Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
File: XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft (raw, json)
Hash identifier: 33RaNsF2Y/8S5fb7B8DsunT+4TOkVc7e79zAWg0CSwI=
Subject key identifier: 92:48:0E:4A:F5:87:C2:AB:89:5F:4A:6B:C0:AB:56:34:83:19:45:55
Authority key identifier: 5D:E4:58:F2:1D:40:64:66:BD:F6:82:40:F5:05:EE:FD:19:7B:A9:36
Certificate issuer: /CN=5de458f21d406466bdf68240f505eefd197ba936
Certificate serial: 019747E7D523F6C663D3A41034DBBD4554D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 01:01:05 +0000
Manifest this update: Sat 07 Jun 2025 01:01:05 +0000
Manifest next update: Sun 08 Jun 2025 01:01:05 +0000
Files and hashes: 1: 8x6SWTgZKaQldoz2iRV_QSdqbtg.roa (hash: LzTLrE8ZLdriPR/s+lretToH9KQur6QiGymJnQCIGiw=)
2: XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl (hash: 6aBLA/hqgkoUYgDCGUZAdTEu4cqi5wRbyQihUwXHgyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:d5:23:f6:c6:63:d3:a4:10:34:db:bd:45:54:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de458f21d406466bdf68240f505eefd197ba936
Validity
Not Before: Jun 7 01:01:05 2025 GMT
Not After : Jun 8 01:01:05 2025 GMT
Subject: CN=92480e4af587c2ab895f4a6bc0ab563483194555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:77:a0:23:10:ee:6c:a6:33:59:12:2c:0c:
27:7e:c0:cf:b6:a3:78:27:d2:92:b4:69:9c:cd:39:
ae:48:00:b3:64:5e:ac:8a:41:20:89:7c:96:b6:a8:
c9:d8:ec:5d:1d:99:4c:6d:2e:78:cb:cf:37:ca:1c:
35:ba:8a:09:e8:a8:d4:27:8f:00:e7:4e:82:72:fa:
0f:81:7e:37:c6:4e:bc:ac:19:6c:30:6d:2f:10:e0:
48:ed:a0:f4:11:f8:1f:32:3d:26:0f:cc:bd:71:c4:
eb:45:65:e6:34:af:0b:8a:72:bb:36:55:38:47:d2:
fa:80:75:2c:c0:99:3d:ca:4b:1c:ce:fc:e7:09:71:
f6:5d:b2:5d:d4:6e:6d:9e:53:2f:ea:98:ac:44:5f:
a6:be:ee:42:1e:30:cc:75:b9:87:c3:fa:a0:29:fc:
93:43:2b:d8:82:8b:2c:d2:64:c6:9b:c9:8b:3f:85:
8f:40:db:50:15:60:05:6f:74:ef:4f:58:0c:15:af:
08:9f:73:22:33:a4:74:23:ac:98:07:bc:3d:6e:95:
08:34:d7:34:71:15:06:32:f0:e9:86:84:7f:73:ba:
c1:54:08:86:43:fb:82:85:9c:eb:76:e9:3a:4f:dc:
28:09:0b:25:02:f5:5d:38:a2:73:8f:a5:3e:6a:00:
56:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:48:0E:4A:F5:87:C2:AB:89:5F:4A:6B:C0:AB:56:34:83:19:45:55
X509v3 Authority Key Identifier:
keyid:5D:E4:58:F2:1D:40:64:66:BD:F6:82:40:F5:05:EE:FD:19:7B:A9:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ad:a0:c0:85:48:8a:38:11:a5:bf:7b:70:12:6c:69:86:08:
c3:ce:a0:ee:a9:d0:c5:a7:08:2f:17:a2:8c:ad:e5:e3:25:af:
f3:85:eb:f6:6d:30:0d:4d:fb:d1:a0:c7:fd:a5:b8:78:65:57:
34:32:7f:19:c6:35:07:a5:7f:69:1f:99:8d:59:e0:17:c3:53:
bd:c6:66:f0:30:3b:ea:90:85:7d:39:35:eb:49:f9:40:0d:f0:
b6:42:23:55:0d:11:fc:18:2d:84:95:f1:75:a6:4a:e8:11:22:
dc:ff:64:0f:d9:8a:15:76:47:16:5f:96:3e:2e:21:75:cf:a7:
01:f1:c6:0d:1d:f0:f2:c7:17:1d:5e:77:1a:c4:e7:9d:ea:c4:
2e:5d:ad:34:30:f4:77:e5:3d:54:bb:f0:f9:5a:ea:03:fb:b9:
ff:c6:f7:9c:c0:33:de:85:b0:4d:15:f5:21:ec:93:af:49:87:
8d:a9:4b:1e:f3:12:e4:20:dc:aa:15:62:e8:24:c2:f3:c8:e9:
1e:21:56:49:6b:a6:3f:24:f5:23:37:74:97:c2:f1:23:46:03:
6a:9f:3f:99:84:a6:d0:92:19:24:f8:b5:19:7b:ad:82:96:e3:
22:4a:f9:e6:a3:54:86:f1:d4:20:e6:2d:f5:d6:73:ab:58:e9:
45:c0:1f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:38:37 2025 by rpki-client