Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
File: 1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft (raw, json)
Hash identifier: xre4evPmlGCZlh4YqIl+C1jmOhuQX4+0jeRtMCEt22Y=
Subject key identifier: 5D:A6:0A:D8:3E:89:F7:75:4C:FF:AF:17:44:B5:D0:46:CF:E9:FC:4C
Authority key identifier: D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C
Certificate issuer: /CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c
Certificate serial: 019751C616E24B15F0E83E4AE0D160BA31EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
Manifest number: 0714
Signing time: Sun 08 Jun 2025 23:00:25 +0000
Manifest this update: Sun 08 Jun 2025 23:00:25 +0000
Manifest next update: Mon 09 Jun 2025 23:00:25 +0000
Files and hashes: 1: 0TM8RaOIPFOpyp7Wz-Yo2ky-FH4.roa (hash: XeQkg3QeFHikM/cwWNNdphRvfPZiBaMh4xO56QjpXcM=)
2: 1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl (hash: rE2FBQJCLlV+BfvNvJ93QzK2UVJSSQ5U/3P43XFsAqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:16:e2:4b:15:f0:e8:3e:4a:e0:d1:60:ba:31:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c
Validity
Not Before: Jun 8 23:00:25 2025 GMT
Not After : Jun 9 23:00:25 2025 GMT
Subject: CN=5da60ad83e89f7754cffaf1744b5d046cfe9fc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8f:c0:06:a4:c0:fb:1b:7c:5c:6d:f0:46:c2:
a9:1b:6a:eb:d1:2b:a4:4a:8b:3a:a2:d8:5b:2c:5f:
94:ed:05:0f:85:8f:f8:84:fb:b3:51:71:3f:ad:1b:
5f:cd:df:3f:ae:48:8e:c7:ad:06:6c:da:78:b0:36:
ef:86:0b:e4:94:3f:da:93:b8:4f:8e:eb:99:52:e5:
0a:52:a6:f6:70:a0:e0:ec:ff:82:c2:c1:fc:da:50:
d9:a4:ac:52:7b:9e:49:5f:1d:21:96:1f:03:32:17:
b9:9c:56:f3:3a:59:bd:0e:39:cf:8c:fb:97:c2:5f:
ec:3f:23:87:bc:78:28:13:eb:81:cf:f5:ee:2d:4a:
be:95:5e:b1:6d:60:4c:ca:1c:f0:13:61:9a:38:0b:
ff:7e:c8:ed:37:fc:de:f2:bf:f6:c5:e9:f1:d1:b8:
57:f0:bf:1b:99:14:a0:20:70:bf:58:82:02:06:48:
94:43:c3:60:7e:c4:31:e7:57:64:24:7a:4d:b1:83:
b1:1e:b4:d3:00:24:6f:38:c2:c2:57:02:06:0a:2b:
e0:2a:8a:24:9f:70:8f:28:79:76:53:ac:d6:6a:09:
e7:cf:65:8f:62:4d:52:e1:17:7f:cf:03:89:76:44:
d3:d1:66:8f:95:5e:ba:a5:19:f7:e9:07:c3:d1:37:
dc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A6:0A:D8:3E:89:F7:75:4C:FF:AF:17:44:B5:D0:46:CF:E9:FC:4C
X509v3 Authority Key Identifier:
keyid:D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6e:76:4b:73:08:80:61:7d:64:46:cc:29:97:bf:64:fb:45:
01:6f:67:19:fd:ba:cb:7f:9a:4f:b1:a5:e9:2a:59:fa:94:7c:
b7:62:36:d7:2c:c5:b3:e0:de:7a:17:fa:91:aa:b9:26:b1:c5:
99:ab:36:92:7d:40:2d:d1:8b:7c:77:05:06:66:d0:3a:fa:c1:
c1:45:a6:90:ea:9d:ea:1e:ad:3d:fc:37:78:83:84:65:bb:08:
0f:50:9b:be:49:47:09:52:21:b1:eb:d3:00:29:25:55:73:69:
c0:c4:ca:82:f7:f4:ac:48:80:7b:77:6a:bb:1a:d1:a1:4e:53:
18:6c:4e:42:f6:21:53:94:83:2f:dd:48:b8:5f:ed:1d:01:e5:
d1:c1:8c:67:6f:e5:a3:f0:e7:88:58:4a:c7:fe:d0:63:99:88:
8d:0c:73:74:4d:7e:45:de:af:5d:06:e8:ac:68:90:11:0d:70:
19:7e:02:3e:3a:89:92:28:9e:ba:10:c0:14:f4:78:4c:41:b8:
c8:93:bd:39:15:92:69:f6:d8:51:d2:9f:5d:c9:fa:2b:75:9e:
52:a8:8f:93:d6:a0:fa:67:24:85:92:ba:57:32:4c:9a:f3:ec:
61:f7:af:2d:a0:6e:e7:1d:b7:74:16:d6:88:6d:19:94:0a:3c:
1e:52:19:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:14:22 2025 by rpki-client