Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
File: xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft (raw, json)
Hash identifier: 2j5sGfW43g+97aHeaZpO93qEoBR1Lw3xbCa9ofWGxYg=
Subject key identifier: 5B:C3:58:35:C2:0F:43:62:44:0D:38:C3:2F:B7:0E:2A:4E:0A:AA:F9
Authority key identifier: C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52
Certificate issuer: /CN=c5721737651598f56cf7195120777d7b5316f552
Certificate serial: 01974E8E35BDCDBD5B7564E4EAB3B4346C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
Manifest number: 12E2
Signing time: Sun 08 Jun 2025 08:00:32 +0000
Manifest this update: Sun 08 Jun 2025 08:00:32 +0000
Manifest next update: Mon 09 Jun 2025 08:00:32 +0000
Files and hashes: 1: nB0wD2NbLIcgL4wuuaNReH2xdaw.roa (hash: PmwRmIsMv3KSkKaHz3D8VpJ1Kt0x35JTg65eBK0T3+k=)
2: xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl (hash: COFg0jY/Y2k9612fNx0QKtYXFxfbmE8ILjgPg/SxHJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:35:bd:cd:bd:5b:75:64:e4:ea:b3:b4:34:6c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5721737651598f56cf7195120777d7b5316f552
Validity
Not Before: Jun 8 08:00:32 2025 GMT
Not After : Jun 9 08:00:32 2025 GMT
Subject: CN=5bc35835c20f4362440d38c32fb70e2a4e0aaaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:68:02:e0:53:b9:ae:da:30:00:c7:75:f0:3f:
ae:a1:ed:0d:17:88:b2:b3:38:3b:c1:09:b6:22:29:
fa:cb:68:ec:07:d1:6d:2e:b8:14:0a:96:19:1a:1a:
2d:62:12:4f:54:fa:4d:8b:55:2e:9c:0f:7f:7f:41:
fd:2f:11:e2:96:c6:1d:88:35:41:91:63:59:57:6a:
15:7b:3a:7a:af:e1:d5:01:5e:79:12:ce:5e:34:10:
5d:67:1a:57:e4:a5:9d:4b:8f:56:55:67:11:27:87:
43:ab:28:85:59:4d:4d:3f:b7:db:8b:0e:64:44:89:
96:71:18:2d:ba:a0:fb:f4:ac:ea:2d:32:4d:1a:4e:
fb:51:61:52:7a:77:2e:a1:9e:a7:9c:9c:f8:c8:23:
8c:38:5b:10:bd:1b:92:c4:3e:25:92:45:5c:e6:44:
ea:65:74:bf:c5:43:a8:3a:c0:1c:d0:66:46:95:26:
fc:3b:0e:34:a1:58:a4:23:a3:33:6e:cd:51:c9:ef:
d4:df:b9:72:99:5b:63:e4:b8:a1:aa:57:23:28:1c:
19:01:78:ea:2d:ae:92:9e:a8:61:1b:4f:8c:9b:85:
ec:ce:67:15:65:e4:13:e1:bf:dc:e9:2d:e3:42:c9:
59:8c:29:64:78:71:05:8e:c4:4f:d2:3a:ff:8b:de:
b1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C3:58:35:C2:0F:43:62:44:0D:38:C3:2F:B7:0E:2A:4E:0A:AA:F9
X509v3 Authority Key Identifier:
keyid:C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9d:f3:cb:87:a5:ce:0f:df:79:69:9c:83:70:42:49:28:30:
11:d3:c8:35:e1:05:37:e4:1f:00:f4:3c:e6:70:2a:2c:77:ca:
73:c7:4d:51:6f:b4:28:3d:51:f2:7a:ab:e3:fb:d0:0e:04:6a:
bc:67:5d:d0:e8:23:99:27:ea:3f:a8:fd:df:0a:0a:ec:f7:a6:
ab:93:05:f1:1e:33:b9:42:00:c6:6b:89:c9:ce:1c:87:29:bb:
d2:41:c9:0f:1d:ba:ee:98:a3:09:0b:ca:69:8d:f0:5f:d0:e1:
23:ce:aa:46:02:e7:d8:fa:27:d8:98:e0:d6:7c:67:bf:a5:78:
bd:c0:29:a8:97:4a:f5:45:7a:24:8f:34:95:7b:7e:e4:37:d7:
21:40:d6:c7:b8:0f:1d:d1:b7:1c:07:bb:c4:06:e2:d2:2d:3b:
ba:75:52:32:07:a7:a7:88:a7:46:29:ee:b6:c4:6e:82:8a:b7:
32:b1:84:a7:42:c4:78:32:83:66:ee:70:9b:c7:cf:f1:3e:57:
32:9c:a8:d9:81:3e:60:38:65:1a:ef:f9:50:18:13:aa:5a:71:
bc:68:26:07:9c:ef:8e:8e:1b:21:b5:f4:4f:46:94:ba:87:0b:
aa:11:e2:09:01:31:d1:07:e5:d1:fd:70:d3:52:16:5d:a2:da:
98:3b:f6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:39:49 2025 by rpki-client