Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
File: xg_8qdjKCPIT5goASMF_uwv2Dnw.mft (raw, json)
Hash identifier: Qx94Pb3QufWhqlZDDP6dttP+pRa0gc2D+SmFkEAx6fo=
Subject key identifier: 3D:FA:DC:24:D3:BE:88:77:73:C6:68:09:BC:36:59:B8:7E:B4:B0:A0
Authority key identifier: C6:0F:FC:A9:D8:CA:08:F2:13:E6:0A:00:48:C1:7F:BB:0B:F6:0E:7C
Certificate issuer: /CN=c60ffca9d8ca08f213e60a0048c17fbb0bf60e7c
Certificate serial: 019745C2780FB6AF82FA722F7BF717B5CD15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 15:01:01 +0000
Manifest this update: Fri 06 Jun 2025 15:01:01 +0000
Manifest next update: Sat 07 Jun 2025 15:01:01 +0000
Files and hashes: 1: 11lEAhEOetLxn95SvRSXh-Lluqw.roa (hash: ReOSLE0b85HJRKU+RZhB6Hf7GgBYtQi4K1hsRO89zys=)
2: xg_8qdjKCPIT5goASMF_uwv2Dnw.crl (hash: B+TP+a4Xr1aC3bKFD92K1WnHYnH37yxI9z+VjcfIbh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:78:0f:b6:af:82:fa:72:2f:7b:f7:17:b5:cd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60ffca9d8ca08f213e60a0048c17fbb0bf60e7c
Validity
Not Before: Jun 6 15:01:01 2025 GMT
Not After : Jun 7 15:01:01 2025 GMT
Subject: CN=3dfadc24d3be887773c66809bc3659b87eb4b0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4d:d2:f4:7e:f9:4b:9c:a8:39:19:34:e3:79:
38:e4:c9:22:4b:09:0d:d5:57:dd:fa:f6:a6:fc:9b:
f5:a8:f2:00:ce:cd:d1:cd:b4:20:37:54:7b:a9:22:
3b:25:f4:ee:04:5a:b7:21:c6:4e:93:05:4c:74:02:
4b:bf:0c:c2:6d:47:c7:75:bf:16:b8:eb:92:b6:96:
86:44:4a:ec:23:bd:48:c8:b2:32:77:58:5e:de:f9:
e5:ff:4f:9b:12:fb:45:c3:e1:b0:4f:86:00:23:8c:
a2:73:21:87:9a:4b:8f:23:72:67:e7:3b:b9:e8:1c:
7e:76:29:95:e2:4d:cb:1b:6b:04:f8:03:1c:96:59:
91:d5:4d:38:b7:30:0e:b0:ca:f8:1b:da:9c:33:19:
e5:5a:a8:a0:b5:00:d2:00:02:5d:1c:15:f3:60:60:
58:0d:58:37:67:ab:6a:a2:37:e6:c2:8a:c1:28:85:
71:1b:23:b3:1a:ad:8f:25:8b:43:96:82:a4:17:8e:
b3:d9:9d:87:a5:13:32:a1:61:3a:92:0d:be:60:e2:
6a:c0:e6:e8:f6:cb:74:22:d3:7b:91:d9:89:37:66:
21:f8:03:d1:71:c2:f6:3d:aa:08:2e:98:fd:91:de:
70:82:c4:e1:3c:e3:b2:94:0c:57:5a:05:6a:69:03:
12:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FA:DC:24:D3:BE:88:77:73:C6:68:09:BC:36:59:B8:7E:B4:B0:A0
X509v3 Authority Key Identifier:
keyid:C6:0F:FC:A9:D8:CA:08:F2:13:E6:0A:00:48:C1:7F:BB:0B:F6:0E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:97:20:ef:62:47:a8:72:c7:49:6c:c1:2e:21:ea:a9:21:ba:
cf:23:6a:1b:e2:c5:ac:01:ea:43:15:95:d4:8d:ad:17:72:ea:
63:69:d3:50:ab:52:70:a9:c8:7f:da:0d:05:59:1f:f1:60:d4:
44:f1:4c:5d:5d:a6:17:13:76:06:8a:25:86:20:d4:93:0d:61:
de:53:7a:55:50:17:b9:bf:01:e5:e8:77:3b:de:45:c6:d1:c8:
ab:d0:7e:c2:9d:e6:03:8f:5e:89:7c:e0:cf:17:56:46:02:e7:
6d:5e:ca:64:78:83:8c:cf:9f:7e:97:11:bd:57:6d:cc:e6:93:
fb:b9:cd:df:71:d8:fe:fa:10:87:ec:fd:fa:98:5f:53:b5:9a:
64:b1:d6:37:17:1c:10:04:93:99:91:26:0c:8a:79:8e:ab:ec:
02:20:2b:79:e2:b8:3f:11:ab:e0:3b:b2:8e:83:19:24:f1:90:
0d:a4:7c:63:ae:79:12:bb:38:d2:76:a8:52:e9:de:b3:65:f0:
f7:39:54:4e:41:f2:48:9e:1b:ec:5f:88:30:54:d5:ba:1f:fe:
6a:d2:8a:56:84:78:53:3a:70:89:cd:f7:ad:9b:04:47:a6:35:
00:a0:45:d0:73:08:02:c5:d0:7c:e8:5e:51:84:8b:43:b2:c9:
42:6c:19:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:16 2025 by rpki-client