Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
File: XICE2xnxE9gbZEg5P60cEyxYT80.mft (raw, json)
Hash identifier: TeO5Fce235D4PsMJnQcMal+5Czh8TJpLHVpnpjn3b/o=
Subject key identifier: B1:08:8A:8D:BB:1D:2F:2C:54:C7:7D:2C:8D:85:86:D7:25:E7:F4:48
Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd
Certificate serial: 0197477A2B977E1592623C6F7C35C3078E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
Manifest number: 0E7E
Signing time: Fri 06 Jun 2025 23:01:18 +0000
Manifest this update: Fri 06 Jun 2025 23:01:18 +0000
Manifest next update: Sat 07 Jun 2025 23:01:18 +0000
Files and hashes: 1: RopsaNkgpHpRL2oKJRAlnWazjYk.roa (hash: hePdDKhYq7jZJBW0X9xyUlZ0MuRDMypI160xH9eb0s0=)
2: XICE2xnxE9gbZEg5P60cEyxYT80.crl (hash: ucTtfhw2p/mr4DSspE9UkaeWGixkqcfxF5n8An7H56g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:7a:2b:97:7e:15:92:62:3c:6f:7c:35:c3:07:8e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd
Validity
Not Before: Jun 6 23:01:18 2025 GMT
Not After : Jun 7 23:01:18 2025 GMT
Subject: CN=b1088a8dbb1d2f2c54c77d2c8d8586d725e7f448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b8:4d:f3:d2:a3:44:ea:29:d0:2e:c2:cb:24:
0d:70:c5:65:55:d6:41:f0:2a:5f:c7:d4:01:92:85:
f8:47:c4:08:1b:e6:7a:0f:50:fe:4c:d7:28:51:3b:
74:d9:44:23:39:57:41:75:ab:b8:6d:40:5d:ef:8c:
88:22:7a:1f:e1:8f:98:10:eb:98:19:54:51:8e:ce:
c2:6d:61:97:62:01:0d:8d:48:71:e9:eb:52:1b:24:
b8:35:cb:e8:c1:e7:b7:2b:78:a8:42:85:a8:94:3c:
be:b6:44:9f:38:2b:a3:9b:40:a9:35:7c:23:34:f7:
ee:7d:07:41:6c:08:e6:95:33:d9:9e:d1:99:b2:db:
70:f4:bd:9c:f7:94:c7:ea:73:d3:38:6e:ec:9d:6b:
4b:bf:02:14:8f:da:b5:ee:7b:42:67:e7:56:70:72:
61:4e:b6:25:dd:84:ee:fc:39:6e:32:d0:ef:26:3d:
5c:72:29:3d:b1:e1:cf:58:18:f9:8d:60:24:9a:47:
4d:7a:26:10:ef:f2:72:50:27:b6:62:e9:40:99:9a:
ff:d5:6e:93:06:d2:ea:20:dc:48:65:ca:0f:94:5b:
88:ab:cd:85:aa:e3:3b:3c:3c:59:30:47:96:9f:7c:
ca:8d:5a:36:10:7f:dd:aa:2f:1b:2d:8b:65:ad:a7:
48:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:08:8A:8D:BB:1D:2F:2C:54:C7:7D:2C:8D:85:86:D7:25:E7:F4:48
X509v3 Authority Key Identifier:
keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:cc:4c:11:e2:85:f1:26:98:23:9d:42:e3:c7:2f:c4:6e:74:
a0:64:0a:ce:d8:e3:fe:86:9d:9c:1b:ad:30:20:e4:a4:f8:11:
68:87:86:33:a3:de:d1:31:fc:c8:7b:e3:cc:52:5b:d1:fd:65:
5c:00:b3:18:69:7c:70:f1:ce:a7:10:fd:b7:c1:eb:89:3c:43:
c2:de:c2:39:24:24:fd:74:c4:50:16:44:ca:49:3d:0c:2c:8f:
aa:d6:56:ee:38:57:16:fc:6c:4e:2b:2b:24:bc:88:56:d8:b8:
4c:3a:a8:3a:1c:c2:53:8e:4c:e3:0c:57:8f:bb:22:3b:90:98:
c1:0e:d2:c6:0b:3f:f1:8d:7d:ae:55:f5:01:e5:f5:ef:13:17:
3f:0f:7e:e5:e0:93:55:d0:0c:34:65:03:29:17:8d:a4:52:5c:
a4:71:a1:36:ab:dd:58:dc:f3:89:7e:6c:d8:8d:69:de:aa:74:
bc:9c:d2:87:20:3f:d7:cc:be:28:0d:03:5f:08:da:79:fe:14:
24:fc:76:2a:66:83:7b:b5:0b:44:e6:54:c3:68:31:e1:49:bf:
0e:10:9a:bf:55:4c:1d:b8:b4:9d:b1:d7:a0:48:7d:07:fd:45:
eb:79:2c:7a:62:e0:5d:20:3e:7a:73:39:8e:99:8f:37:ac:22:
6e:da:98:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:54 2025 by rpki-client