Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
File: xUIOtdlPD6uGLghAQU9DK3heYFQ.mft (raw, json)
Hash identifier: hWwjWBF2kG9E2JXoW3UrJ18XpJMi94HaNRhEAEhI4oI=
Subject key identifier: AC:C2:80:12:4F:6E:4F:36:F1:60:10:D5:D1:30:D0:6B:16:2B:D2:C0
Authority key identifier: C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54
Certificate issuer: /CN=c5420eb5d94f0fab862e0840414f432b785e6054
Certificate serial: 01974E8E8EAE3657C1AEE3223272EA27AC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
Manifest number: 0393
Signing time: Sun 08 Jun 2025 08:00:54 +0000
Manifest this update: Sun 08 Jun 2025 08:00:54 +0000
Manifest next update: Mon 09 Jun 2025 08:00:54 +0000
Files and hashes: 1: Ta5lPzjSaWOGZmJzb8ldMeucHGI.roa (hash: d1Ea1L5jJ9KIi1NEhEpKqHGMktv6fUL4cljVIHxwf/0=)
2: xUIOtdlPD6uGLghAQU9DK3heYFQ.crl (hash: hvkqZrR+9GiKthtLwLyfOSLPzFcrZVaUhIWte+GFnaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:8e:ae:36:57:c1:ae:e3:22:32:72:ea:27:ac:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5420eb5d94f0fab862e0840414f432b785e6054
Validity
Not Before: Jun 8 08:00:54 2025 GMT
Not After : Jun 9 08:00:54 2025 GMT
Subject: CN=acc280124f6e4f36f16010d5d130d06b162bd2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:77:8f:40:21:b3:3f:90:85:1d:eb:d2:ce:
d1:d2:1b:11:ca:24:d9:e7:e8:44:b2:3c:a8:d1:d5:
06:0e:ab:c7:d1:9e:b3:b1:97:91:e6:25:78:e2:53:
ad:51:a9:39:29:23:58:80:c8:95:64:ce:e2:9e:d2:
41:3b:51:1c:31:9e:31:68:ae:b4:dd:9a:4d:f2:fe:
2b:ee:e4:2e:a4:42:8d:52:e3:8d:99:11:5a:07:6c:
e8:0c:be:90:21:83:69:9c:31:71:20:9b:3c:85:f0:
cc:c1:f8:fa:cf:88:6a:e5:4e:47:0d:0f:82:ea:d4:
93:db:8a:c1:17:cc:1e:84:26:8b:df:9e:85:c7:ec:
cc:af:80:db:d5:e3:f5:b5:74:ff:25:f0:31:c6:b6:
26:50:ad:22:26:6d:e6:5b:b9:da:d4:ff:41:bc:db:
04:e3:63:6a:9d:f2:9d:8b:14:ed:ee:15:a4:a3:ef:
6e:22:9f:c5:b6:78:c0:80:b3:57:0a:40:62:d8:80:
42:54:a1:bb:23:b7:d7:6e:79:0d:df:11:2b:89:ba:
09:1d:01:de:03:e1:23:6a:a8:29:26:2c:df:57:2c:
ff:47:fd:11:34:14:0b:52:cb:3d:3d:fc:f6:d9:7d:
b8:e6:aa:e9:94:1f:fe:b4:7b:69:00:36:f3:6c:e4:
99:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C2:80:12:4F:6E:4F:36:F1:60:10:D5:D1:30:D0:6B:16:2B:D2:C0
X509v3 Authority Key Identifier:
keyid:C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e0:cb:2d:32:ed:d4:27:7c:3b:50:ee:94:bc:d2:9e:c2:fd:
cd:2e:cb:05:2f:cf:45:08:68:bd:20:00:53:58:79:b9:5e:22:
4a:d5:e3:d0:23:ea:5c:b5:4f:50:64:d9:de:57:4a:4c:9b:5f:
45:f1:f0:e3:45:cd:7c:61:af:ac:1b:41:d1:b5:12:ae:7b:59:
08:9c:27:24:76:bd:fc:ca:a2:db:0a:0c:d7:cf:ef:77:b5:fd:
ac:6a:a9:95:d4:a4:4d:d0:d1:e4:1d:81:27:ef:93:ea:29:cf:
5e:56:33:19:b3:3d:55:bb:ae:91:0c:ee:2c:58:2d:23:8d:6b:
b6:1d:f5:a8:7c:a4:95:89:99:6e:e6:d6:c7:da:6f:f7:11:e4:
12:ed:d1:b1:e3:50:5b:2d:8e:1d:3a:e9:30:1a:f2:7a:dd:d3:
d3:16:14:73:30:cc:14:8a:a3:ab:a8:c5:48:ce:0c:d0:56:3b:
7c:59:ef:40:da:dd:53:7f:86:06:47:aa:dd:99:1a:70:2c:bd:
d9:de:d6:8c:95:2e:6b:73:87:1e:4c:cb:3c:21:80:50:e1:d4:
9b:f3:02:85:52:ab:ff:04:ed:e2:6f:bd:10:ed:6d:9e:60:91:
ef:52:b6:15:e4:65:04:a9:fa:ad:35:72:51:c3:36:07:13:38:
db:ec:44:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:43:48 2025 by rpki-client