Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: X/PS0Stw16nm2N67tkEaXLVWtHF/3DhcHxg/7+XD9s8=
Subject key identifier: D9:DC:70:B2:DA:81:08:2D:37:EE:5F:35:5E:38:7A:FE:C6:BD:E3:1B
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 019745F9435EA712FA5A225C5A95060E2078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 0594
Signing time: Fri 06 Jun 2025 16:00:52 +0000
Manifest this update: Fri 06 Jun 2025 16:00:52 +0000
Manifest next update: Sat 07 Jun 2025 16:00:52 +0000
Files and hashes: 1: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: VZHGZoAsllJHc7PN3Sb9y6r7U7Ibf9RlLPWCdXJKl88=)
2: bmXZpHHxtrkVL17e18KvIxTw5lc.roa (hash: 8ICDtcdjlLyMFFUIIbeNdV9LHsXmbPFx6BjBW2piZ4U=)
3: vQFumMlickMAeqfmQnyl7TY_Pzg.roa (hash: fsxJlhkOiwS8utSdO9amMMp5rJDtdsaC3KUWPM6ffgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:43:5e:a7:12:fa:5a:22:5c:5a:95:06:0e:20:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Jun 6 16:00:52 2025 GMT
Not After : Jun 7 16:00:52 2025 GMT
Subject: CN=d9dc70b2da81082d37ee5f355e387afec6bde31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:62:f4:e5:f6:15:77:39:d7:a1:39:06:79:
a1:41:a4:86:e2:58:0d:fb:19:af:63:df:a8:e5:39:
ac:92:f2:3c:be:36:ae:c2:1f:c7:93:d4:83:f4:58:
1a:6a:82:63:44:d4:1d:30:6d:3c:da:d7:d3:33:a4:
5d:43:6c:8b:e9:a7:09:0e:23:0f:3c:d9:91:67:45:
04:bb:dc:f1:eb:38:95:ff:d8:db:02:ac:bb:fe:d9:
99:ef:b8:4e:17:bf:c5:94:96:9f:01:71:77:82:8a:
7a:0a:5f:1b:fb:d0:23:eb:64:14:d0:13:bd:67:0b:
bd:95:f8:80:c5:e7:e4:34:61:76:b9:c3:67:38:7f:
f1:6e:7b:26:4a:05:9b:15:6d:d7:aa:62:ce:c2:e0:
9c:16:10:c9:b3:93:5a:70:17:e1:00:bc:f2:65:c6:
d1:c5:af:91:fb:62:ca:24:a9:53:9c:4c:25:b8:33:
0c:dc:17:46:4f:cb:3c:c1:a2:13:f8:d2:dc:9e:10:
f5:85:20:d7:0f:fe:30:87:89:88:1e:e4:12:18:0b:
40:98:37:2e:a0:75:03:79:2c:b8:cd:e8:84:26:66:
ed:be:0a:ba:78:b5:a4:7d:89:04:90:a5:84:1e:5a:
21:65:38:41:c1:b5:a0:84:86:41:c3:cc:e4:ed:6a:
6f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DC:70:B2:DA:81:08:2D:37:EE:5F:35:5E:38:7A:FE:C6:BD:E3:1B
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:1c:9c:b7:18:ea:16:0b:90:5c:41:35:be:53:42:e3:c7:9b:
1b:0f:80:3f:c7:4c:1c:3a:ab:20:c8:9b:e8:b8:a1:39:d9:7a:
07:46:0d:98:ce:f7:88:3b:7c:0d:f1:d7:35:b4:6b:bc:08:b2:
7e:21:e8:21:d4:c0:34:fe:38:45:cd:6e:8b:ea:17:50:51:c1:
da:40:7e:4e:de:c5:d7:55:ee:e6:ef:2c:7c:82:2d:1f:e8:33:
1d:7a:88:6a:8d:72:3d:79:0a:ca:da:4a:9d:20:23:25:51:76:
9c:0e:82:52:4e:b7:95:19:42:e9:4a:ed:05:8d:88:97:45:e1:
7c:a8:c3:ec:50:0a:8a:60:56:e4:8e:a9:3e:d5:a2:2d:a0:b3:
c3:2b:03:a9:eb:9f:a4:90:c8:9f:c7:90:34:ec:74:9c:61:c4:
61:19:0f:ed:5d:1a:1e:05:e1:2a:cf:d8:34:ea:bc:ef:46:b2:
bb:c6:88:0f:03:04:a1:fc:3d:af:86:0d:34:20:d2:a0:63:85:
10:f5:ab:c1:6e:76:c7:ce:3a:f5:3b:2a:3e:73:42:a8:b8:e2:
d1:48:7a:fb:1e:68:52:52:67:45:77:48:2a:8a:1f:30:6b:64:
22:d9:e0:55:40:44:75:d6:bd:f4:89:51:a2:41:72:93:74:40:
68:ea:3f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:22:09 2025 by rpki-client