Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
File: Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft (raw, json)
Hash identifier: V6FR+HlFp2hpqVmZ/14bpFEecSUjJPruj9ATl0jRSuc=
Subject key identifier: 53:78:C7:5B:62:B3:19:70:8D:13:C9:4E:78:46:7B:66:19:FA:81:73
Authority key identifier: 5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
Certificate issuer: /CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Certificate serial: 01974D7BFB0730535D3D6BD5C76BD973EDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 03:01:00 +0000
Manifest this update: Sun 08 Jun 2025 03:01:00 +0000
Manifest next update: Mon 09 Jun 2025 03:01:00 +0000
Files and hashes: 1: Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl (hash: AM03hC3uovYWo03mSO0RmBB83f4jqL1GyfNIJ4q5BmU=)
2: vK5h-o0ZiTjYgr7TtTUx7l9N3_U.roa (hash: GzoVl428O56Z6DSR6RbFH+KhA2k4PkQR1ShOytMGxs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:fb:07:30:53:5d:3d:6b:d5:c7:6b:d9:73:ed:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Validity
Not Before: Jun 8 03:01:00 2025 GMT
Not After : Jun 9 03:01:00 2025 GMT
Subject: CN=5378c75b62b319708d13c94e78467b6619fa8173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:b8:ee:a6:1d:b2:36:63:3f:52:63:9c:5a:
3a:d0:6b:b5:40:97:6d:6d:a9:2c:73:73:c3:41:77:
7a:38:69:0b:cf:28:bc:ea:c0:62:d1:a2:8e:ed:2c:
b0:06:4b:05:ed:54:75:cf:5e:62:3e:72:90:4e:15:
0e:07:ea:3a:83:51:36:f5:78:75:79:53:ba:72:09:
69:f3:9e:05:51:42:36:cb:63:f9:7e:e3:f8:b5:6a:
5c:be:e6:68:a3:88:b4:3b:37:ad:de:0f:36:49:99:
39:d8:e6:ca:37:56:49:2e:cc:85:92:0f:ef:ef:b8:
dc:89:5e:ee:be:64:1d:32:f1:72:bc:50:0a:d0:3c:
bf:18:5b:db:b2:bd:93:e4:41:ff:74:e9:7c:35:fa:
04:2b:ef:63:18:97:5d:7f:1e:a7:57:b8:39:fa:12:
bd:41:e9:b3:ee:b0:8d:ed:69:02:79:6c:2a:ac:85:
95:ac:66:49:69:9a:6e:9c:62:3e:ca:dc:73:df:4b:
82:b7:1f:59:9c:b6:eb:26:30:f5:5c:7c:45:89:5c:
ec:6d:ac:52:42:de:ab:8f:4f:5d:7a:ec:77:88:4b:
fd:42:e8:5f:69:b9:f6:a8:1d:59:f8:29:07:91:6b:
95:dd:50:ed:8b:3a:58:65:c9:33:9d:1f:32:86:3b:
7d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:78:C7:5B:62:B3:19:70:8D:13:C9:4E:78:46:7B:66:19:FA:81:73
X509v3 Authority Key Identifier:
keyid:5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:dc:47:b4:3a:cf:44:92:4f:d4:1a:19:90:b1:b8:5c:7f:dc:
5f:32:c9:96:43:5d:3c:40:8d:be:5d:0a:46:9e:e8:a1:df:7a:
d2:ec:df:db:eb:f9:45:e1:59:b9:2a:0b:4c:87:33:ca:8a:cd:
b8:62:92:bd:d8:c9:3e:4d:f7:b7:2f:fb:90:40:7c:13:78:89:
3f:af:cd:70:a6:30:0d:ed:95:91:69:0a:f9:53:eb:54:65:83:
7f:87:ea:27:be:14:3c:e3:4d:77:05:da:f7:0a:f2:e2:2c:6f:
8e:a0:6a:46:4c:8a:cc:f3:42:b1:de:eb:a3:82:e5:db:63:1d:
9c:90:09:70:8c:2a:54:8a:46:f8:64:ff:3a:88:5c:4a:9f:0c:
bc:2c:38:e6:14:fd:8d:43:83:3c:b8:31:df:b6:a3:52:7f:30:
b4:ff:47:66:15:7f:3b:d0:bc:95:f3:e8:08:90:5d:6d:1d:58:
f3:39:ef:9b:18:da:d0:eb:95:c5:77:0a:1a:b7:fc:45:59:57:
1f:9b:bb:1c:06:b2:19:df:82:ad:63:be:5f:48:09:bd:56:92:
c1:d9:1a:c7:4c:86:c6:e5:9a:c2:f1:dd:cf:ec:04:09:1a:74:
9e:20:b4:e9:15:7c:b7:5d:b5:cf:6c:23:92:5b:1b:8b:47:ae:
8e:41:6f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:51:25 2025 by rpki-client