Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
File: x0yghVF4oM3XGRS88iOqMa9jaaQ.mft (raw, json)
Hash identifier: VSalI0rawQvHcLtb4tDSk249z/evcI6filR8M/91kiw=
Subject key identifier: 3E:05:42:BC:BA:85:72:5C:2C:94:92:1A:0B:FD:B1:2B:C0:6B:D7:7F
Authority key identifier: C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
Certificate issuer: /CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Certificate serial: 01974666E260D54EF03F7088BAF80E13222A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
Manifest number: 0DE6
Signing time: Fri 06 Jun 2025 18:00:37 +0000
Manifest this update: Fri 06 Jun 2025 18:00:37 +0000
Manifest next update: Sat 07 Jun 2025 18:00:37 +0000
Files and hashes: 1: w61tMnNeHDs_V8XDRBjX0VmxQLs.roa (hash: zbcmX4twBgLQPIU3RR2PPgPgWTG3cAdbD9etQBxxLBE=)
2: x0yghVF4oM3XGRS88iOqMa9jaaQ.crl (hash: MnKk+IWWPj+QcgcMJ015It3nUCNcWAwY0BrwekvwKA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:e2:60:d5:4e:f0:3f:70:88:ba:f8:0e:13:22:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Validity
Not Before: Jun 6 18:00:37 2025 GMT
Not After : Jun 7 18:00:37 2025 GMT
Subject: CN=3e0542bcba85725c2c94921a0bfdb12bc06bd77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:24:e3:e9:9b:7e:05:0d:c1:1c:39:4f:cf:
90:19:4f:7e:1a:73:8e:60:c8:1c:74:85:f4:43:15:
90:36:41:af:f1:f4:fc:5f:92:c8:49:30:9e:d0:4d:
4e:dc:4a:2a:98:a1:19:a9:fa:90:f3:4a:f8:11:45:
8d:41:61:5b:d4:18:32:09:b2:cf:76:8c:69:bb:14:
52:5e:b4:af:43:5d:70:a2:16:87:f8:0a:bf:17:9b:
bc:cd:d8:3b:1e:a4:95:77:cf:07:78:fc:83:0c:95:
aa:3c:cc:92:f4:8f:2d:57:52:59:f0:ab:1e:13:80:
62:de:84:c6:61:9c:ce:ca:20:cd:b7:b4:a0:27:12:
fa:63:aa:a0:e4:1c:9d:a0:a1:02:aa:4c:be:71:2e:
b3:72:d6:af:90:0a:a4:7c:88:b4:f2:c6:97:b9:af:
de:cb:a7:58:01:84:35:8a:fa:dd:bc:c6:f2:bb:26:
23:8e:2b:8e:10:01:17:21:65:29:9f:bc:f5:c0:80:
12:c2:37:ca:f6:0b:32:cc:f3:e5:14:e6:60:b0:f7:
b3:ff:09:37:e4:25:78:6f:8f:0d:a4:7b:b7:a3:0b:
e6:9d:90:81:19:96:f7:23:99:27:c2:90:9e:b4:a7:
b5:cf:f7:fa:d2:20:92:6e:0a:9b:d7:b8:58:40:50:
1a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:05:42:BC:BA:85:72:5C:2C:94:92:1A:0B:FD:B1:2B:C0:6B:D7:7F
X509v3 Authority Key Identifier:
keyid:C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ad:f4:25:14:62:51:58:76:fc:c0:45:0b:68:6c:25:97:87:
37:5f:62:96:41:8a:0f:b4:6a:c0:75:73:3d:34:d5:35:67:b4:
cc:bb:bd:b4:d8:4d:91:af:cc:45:9a:96:39:be:5d:5d:a6:83:
6e:a5:04:8a:dc:80:b7:36:a9:5d:9a:e6:e5:63:41:be:c6:89:
8c:18:9e:e6:50:37:31:7d:74:4b:75:91:ae:bd:e7:8d:56:b6:
be:77:28:90:26:71:e6:fb:d3:1c:61:8e:12:fe:fb:45:59:3c:
01:c0:5b:3f:cc:45:28:96:ba:4f:fa:bd:c9:12:8b:4f:43:57:
10:06:27:5f:78:79:6d:2a:81:87:80:47:b0:9f:0a:ce:79:94:
64:17:09:ec:4c:4c:e9:7a:d3:69:79:d3:7e:d3:cf:98:4b:a8:
42:8d:63:f4:a3:a3:4d:99:53:a8:fc:bd:6b:ae:b0:d4:16:cc:
e8:8b:c5:5f:f4:4f:b3:91:dd:88:95:4b:ed:0c:38:5d:3e:0e:
15:73:b5:a1:57:9f:f4:b9:7d:17:a8:2a:b9:4f:1c:c9:89:b4:
ac:b5:d1:98:7f:38:07:5b:78:c9:86:18:74:5e:ea:e8:61:bf:
b3:dc:33:34:5d:f3:18:bd:ed:5d:0d:36:f3:82:20:89:23:ec:
53:1b:c5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:13:14 2025 by rpki-client