Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
File: xAGmSD3G9mt4p6QRLVhz3FZkehk.mft (raw, json)
Hash identifier: e66Pec5dDhthYdxHfVE7yuUAd7VBkCtYknPIe690A6E=
Subject key identifier: 2A:E4:79:30:6B:2F:6B:D5:8E:C4:AE:FB:D1:8B:2B:45:D0:78:63:0D
Authority key identifier: C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19
Certificate issuer: /CN=c401a6483dc6f66b78a7a4112d5873dc56647a19
Certificate serial: 019747797775C592FBF17399854803865D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
Manifest number: 0342
Signing time: Fri 06 Jun 2025 23:00:32 +0000
Manifest this update: Fri 06 Jun 2025 23:00:32 +0000
Manifest next update: Sat 07 Jun 2025 23:00:32 +0000
Files and hashes: 1: Vu1Wz44tBW3Recvb-qbKbp0p19Y.roa (hash: tPI+cxeowqV5RgJALeFjFG5FAryHW0I6Zz9wqBq7kIA=)
2: xAGmSD3G9mt4p6QRLVhz3FZkehk.crl (hash: EeJXU6FsptCk/GHQRSCwxaMOwMWqia4jqoC1W+x7w2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:77:75:c5:92:fb:f1:73:99:85:48:03:86:5d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c401a6483dc6f66b78a7a4112d5873dc56647a19
Validity
Not Before: Jun 6 23:00:32 2025 GMT
Not After : Jun 7 23:00:32 2025 GMT
Subject: CN=2ae479306b2f6bd58ec4aefbd18b2b45d078630d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:3f:ee:47:1e:c9:75:a3:df:35:00:61:1f:
04:51:25:81:b3:49:96:7d:a2:77:23:5b:6e:0b:45:
72:8f:50:82:5d:8b:01:9c:7f:87:11:56:ad:44:a2:
3e:ff:c1:44:62:6b:4d:45:6e:5b:6c:14:92:30:b9:
28:86:0a:ab:b3:36:5d:33:dd:06:58:c1:54:fb:36:
d0:eb:92:05:d4:9c:3b:74:2d:6a:7b:f9:d7:d3:e2:
f0:6a:62:9d:81:a2:82:5d:8f:a7:25:47:0f:6e:88:
cb:87:49:8e:27:c9:d3:41:48:03:5a:ec:ae:83:4d:
9d:0b:16:95:64:8e:4a:e9:ae:f2:59:40:66:7b:6a:
37:85:a8:af:74:19:86:26:27:cd:d3:6b:18:96:22:
e2:58:f5:49:63:e6:ee:9b:41:84:a4:42:fa:e7:31:
18:6a:3a:a0:c2:a3:20:53:eb:ab:4e:fa:44:f3:f8:
bd:8a:0a:1d:40:e1:b8:de:67:7f:12:54:0d:50:dc:
55:cb:53:f5:1b:18:a0:7d:ed:0f:7b:e4:f3:24:52:
32:89:52:85:f6:0a:18:84:66:71:d5:0c:4f:03:be:
77:c7:4e:56:cf:41:29:b8:1e:44:27:82:54:96:e5:
5b:b3:a7:ca:0e:44:73:46:ae:cc:22:77:60:f0:81:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E4:79:30:6B:2F:6B:D5:8E:C4:AE:FB:D1:8B:2B:45:D0:78:63:0D
X509v3 Authority Key Identifier:
keyid:C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8d:01:0d:99:4d:61:9f:04:ad:4d:e9:9e:8c:2c:e8:14:c8:
57:dd:13:47:9b:f3:43:11:35:4f:bb:1a:4a:6b:78:a4:b1:f5:
b0:23:f1:ce:3d:f9:50:27:5a:e6:dc:04:59:3a:5d:e9:4a:7e:
08:50:37:a8:f6:cf:89:17:d4:4e:cb:21:79:82:e3:88:e8:e8:
78:60:a6:05:20:a2:c4:f5:c3:52:c1:ab:8e:91:0c:18:08:e9:
42:5b:cd:23:67:32:28:1a:a1:0e:18:49:74:12:91:ee:13:63:
fd:79:1f:64:0d:03:56:4c:0d:f0:24:f4:75:1a:57:16:0a:15:
12:b2:b4:aa:a3:17:4a:ce:97:2c:cf:a7:f5:82:e2:71:1a:0a:
45:8e:7b:2d:78:70:a7:28:86:c8:14:db:e0:02:a8:7e:f5:25:
a0:de:7a:60:57:64:5c:80:90:15:08:37:b1:42:ce:15:98:76:
3f:47:67:e4:d0:f6:18:09:c7:0a:df:24:2b:bf:f1:a2:cb:96:
64:f5:7e:6c:6e:07:b9:c8:99:90:23:fd:3c:4e:02:47:cf:ab:
c4:64:ba:b4:06:08:9f:d2:c6:ec:e6:3f:3b:a2:1a:e6:43:b8:
fd:56:47:8a:36:be:3f:c1:82:08:73:c7:2e:a3:1f:d5:b6:35:
f4:9a:63:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:18:53 2025 by rpki-client