Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
File: xHqEBhZxYD3cKujuqcrVHudarsY.mft (raw, json)
Hash identifier: /xmqGzbeEN3CxFOB6mX5Qsk4N/Yafay+fQ5x3e5yjuY=
Subject key identifier: E4:CE:02:FB:F9:8D:65:0D:FD:D0:74:41:33:F2:B9:55:B0:A1:32:77
Authority key identifier: C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
Certificate issuer: /CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Certificate serial: 019752342824376933EF4F195CB13B43FC1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 01:00:39 +0000
Manifest this update: Mon 09 Jun 2025 01:00:39 +0000
Manifest next update: Tue 10 Jun 2025 01:00:39 +0000
Files and hashes: 1: 1G_BWf-F8T8J8X8N9NNB4K_YYMY.roa (hash: kKD9/wMia+gnqXI1OLYz+C+9k0a7eBZ1ba1nm7Hyp0A=)
2: xHqEBhZxYD3cKujuqcrVHudarsY.crl (hash: oeukRjeOIgDlcoS52zkqEfgEK2s0stcOaT3uyeOFn7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:28:24:37:69:33:ef:4f:19:5c:b1:3b:43:fc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Validity
Not Before: Jun 9 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=e4ce02fbf98d650dfdd0744133f2b955b0a13277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1a:83:e8:ba:e1:2c:83:d1:b1:5b:d8:94:bb:
2d:46:03:08:26:b4:35:28:68:69:90:6e:8d:16:45:
c4:23:1f:7b:87:42:9b:17:7f:88:c2:79:1e:2c:e0:
47:09:fd:e8:57:1a:87:f9:28:6e:6f:47:04:14:94:
dd:05:84:cb:a6:d7:b8:f3:9b:52:9a:ac:c7:7e:7b:
f3:c1:82:f2:12:51:b4:80:8c:41:08:dc:51:74:30:
f1:d4:24:a8:fc:27:17:55:e6:3a:1d:3b:cf:df:2e:
7f:91:29:4f:ff:a4:75:09:e0:67:83:f7:70:02:c4:
4b:49:0c:34:83:41:6d:e5:ce:8b:51:2a:c8:99:79:
c6:bf:78:4a:26:b4:ea:b3:be:ad:ca:79:fd:f3:53:
d4:a0:a6:c1:d8:76:ec:4c:26:7b:6c:a5:b7:88:1a:
f9:ed:79:61:83:07:c4:30:f8:75:53:27:88:3c:4b:
fe:a3:02:04:65:48:e6:1b:ac:19:2b:91:2a:b6:74:
86:67:28:59:90:42:d0:39:39:c1:72:33:ec:b9:3d:
5d:b0:a7:f8:67:5a:33:c3:47:2e:4e:f0:58:45:c6:
28:98:00:46:29:0d:0c:c7:98:04:4f:65:0c:ad:e1:
45:db:65:a3:90:88:12:d7:17:f0:96:b3:e1:24:72:
b0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CE:02:FB:F9:8D:65:0D:FD:D0:74:41:33:F2:B9:55:B0:A1:32:77
X509v3 Authority Key Identifier:
keyid:C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:44:e9:b9:6a:43:e3:1b:5a:a6:ae:3f:c4:dd:3c:45:a2:75:
65:03:29:5a:16:c5:35:3c:cc:8d:b3:24:cb:f9:f6:0f:99:49:
57:bd:d9:f5:74:32:39:79:c6:58:8b:ee:ae:9d:c3:9a:98:cd:
24:6b:25:a7:c5:5d:c7:c8:c4:52:43:22:fb:50:a2:7a:da:83:
56:38:a0:11:22:92:12:f8:da:fb:6e:21:27:36:f4:e8:64:32:
f0:f7:ae:ae:50:71:4b:88:fb:a7:4d:5e:49:69:ee:5b:e1:26:
3d:8d:f1:5d:5d:e7:f2:21:62:eb:bc:2f:6b:24:4b:0b:5a:57:
27:55:a0:00:db:00:6a:a6:74:15:5b:6e:c1:2f:5a:89:e0:fc:
cf:cf:8a:88:2b:c6:e4:eb:04:dd:21:fc:51:9c:b6:e2:3d:b6:
fd:63:28:41:2a:04:a0:98:b2:22:af:bc:d0:6f:91:6b:2e:12:
70:22:c5:95:89:e7:5d:41:f7:7f:64:a6:b6:6c:1e:ef:86:b9:
e9:10:5a:b8:2c:7e:15:96:a4:51:77:1c:01:4a:95:ad:88:f7:
05:cd:68:e2:15:9d:07:a0:53:87:e4:87:93:4d:f8:76:ef:94:
50:86:53:8b:bd:3d:4f:b4:c4:38:5d:21:9c:b2:90:42:4f:08:
4f:b6:59:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:52:07 2025 by rpki-client