Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
File: XfJyIcGPyv50iSvA6Xv17nw0T6c.mft (raw, json)
Hash identifier: bbZU9MzgD9z6eVUGgzw5dJ2GNVrQ3suRkVq801XdEio=
Subject key identifier: BB:18:96:DD:01:2B:67:E6:47:14:39:1F:42:87:BE:FF:40:C9:52:F9
Authority key identifier: 5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7
Certificate issuer: /CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7
Certificate serial: 0197526B799A8717ADEEE9B4481F16056C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
Manifest number: 0B6C
Signing time: Mon 09 Jun 2025 02:01:04 +0000
Manifest this update: Mon 09 Jun 2025 02:01:04 +0000
Manifest next update: Tue 10 Jun 2025 02:01:04 +0000
Files and hashes: 1: D5MLLXN4CceB_y0IsVIPz32Ea_c.roa (hash: C5Fky/sLD5/418lsfJMNs8+3fuwIak8zmx88JyIH2s8=)
2: XfJyIcGPyv50iSvA6Xv17nw0T6c.crl (hash: NXlgrHZ7doRjMwHOPBRpcf4GvHEui9qJI4+Ojz0iVFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:79:9a:87:17:ad:ee:e9:b4:48:1f:16:05:6c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7
Validity
Not Before: Jun 9 02:01:04 2025 GMT
Not After : Jun 10 02:01:04 2025 GMT
Subject: CN=bb1896dd012b67e64714391f4287beff40c952f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1e:51:30:a3:92:39:91:34:ca:c4:76:65:a8:
48:7c:1a:ca:17:d0:7d:d6:24:7f:3c:83:f3:b7:86:
23:59:f7:77:db:4c:a4:95:4b:28:07:99:96:6a:f0:
d4:ce:85:e8:57:4f:98:d6:ba:a3:e2:39:72:dd:01:
60:10:c2:8e:7e:7a:99:c1:04:ef:8a:4d:f1:00:e5:
47:72:c9:bb:ba:e0:b5:9b:60:e5:f8:71:20:fd:25:
ab:1c:0d:91:62:8e:21:0c:f3:44:37:b8:0f:ff:c9:
19:84:e9:0f:54:05:13:83:58:9e:83:26:c2:03:3a:
0b:f3:60:4d:f1:a4:b1:09:30:0a:07:0a:5d:00:b5:
cf:d5:07:4f:e9:94:55:fb:d7:49:81:67:8b:49:58:
2e:8f:c1:3f:84:fe:af:1f:ce:ff:dc:07:06:b2:60:
d5:86:d7:20:9b:4a:69:99:1f:53:ad:6c:21:a6:81:
f0:b1:f9:2d:8f:b3:c6:b5:0d:25:45:f4:42:fc:5d:
6d:25:25:4c:9f:44:1f:d1:04:6c:58:6a:3c:24:58:
ff:fe:41:a9:fe:10:47:cb:23:e0:9d:50:f5:62:04:
ca:56:e0:da:b7:d0:1a:33:0f:7e:09:08:b6:8c:54:
a7:8f:23:ea:da:5a:b8:98:9f:d8:2f:35:c9:56:3f:
2b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:18:96:DD:01:2B:67:E6:47:14:39:1F:42:87:BE:FF:40:C9:52:F9
X509v3 Authority Key Identifier:
keyid:5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:20:01:7d:42:21:2e:ff:15:47:32:ba:42:a3:1a:55:0f:c6:
c4:e3:bd:bc:68:d3:06:ea:5d:9e:42:40:b7:94:19:7e:7b:5e:
1c:ea:92:91:25:b0:03:6a:db:80:21:2d:6c:9b:f3:28:7e:f6:
11:ea:ea:29:75:a6:7d:37:19:6b:1f:5a:4e:51:c6:30:ea:71:
fd:08:b4:86:40:41:41:16:96:c1:43:cb:c9:07:c9:8f:98:7f:
48:27:9c:7e:ac:48:5c:6f:36:d7:60:37:f8:fb:d3:ab:66:64:
aa:c9:48:84:a9:fc:5d:3d:63:7a:e9:05:d4:bb:9c:8c:3b:45:
1c:10:6c:9d:12:22:d0:04:64:3f:46:5c:c8:5c:47:15:f1:f2:
db:c6:c1:24:91:20:0c:58:f8:12:a3:0a:da:21:2a:4a:56:73:
ed:00:7b:8d:76:05:e3:ce:6e:f0:bb:35:fc:ef:2c:37:97:0a:
19:5b:6d:c8:bf:cd:92:b3:37:ff:68:22:d5:e4:81:4b:94:ac:
2d:f2:0c:c4:a0:0b:b5:81:c2:0e:a3:18:42:2d:0d:7e:9f:4b:
dd:d6:e6:5e:bb:f8:d6:dc:1f:d2:b2:33:81:12:64:33:07:aa:
e5:1a:b6:ce:02:cd:ff:0a:b1:bf:f8:d1:8d:18:e0:24:8b:d7:
9a:14:89:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:18:19 2025 by rpki-client