Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: SQLypvJkBN4kH2MLoC4phFNrcbQpFfzs9imWXrm3ISE=
Subject key identifier: 71:AC:7E:2B:95:83:CD:62:38:70:FA:61:3A:5C:8F:20:85:6B:9D:D5
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 01974779B9EF2E19C87A6170E2C743B93273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 150C
Signing time: Fri 06 Jun 2025 23:00:49 +0000
Manifest this update: Fri 06 Jun 2025 23:00:49 +0000
Manifest next update: Sat 07 Jun 2025 23:00:49 +0000
Files and hashes: 1: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: CaekZ++v50oHnQhNd1FX9VzMnv1WcSFRItiXQ4kFsnQ=)
2: uWnagnV7ph6W305lDhQcUtu8iOA.roa (hash: O2rllaolJLmB6wHK4WL6QTUawzuqbXsQObcxgCsZ0L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:b9:ef:2e:19:c8:7a:61:70:e2:c7:43:b9:32:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Jun 6 23:00:49 2025 GMT
Not After : Jun 7 23:00:49 2025 GMT
Subject: CN=71ac7e2b9583cd623870fa613a5c8f20856b9dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:f7:3e:0c:33:4f:e2:05:be:8b:e3:81:4e:
d1:4f:f9:69:9b:65:db:ef:14:f9:ba:54:3d:31:79:
93:2e:da:97:6f:84:23:fe:2f:8f:8a:84:d7:38:55:
e5:aa:44:ce:7b:6c:d5:da:99:a1:d2:58:a0:d0:4e:
5b:5d:e2:25:31:af:02:33:62:5e:5f:80:1a:a2:6b:
5f:ae:3c:63:96:32:0f:f8:ac:d0:db:82:a4:e0:c8:
26:49:af:b3:e5:3b:29:0d:ee:3c:e8:10:3c:81:a0:
22:13:8b:f5:d6:e9:3a:8f:eb:c5:16:94:b7:22:72:
02:09:cc:b3:7a:5f:5c:76:c9:e9:77:2c:d4:98:80:
a0:a7:4e:46:a9:94:1f:24:44:2e:25:c6:3c:2d:18:
23:74:4f:3b:ab:2d:07:6b:34:d4:00:2c:e7:3f:74:
31:03:a8:36:17:dc:72:f5:14:69:bc:58:12:94:43:
c9:af:6f:92:28:c4:2a:e5:80:92:b2:67:8e:3a:aa:
7e:af:1a:c5:49:39:78:ad:c5:df:40:76:86:d7:d4:
b3:8c:6d:54:f8:39:89:b1:4c:1a:57:5e:be:7d:de:
19:90:76:66:a0:a9:41:39:df:e1:4b:d6:f3:2f:ed:
71:d0:1a:d0:72:40:e6:0d:ee:bf:f1:87:e1:60:85:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AC:7E:2B:95:83:CD:62:38:70:FA:61:3A:5C:8F:20:85:6B:9D:D5
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:63:e1:e6:ad:cd:76:72:50:5a:24:01:8c:34:45:2b:35:11:
c1:8b:6f:81:1d:e5:4f:e4:c0:08:d6:b7:da:29:04:0d:ec:e8:
95:9c:c3:d9:0c:a6:21:75:20:0c:c7:f1:7a:73:d9:64:c7:f1:
4e:13:10:9f:35:22:50:54:97:55:65:de:c8:93:e3:9c:5f:a4:
18:21:71:8c:da:94:28:74:64:a2:1f:03:04:e4:48:24:98:df:
e6:fc:19:ee:5a:e8:cf:71:fa:1e:af:8d:8a:f0:82:6f:76:db:
ec:af:d2:f3:0c:9c:7c:3d:2e:d0:36:52:2a:4b:92:e6:8e:a1:
21:21:2d:bd:61:da:92:0e:c9:7a:63:cc:54:4d:37:a8:4d:fe:
b0:d8:82:af:bf:55:9a:aa:00:25:ad:26:fc:1b:0e:c7:fb:ad:
d0:0b:ed:1a:c6:31:d8:37:e3:55:f5:51:92:36:2f:27:a4:41:
66:0d:ae:e4:79:63:6b:6c:68:9f:65:52:5d:9c:d9:cd:9b:75:
44:c7:ca:18:18:79:33:6b:a5:39:28:90:19:37:50:cb:e9:83:
c3:54:e6:e2:48:ee:d1:95:92:99:20:9b:64:53:be:a1:a7:88:
55:25:04:4b:9f:d4:bf:61:cd:24:72:f6:e2:f3:a6:ec:28:c5:
16:15:b1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:30 2025 by rpki-client