Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
File: Xm6clCz1a-uGksXVYu2OrWlFKO0.mft (raw, json)
Hash identifier: gGEjlxd5qSJLjZ4Lv2gq0Ip8u8pZ8BlI8kzfwzC7CWQ=
Subject key identifier: 9B:D6:EA:80:B3:25:63:5F:4F:A7:2B:E3:D4:61:C3:D3:11:A7:B1:8A
Authority key identifier: 5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
Certificate issuer: /CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Certificate serial: 019745C2689756F8786CCD46DB3A2B568CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
Manifest number: 01EF
Signing time: Fri 06 Jun 2025 15:00:57 +0000
Manifest this update: Fri 06 Jun 2025 15:00:57 +0000
Manifest next update: Sat 07 Jun 2025 15:00:57 +0000
Files and hashes: 1: Xm6clCz1a-uGksXVYu2OrWlFKO0.crl (hash: 8iTNXl12x7irW5+Iu4+TCMEA2GSBqU3IxxPZf139ShA=)
2: vosIopFKuVooFEnT_WoSvrVtBQk.roa (hash: MbdzDkBGjpybqFx3qcRSqHdBprEga+vyojjcpFHnoSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:68:97:56:f8:78:6c:cd:46:db:3a:2b:56:8c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Validity
Not Before: Jun 6 15:00:57 2025 GMT
Not After : Jun 7 15:00:57 2025 GMT
Subject: CN=9bd6ea80b325635f4fa72be3d461c3d311a7b18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:13:e3:ec:4a:95:63:3b:07:51:3e:22:c7:d8:
08:83:bb:07:9c:97:af:32:e8:c5:43:d5:df:7a:56:
92:77:eb:55:45:cf:59:22:06:71:ba:22:15:83:92:
37:b2:ad:8f:6b:d7:8d:35:83:58:6a:bc:51:2c:a6:
90:96:48:96:a0:98:4d:de:0d:22:82:f6:16:d7:3d:
7d:64:79:06:60:f3:7f:f1:3d:ab:29:fd:94:65:61:
bc:dd:52:4e:17:d6:5b:40:fa:42:a7:5c:55:cc:38:
44:fc:6f:26:c6:87:55:7f:9b:a7:d2:71:b0:6e:b0:
bc:93:bd:20:d2:20:3e:86:c2:3a:7b:af:e1:09:e8:
8d:25:16:3e:2d:09:c2:c1:dc:cd:4b:53:4b:3a:13:
17:f5:86:89:2f:2e:12:6e:2f:38:4a:5b:1f:d0:47:
06:a3:fa:0c:13:bf:a3:0a:1f:cc:da:4e:de:8c:0f:
da:06:10:93:81:ca:ae:9d:01:c4:0b:1d:55:0e:42:
23:9c:48:e0:43:91:6c:b9:28:c6:80:17:76:c9:5a:
10:bd:5e:59:e9:d5:fd:04:e1:1b:7b:db:ca:48:23:
1e:89:4a:e8:93:b2:68:b4:9b:e6:59:8d:53:a0:32:
bb:50:05:90:b4:ee:b8:28:82:13:f1:d9:71:ee:be:
0e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D6:EA:80:B3:25:63:5F:4F:A7:2B:E3:D4:61:C3:D3:11:A7:B1:8A
X509v3 Authority Key Identifier:
keyid:5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:50:8e:55:69:ea:c3:cb:5e:1a:52:ed:fa:84:2a:e4:39:21:
35:b3:81:f2:9b:27:a5:f9:6e:a3:52:fa:4a:25:bc:85:f5:03:
93:bf:0e:b9:f3:61:6c:f8:cf:75:2f:51:45:94:7a:49:16:d1:
f8:35:19:c4:df:8f:c1:d5:49:3f:ec:4e:6c:ca:b1:fb:0f:81:
2a:0f:20:2f:f6:7d:81:f8:cf:76:79:a5:d9:f7:fe:8a:6b:0f:
04:6d:f0:2e:54:94:93:4e:e5:05:56:8d:56:94:c4:05:dd:06:
b8:88:e9:86:4a:b7:bb:be:27:e4:10:c3:41:68:06:4e:c3:a7:
5b:78:79:eb:14:65:8e:60:19:d3:44:ce:f1:cc:24:a1:3d:9a:
0c:18:95:1d:db:fc:e2:d9:a0:f0:e9:74:60:04:cc:9e:1e:1b:
55:5d:ec:1c:bc:af:7a:61:72:fb:d1:04:74:90:98:f1:78:4a:
09:bc:66:d2:b6:ab:3b:7a:f5:9e:ff:58:cd:1a:e5:cb:0c:a2:
b4:69:9c:e9:67:ec:aa:e0:05:e0:4f:70:23:e5:ef:30:7f:a5:
a2:08:2f:b1:09:ff:42:21:14:ac:ce:35:20:3d:e0:44:5d:df:
f5:2d:4b:25:b1:ad:d4:0e:61:dd:2d:3c:61:e4:26:fb:f7:07:
fe:2e:e7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:24 2025 by rpki-client