GKsOFGRgMqb81s=)
2: YpoQb4d2ZirnrI3hA0gBb3h8Ui4.roa (hash: xAwvy1eVXmw515xL9f1ayxKoN3gZJ8WiMBC17Avnw5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:bc:63:49:f5:94:60:7f:92:80:77:5c:b9:f5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Validity
Not Before: Jun 8 16:01:42 2025 GMT
Not After : Jun 9 16:01:42 2025 GMT
Subject: CN=dc3bea8b65207799736256969564c3873ca603f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:81:71:9e:d7:24:dc:7a:14:27:cf:34:3e:
42:8f:dd:65:f5:7d:da:a5:86:3f:26:30:0a:36:a8:
33:58:11:ee:d4:75:9f:d7:61:dd:6d:57:30:59:1a:
8c:78:bc:23:9e:9b:9d:3b:85:f4:e2:29:e0:8b:52:
b5:51:71:7c:61:fd:6c:5d:a9:5c:f3:73:8d:96:fb:
e9:50:9f:f6:e3:56:52:23:a2:f2:e3:64:f6:24:d9:
a0:cf:e1:86:11:64:5a:ec:9d:f1:4e:89:da:92:6b:
28:04:40:2f:d1:c1:84:fc:90:7f:c7:ea:83:01:21:
7b:51:1f:b1:9b:75:ad:52:e0:77:a0:85:c5:3c:42:
b6:ff:ad:47:a1:67:32:69:70:87:e4:ac:eb:b6:ca:
02:39:45:de:1f:25:a7:69:6a:65:f4:b9:0d:ca:fa:
e4:6d:b1:e8:99:13:fc:0d:30:76:40:89:75:22:72:
a4:08:79:67:19:b1:0b:ce:ba:ae:71:a5:66:6a:f9:
e2:50:a1:a7:6a:46:fd:4e:3e:bf:69:b2:f4:75:3f:
43:e3:56:84:1b:85:8b:70:71:d4:5b:31:31:dc:bc:
04:74:f0:fd:96:d2:b6:ce:3a:86:8e:e2:1c:fc:48:
bc:89:be:67:82:33:4d:92:03:dc:f7:f8:3f:c6:16:
c5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3B:EA:8B:65:20:77:99:73:62:56:96:95:64:C3:87:3C:A6:03:F8
X509v3 Authority Key Identifier:
keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a4:61:6f:98:93:74:c4:bb:ce:7f:6a:bb:37:66:73:44:9c:
80:1a:37:f1:e2:22:5e:ff:10:3b:c1:aa:7b:e2:f1:b8:c5:92:
0c:19:22:d1:90:c8:b1:59:a4:a3:35:a3:f4:17:35:8d:9d:9b:
44:26:90:73:ed:c8:90:06:a1:e3:2d:c4:a7:6c:e3:de:61:9e:
2b:fb:aa:b1:ab:ea:ed:c1:85:62:0d:9d:45:91:ea:b5:4a:ce:
c4:95:be:e9:63:51:00:2a:04:6e:2d:c4:35:1b:35:30:2d:84:
f0:6f:4a:d9:95:1f:4b:5b:d8:19:33:e0:fb:9b:c4:b8:af:19:
59:b4:7a:53:c3:10:56:a3:b2:ee:d2:d8:b4:ad:82:d4:b0:df:
e6:62:13:27:3d:8d:f7:41:64:40:b5:48:bd:04:b4:29:b7:90:
08:74:4f:52:31:8d:d5:7a:84:fe:b8:6e:0b:6a:1d:8b:0a:c0:
4d:30:d3:c6:65:f3:42:a3:1a:2d:46:50:f0:f8:bf:59:54:22:
5e:5f:58:19:ad:e5:a7:a4:bf:52:9a:1d:52:a9:e5:a6:7b:0d:
cc:ea:0f:bb:e5:06:bc:15:68:01:80:11:43:0a:1f:ca:ad:f9:
c6:27:47:cf:8d:28:26:00:67:54:59:db:29:44:27:8b:53:77:
8e:d1:c1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:24 2025 by rpki-client