Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: wxgYVd6HLm/XWUMCSu43/cVz0XRfbyU3gIMcn0F4mBc=
Subject key identifier: 3B:0E:32:E1:02:6A:30:C7:F3:ED:4F:E2:F2:27:40:19:CD:72:F0:52
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 01974E5866E78CB9BFFA55F2BFAF47CAAF04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 113D
Signing time: Sun 08 Jun 2025 07:01:45 +0000
Manifest this update: Sun 08 Jun 2025 07:01:45 +0000
Manifest next update: Mon 09 Jun 2025 07:01:45 +0000
Files and hashes: 1: 1ylHoCjP82H2cRlJcKOWxCiIA9s.roa (hash: c062Fjrkbud1S9wrUUG9+yQLXJvgcVhnwrbsUatXzgg=)
2: 6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa (hash: mnVCxlV7vM9sKmc4seeqVJ1+v+wCWGn9k8XntKlO+8E=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: SmBg25OkpFeB4ptVnRVj0s6R8vG/xeDv+BpnYlxw0Os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:66:e7:8c:b9:bf:fa:55:f2:bf:af:47:ca:af:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Jun 8 07:01:45 2025 GMT
Not After : Jun 9 07:01:45 2025 GMT
Subject: CN=3b0e32e1026a30c7f3ed4fe2f2274019cd72f052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:67:2c:17:7a:64:5a:b4:cb:62:19:6d:9e:d9:
a7:09:65:d1:ca:e1:ed:0a:23:cd:0e:ab:5f:1e:70:
86:9e:b2:40:6b:08:cf:b2:eb:61:65:55:fb:51:54:
aa:6f:a3:a2:f4:33:b3:6d:6e:ca:b9:77:77:8c:cf:
78:19:e3:4c:72:cb:75:28:10:e5:b3:dc:63:57:f1:
85:fb:bb:ad:94:9d:96:07:0d:c1:4f:20:57:07:d9:
3d:2c:25:b9:39:97:b2:7a:78:e9:c6:ed:5b:24:d7:
4a:5b:0b:36:56:5d:0c:a3:9a:92:da:24:4a:19:7e:
6c:e0:29:0c:cf:e9:ef:5b:1f:b5:4f:34:b6:35:90:
da:11:79:fa:8d:99:b1:db:db:b2:fd:13:4f:04:21:
2c:83:46:18:94:cb:85:3d:4c:33:29:88:15:1d:8a:
17:8d:9a:c3:c4:83:cf:a9:71:3e:82:72:8b:20:dd:
95:c4:63:08:93:15:89:8e:a3:7f:8b:c4:53:34:5b:
73:8b:4a:37:01:a8:2b:b3:42:f4:13:33:2e:71:a0:
66:52:01:c9:8d:f7:d6:74:a3:63:8d:cc:2d:3c:1b:
dd:c6:2a:a6:ff:bd:dc:67:10:9f:71:7c:1c:1d:f1:
4e:a4:95:f5:e6:cb:bb:97:b0:64:21:ba:19:fa:57:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0E:32:E1:02:6A:30:C7:F3:ED:4F:E2:F2:27:40:19:CD:72:F0:52
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7e:f5:70:b1:a6:a2:de:2e:7b:f3:be:8a:7c:ef:b9:50:53:
f9:77:9c:6a:b8:48:45:d1:b0:21:c5:2d:1b:82:6d:9c:16:ca:
ab:4a:1c:86:4b:65:65:36:2e:fb:bb:fc:2a:93:87:9b:0f:e1:
20:1d:30:d7:ed:a6:aa:c6:00:f8:20:24:93:c1:91:67:f4:f0:
dc:d5:1b:c8:54:e0:dc:2c:eb:17:86:dd:22:54:34:23:89:1b:
0f:8d:37:45:be:3d:40:f6:dd:f8:bd:aa:54:e5:a2:ed:ae:df:
7f:8b:fa:52:91:8b:09:f8:1e:ff:a5:e1:c2:f6:7a:50:12:5c:
2f:81:f3:66:90:d7:b6:44:13:3e:4a:f8:86:5d:a9:dc:c2:4e:
61:ba:d3:94:a3:ec:9b:0a:86:8f:72:13:af:fe:ab:d1:b3:0b:
93:d3:47:8c:6e:2b:b5:fc:30:08:b4:5e:ca:fd:d8:54:fd:e6:
0d:0a:77:67:52:06:3c:29:50:91:7d:1f:1b:09:2a:fb:c9:6f:
a5:9a:2d:cc:d3:c6:e4:d6:82:0e:4a:d8:10:05:9d:75:29:c6:
e6:92:55:92:bb:e1:3a:79:a9:cc:48:8a:47:a0:96:ad:74:88:
77:be:cf:17:89:d3:25:bb:94:77:c5:41:1d:35:c8:6d:5e:32:
33:e4:fa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:40:10 2025 by rpki-client