Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json)
Hash identifier: pjAXvENGXmMFc+bMHTpppnzYaiS0G1FBb5nOuuf9hlc=
Subject key identifier: 53:BB:E6:6C:82:D5:56:5C:C2:58:A3:2F:31:65:3A:AA:C0:B7:3F:C1
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 01974E2039F3C4DE95914A160A0C06360317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
Manifest number: 0371
Signing time: Sun 08 Jun 2025 06:00:24 +0000
Manifest this update: Sun 08 Jun 2025 06:00:24 +0000
Manifest next update: Mon 09 Jun 2025 06:00:24 +0000
Files and hashes: 1: S8F_BqZIysXEe93wY7E7gYPrrEE.roa (hash: yxA+Gb1gegChlT9RImwWVjBq+UzqZu56Rk2vXQ11x70=)
2: mHdbhQxgyf7CV9jCGJvliFVilXc.roa (hash: 4CdqTf57TkDxaRHOcnXl2aFyjkgmNRswPmW9ZMUYxw8=)
3: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: 1y1dH0ise9VAz5pjmzbJAuDJR6oOiQAby8WKW7mMJ8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:39:f3:c4:de:95:91:4a:16:0a:0c:06:36:03:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Jun 8 06:00:24 2025 GMT
Not After : Jun 9 06:00:24 2025 GMT
Subject: CN=53bbe66c82d5565cc258a32f31653aaac0b73fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4e:48:95:90:22:b5:ed:64:69:99:fd:49:b8:
fe:f9:af:c3:88:44:07:a1:d7:bf:4b:3e:43:df:22:
58:73:b9:ac:fe:da:97:9f:5c:18:2d:f9:94:21:df:
75:72:a8:bc:79:b2:af:fd:db:1f:b1:ea:03:25:86:
ab:cd:31:6d:80:be:58:11:0a:98:97:e4:2a:d2:b2:
e4:83:66:66:25:88:a0:53:30:d2:19:fd:ef:74:ba:
b6:d9:e3:1b:e7:59:ec:53:8f:7d:b8:ca:8a:7b:90:
b2:70:bf:30:60:55:c1:94:4e:ee:75:a7:19:62:f3:
5c:96:79:81:74:0f:59:be:6a:36:fe:93:15:e7:b2:
4c:83:b7:48:c1:65:5b:f6:78:f5:76:6e:a0:a1:58:
f8:cc:8b:98:c2:d2:65:69:73:ce:02:e7:a6:0a:63:
bb:f7:b9:4d:66:18:16:66:a5:54:c3:86:a3:e1:54:
d6:9c:63:82:5b:f9:ff:3f:b9:3e:e5:2b:34:96:8f:
e3:a1:a7:42:ce:e7:b1:cc:8c:07:1e:e0:d1:26:96:
ad:0d:2d:7b:f7:bb:67:f1:d6:f0:3b:0e:45:ec:9a:
b5:47:3f:0f:d2:64:80:ec:b0:3d:1f:3b:df:9f:af:
7e:b9:c8:f0:aa:6b:c3:97:d9:c1:80:60:af:50:d6:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BB:E6:6C:82:D5:56:5C:C2:58:A3:2F:31:65:3A:AA:C0:B7:3F:C1
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:24:16:0d:2d:6c:8f:3b:9d:91:55:dc:cd:13:7e:83:62:98:
cf:ed:a8:a4:67:86:94:29:21:9e:0b:86:5f:66:b2:b1:9d:67:
a2:59:15:69:1d:f7:dd:41:1b:8c:57:3a:30:25:e4:82:e8:bc:
44:c0:f5:8d:ba:3a:cd:ac:86:54:24:dd:e3:83:b1:32:1e:2d:
d9:17:e0:d4:eb:8e:89:23:72:90:25:c7:42:18:65:2e:6f:f5:
de:53:6c:11:b8:68:bb:5d:42:26:d5:09:de:8d:87:95:69:e9:
31:8a:9c:23:f9:2f:55:f0:27:22:c7:5b:19:26:e8:31:e6:ba:
25:72:40:74:45:8f:22:22:02:10:3f:70:5c:9a:bd:ca:22:c1:
bc:f6:69:02:54:f1:b3:e3:bf:26:2c:3f:65:a9:df:80:95:4e:
d9:07:0c:9e:0b:2c:94:eb:ab:9f:25:d4:45:3f:77:c3:36:39:
b2:2d:bf:ef:d3:dd:90:1a:9b:c4:a7:17:db:82:d0:ca:f0:e1:
5b:b9:11:d4:ca:c7:ad:4e:d6:fe:0d:7e:e0:b4:d4:96:16:90:
46:50:e5:29:94:db:1a:04:f1:66:3c:17:41:b0:29:d0:d0:7c:
c8:f6:0e:15:16:4c:d1:2a:68:f6:09:35:3d:1c:99:64:15:c0:
a8:63:cb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:40:07 2025 by rpki-client