Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
File: X4rRNUEr-QQb5f0I50okEg2z7sc.mft (raw, json)
Hash identifier: VwrGTp/VMWE7diPkGb0nyQQg5IkS5HxjSQ2Y7cHQgew=
Subject key identifier: F9:C6:46:AA:78:AA:70:DF:41:37:2D:A7:2C:60:09:A4:58:DF:72:52
Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
Certificate issuer: /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Certificate serial: 019747E749080A4B9D734A429F3578231CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
Manifest number: 09CE
Signing time: Sat 07 Jun 2025 01:00:29 +0000
Manifest this update: Sat 07 Jun 2025 01:00:29 +0000
Manifest next update: Sun 08 Jun 2025 01:00:29 +0000
Files and hashes: 1: OaP0ViKbeY2ivI-4rv6OeNEGIqA.roa (hash: e7Vy7pCIoWDvqhKmOHXfSd0NE1hCUf1lKUMb+Ggiqf0=)
2: X4rRNUEr-QQb5f0I50okEg2z7sc.crl (hash: d1xk/7iyqnfBje6/2KVJrfv8DIAXeyPaL5fTVlNh+lI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:49:08:0a:4b:9d:73:4a:42:9f:35:78:23:1c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Validity
Not Before: Jun 7 01:00:29 2025 GMT
Not After : Jun 8 01:00:29 2025 GMT
Subject: CN=f9c646aa78aa70df41372da72c6009a458df7252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:95:67:bd:5d:fb:f8:f6:83:55:ee:0b:d6:14:
4c:f9:98:5a:d2:3a:ae:97:4d:36:ba:4b:d7:5c:12:
08:ea:55:7b:1d:f8:1d:f3:2a:2f:fc:85:55:e5:e1:
c4:61:e5:e4:02:8d:68:fe:89:85:f3:8a:5d:1d:00:
d6:2a:c1:cf:9e:ef:a7:d5:e2:d9:a3:36:19:af:92:
aa:a9:21:b9:1f:d4:dd:c4:35:9e:3e:86:e0:d4:52:
3c:e9:af:b4:2a:e7:1e:a1:5c:df:a4:6a:45:dd:64:
6b:16:a1:e3:49:57:c8:74:55:17:a8:73:34:31:b1:
d9:29:2d:45:46:37:57:f0:fa:75:5a:9f:fc:47:18:
54:66:33:17:64:d9:a3:93:92:01:c9:20:4d:31:99:
a5:c8:73:50:84:d8:93:ef:e2:d7:a0:36:62:06:6b:
b4:56:d0:a4:33:4e:8c:6d:25:e0:76:15:a5:3b:e2:
2e:9c:23:03:a9:31:c8:96:f9:31:59:a5:2b:00:fb:
af:1e:1e:cc:ac:54:aa:c2:c1:a6:ae:42:bf:76:90:
e1:3f:66:37:71:21:b2:9d:fd:f0:06:96:14:c9:59:
1c:84:a4:51:df:4b:9f:30:0e:92:0d:94:5a:71:22:
dd:96:59:f5:22:73:a9:b5:64:23:18:c0:3d:c2:a2:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C6:46:AA:78:AA:70:DF:41:37:2D:A7:2C:60:09:A4:58:DF:72:52
X509v3 Authority Key Identifier:
keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:90:a1:2b:ed:03:30:61:e3:f3:8d:13:00:c6:9a:73:f3:e9:
84:ec:d5:59:2d:36:b8:34:f9:44:74:fc:20:01:5f:40:da:3d:
c5:3d:d3:85:9c:7b:57:0b:72:33:0e:50:96:19:af:a0:ea:bc:
68:d9:bf:06:6e:5d:e0:71:4b:b4:6c:2e:94:1d:af:a9:fd:da:
b0:54:d3:53:d6:51:94:d6:b4:1d:78:91:65:e4:45:30:39:c8:
27:0e:70:62:aa:03:17:ae:bd:3f:b4:c4:99:a8:e7:73:0a:25:
08:31:fa:85:d0:a5:7e:8e:70:39:2f:3e:ed:d7:27:e2:5e:89:
96:22:be:58:bc:20:7e:57:8c:15:15:ae:65:67:4f:b6:ff:88:
91:6f:04:77:39:7c:2f:b8:42:63:44:ed:d6:6b:27:47:f2:1d:
df:16:aa:b1:af:af:d7:92:61:77:20:25:e1:87:aa:ba:ff:43:
70:a5:4d:68:a8:6c:95:dc:d9:75:83:fd:9d:c5:95:8e:26:45:
dd:0b:58:61:94:f0:42:01:d2:32:c3:4c:5e:2c:4b:51:5f:c8:
bd:9e:e2:8a:c1:ea:8c:c1:3a:11:18:8e:cc:e2:90:be:44:19:
3b:eb:6d:83:b3:00:87:c1:f4:0a:00:a2:d8:8b:ea:30:5e:e1:
1d:fc:1e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:20 2025 by rpki-client