Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
File: xyCKi4W8uAfK1kE4VDJjrLIERIs.mft (raw, json)
Hash identifier: WXnfP1xP1Lrr+/6sdJCBbkVb1aio87/RTCzawGhUizQ=
Subject key identifier: 5C:AD:AF:F1:3E:89:E1:6D:11:59:06:F8:36:57:64:29:A9:EC:31:26
Authority key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
Certificate issuer: /CN=c7208a8b85bcb807cad64138543263acb204448b
Certificate serial: 0197518F4EEB56B99EC08FCC9B3969E2D5E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
Manifest number: 056D
Signing time: Sun 08 Jun 2025 22:00:35 +0000
Manifest this update: Sun 08 Jun 2025 22:00:35 +0000
Manifest next update: Mon 09 Jun 2025 22:00:35 +0000
Files and hashes: 1: vH1JJD9D24fFC1pA8PsnKijiP6M.roa (hash: i0B3P6h6TyOcZqs+27w3JzYg10hL8qvRbmomwjVt9VM=)
2: xyCKi4W8uAfK1kE4VDJjrLIERIs.crl (hash: gRsuCSndYl3Q7OAcyV3rBqJSD7M3E7CGaNp+6x66JM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:4e:eb:56:b9:9e:c0:8f:cc:9b:39:69:e2:d5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7208a8b85bcb807cad64138543263acb204448b
Validity
Not Before: Jun 8 22:00:35 2025 GMT
Not After : Jun 9 22:00:35 2025 GMT
Subject: CN=5cadaff13e89e16d115906f836576429a9ec3126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:2f:12:cb:b0:39:b0:86:7d:ce:76:87:7a:
65:4a:be:dd:63:d3:44:21:b6:2c:c0:1b:57:01:4c:
67:1c:e0:14:56:84:87:02:80:84:15:5f:44:82:2e:
1b:26:b8:f7:06:86:42:9b:93:bf:8e:ff:97:c9:0e:
32:b7:65:65:21:9f:e1:39:88:bc:62:87:4e:f2:e8:
ee:c5:b4:ca:58:19:50:91:c4:53:6f:61:58:16:5d:
bc:32:37:5e:13:fe:fc:76:dc:bf:87:22:8f:16:78:
2d:a0:22:4b:87:98:fe:9c:ba:ab:4d:77:9a:9a:e0:
10:58:3d:9f:51:12:c1:ea:84:3d:9a:ec:dc:91:ce:
5b:f7:2c:d8:91:d1:fd:2b:76:27:04:c9:2b:6f:a2:
63:66:53:a8:6a:2e:10:5b:05:a0:2a:bc:64:dd:60:
f5:38:69:c2:d3:9c:19:d2:ca:88:50:98:01:b2:26:
13:d2:2c:8f:6b:21:fa:6a:30:9e:6e:87:72:5a:f3:
58:e2:84:83:70:0c:7e:60:7a:33:5b:9c:2c:38:c4:
d4:9d:8c:c0:c3:e5:dd:75:84:c2:48:00:9d:57:6f:
a8:6a:a9:cb:c8:ef:dd:6d:48:a3:ec:3a:2d:28:1e:
7c:5d:70:8e:98:77:03:03:8d:e7:25:f1:52:19:64:
a8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AD:AF:F1:3E:89:E1:6D:11:59:06:F8:36:57:64:29:A9:EC:31:26
X509v3 Authority Key Identifier:
keyid:C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:19:14:84:21:18:88:3e:62:86:e8:ec:a8:fd:ed:58:ee:94:
5e:d9:e5:6c:2e:88:df:69:f7:7c:fc:66:53:c6:81:63:35:3d:
b8:c4:ca:a2:59:19:ce:2e:bc:0d:10:5b:fb:9b:14:41:f8:63:
83:51:28:1a:f3:68:96:51:1f:98:74:ba:b2:98:57:b9:b0:fa:
9c:f4:9f:22:24:ae:e6:2e:33:d7:3d:b4:38:d1:b5:f4:54:fc:
51:ee:d8:05:a4:d0:79:bf:35:7a:ae:2d:48:b7:06:21:3f:6d:
50:4f:5c:06:ea:5d:68:f3:21:fb:4f:04:ad:31:96:60:a7:78:
89:67:9c:d6:d6:57:dd:76:32:b9:10:28:4e:c2:14:04:bd:e7:
3c:1f:a6:a9:c5:68:79:9c:a5:9f:73:41:50:c5:ba:5b:05:14:
27:99:22:2f:23:7d:60:f6:d6:4c:76:f0:17:62:37:b1:8c:35:
03:60:27:0f:f2:e4:b7:e2:c4:9d:43:dc:d9:99:05:4f:b8:08:
46:60:bb:d5:09:6c:a1:9d:8d:0b:3c:03:10:07:6b:df:8a:0d:
21:31:6e:4e:cc:ed:89:ab:e3:cd:eb:28:47:5b:fb:d2:fb:c3:
b7:ff:09:47:a7:d9:14:c3:7e:07:e8:a6:b1:45:2d:5a:6a:3a:
50:59:91:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:50:43 2025 by rpki-client