Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: 4l0qWkfO2FeKtZNCJRqGLiwxyM01yY27BA3GYLZQdZM=
Subject key identifier: 51:EE:E0:21:63:39:F2:3E:7F:76:25:1A:AE:25:AF:DD:51:35:76:7A
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 0197496866E3431D7B1EC6ECE20AFFBB4CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 08:01:08 +0000
Manifest this update: Sat 07 Jun 2025 08:01:08 +0000
Manifest next update: Sun 08 Jun 2025 08:01:08 +0000
Files and hashes: 1: 60je5SoeoIIvExp08AfHAba81Gg.roa (hash: OYL+m6W/OD3kcGFXK2Ewor0X0LhaICB75RQGsXvyc9g=)
2: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: KKBP+HccgqS/llCRV9FJUvw3HJbi6Pc4aDfgsrA03xQ=)
3: er13LyaEEpybrKtiNYKCEMG-QS8.roa (hash: aEnyWiHyU9gmwh/2jnL5BvTsMw/v/0bYu8DgEkcY+S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:66:e3:43:1d:7b:1e:c6:ec:e2:0a:ff:bb:4c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Jun 7 08:01:08 2025 GMT
Not After : Jun 8 08:01:08 2025 GMT
Subject: CN=51eee0216339f23e7f76251aae25afdd5135767a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:99:b8:e3:5e:e2:79:0f:b3:80:a3:fe:02:7c:
ee:03:a5:8c:1a:79:20:72:c0:dd:30:be:19:6a:ea:
1e:1f:88:c8:30:7f:3c:d1:c4:11:76:8c:ea:c8:2d:
c6:30:1d:05:cf:cd:df:00:ad:d2:dc:b6:3d:cc:7c:
b5:04:2e:dd:24:90:36:71:00:68:b6:f7:0c:40:7f:
62:05:9b:95:93:49:ae:18:63:71:b1:b0:46:db:de:
e9:d3:e9:c2:f0:16:6a:6d:9c:f3:a8:20:5d:b3:b6:
5f:a4:2c:7e:bb:7b:e7:22:5f:ef:bc:5f:c3:1c:d9:
5b:f4:13:fe:32:ac:e3:f0:28:4a:bd:2e:e7:33:c8:
49:a5:cb:a5:cf:1b:21:9a:6e:2f:1a:f0:c9:43:75:
9d:c5:d7:1f:e6:25:f5:5f:bf:34:09:6a:90:c1:c2:
b1:0d:a9:fc:0d:df:d2:d8:f0:9b:e0:d7:f9:6c:b4:
1d:9f:29:bd:a8:cb:46:f4:64:be:eb:ac:23:52:5e:
30:69:dc:85:fd:43:6d:de:1f:fa:d7:e3:6f:8a:15:
85:0d:95:cb:f7:95:cc:a0:c5:46:23:f9:6a:40:54:
1c:46:cf:a6:7e:f0:22:0a:2a:fa:b3:f5:dd:99:60:
f2:66:f8:3e:8c:8b:2f:91:4a:bc:d8:26:5f:05:82:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EE:E0:21:63:39:F2:3E:7F:76:25:1A:AE:25:AF:DD:51:35:76:7A
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5e:c1:1b:20:d3:27:05:3f:10:f0:e9:dc:a2:5c:de:ef:04:
54:d6:95:5e:09:12:41:48:64:5b:3d:04:db:63:96:91:e6:5e:
59:1f:be:ca:90:76:1f:f0:e6:3b:52:8b:fc:cf:0b:b0:38:1e:
77:1f:fd:b9:33:7a:52:c2:13:c9:e5:4f:fc:8a:97:c0:1f:3d:
7e:04:cb:51:dd:f2:88:93:5a:2b:f7:69:79:e4:b9:39:30:50:
af:17:6e:bd:43:8a:de:35:4b:3f:75:9b:6c:8b:43:58:ec:30:
cf:42:c2:76:cb:f8:00:5b:dc:7b:f6:93:0b:a2:7a:2d:ca:17:
7a:26:e2:47:95:e2:e0:85:ea:44:58:0a:cc:3c:f2:c5:42:df:
2a:c8:21:f6:41:b0:d7:dd:8f:5c:25:5d:c0:ca:0e:f8:31:56:
77:55:1d:7d:a0:ac:3e:3a:ef:99:ca:9c:36:92:52:bf:fe:b1:
09:ef:cf:ea:fa:53:be:2f:97:84:f1:a7:d2:89:3b:2d:b4:0c:
de:61:3d:9b:c1:67:77:86:c3:4c:2d:74:00:60:07:5b:c3:e6:
91:30:9b:94:4a:5e:7e:7c:d0:e7:99:7f:b9:2d:30:fa:0a:b4:
cd:30:ac:42:22:fc:67:18:11:cd:80:33:e2:d3:1d:1b:6f:3e:
c2:ca:fc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:11 2025 by rpki-client