Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
File: XCnLotrPDvn6IgkAMrsVmhCRQPA.mft (raw, json)
Hash identifier: /uDWlRsb/u7e1GjJplhZ/SGUCrom+DP+XeINYmWk3NM=
Subject key identifier: F5:AB:36:EE:18:F5:0B:58:15:CE:AA:2A:96:4D:D1:1F:D6:73:73:F8
Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Certificate serial: 0197512145A233F8A993F2BD587E3DDDBDD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 20:00:24 +0000
Manifest this update: Sun 08 Jun 2025 20:00:24 +0000
Manifest next update: Mon 09 Jun 2025 20:00:24 +0000
Files and hashes: 1: XCnLotrPDvn6IgkAMrsVmhCRQPA.crl (hash: ULanNih44zdtVYE3HCbT5DxJ45uSu+pnBOinVtG+5pw=)
2: uMKYK0zWnMRt1XBJkaQ1CMnyyVw.roa (hash: yhNmYUr+FS9v4wFEYBgKw1+Munbk5IEg7AdZjbcucQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:45:a2:33:f8:a9:93:f2:bd:58:7e:3d:dd:bd:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Validity
Not Before: Jun 8 20:00:24 2025 GMT
Not After : Jun 9 20:00:24 2025 GMT
Subject: CN=f5ab36ee18f50b5815ceaa2a964dd11fd67373f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:05:f3:12:c0:0d:54:92:ca:6b:f3:02:73:
03:e4:99:1a:b8:27:02:e4:2f:1a:8c:66:aa:f2:2d:
ea:52:ac:21:0e:4d:07:fc:fe:bf:e3:24:34:c7:59:
1c:ab:6c:95:e4:85:71:1b:7d:2a:27:9d:3c:c2:3c:
a6:06:75:4d:9b:36:a4:9e:1c:3a:b8:ab:e6:c7:48:
30:59:60:fc:fb:f6:db:18:69:01:d5:af:60:30:2c:
27:50:86:9a:27:20:a2:e0:ad:48:d0:cc:1e:27:28:
75:4c:ad:ee:02:8b:a7:92:5c:30:3d:dd:f5:94:5b:
c5:8f:f6:96:b4:27:0c:d8:a2:53:aa:da:9b:83:e8:
b3:22:96:56:0f:61:1a:3a:b7:e6:98:bc:55:b2:c2:
32:b3:4e:84:76:7b:3b:0a:fa:0f:d5:ac:06:3d:52:
a6:c9:93:dd:1b:73:32:41:82:4c:0c:fb:15:a8:0a:
24:47:cc:47:c2:ea:0d:81:a4:c8:a4:7c:1c:5b:bb:
8a:44:dc:2c:50:19:f1:54:a4:22:24:46:5f:75:da:
d5:6b:d7:6e:08:e8:66:dd:b1:d1:24:3b:cf:36:b1:
8a:16:ee:57:1c:d8:09:34:e4:38:20:e7:75:22:e0:
e5:73:33:53:dd:06:eb:19:93:5e:49:ba:d5:da:83:
97:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AB:36:EE:18:F5:0B:58:15:CE:AA:2A:96:4D:D1:1F:D6:73:73:F8
X509v3 Authority Key Identifier:
keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4d:f6:5b:2e:0f:a5:f7:3a:34:d1:71:88:80:1a:7b:01:cc:
08:ba:c1:2b:f9:fc:20:f0:60:97:b6:85:9b:d1:6b:89:29:7b:
50:8c:05:36:58:e9:3c:df:df:51:91:03:9e:da:6a:e1:b8:b6:
ca:c2:0a:6a:6d:42:09:c7:f6:2c:4c:9d:e5:f9:e6:5f:e6:60:
03:a9:fe:66:14:d6:d1:94:ca:56:c4:58:fe:d4:82:fb:53:47:
bb:b5:01:7e:a4:a9:b1:ff:5f:f6:d1:d3:da:3b:43:2a:73:8b:
f6:ad:3e:44:36:09:f0:c0:b1:3b:e7:79:8a:53:27:9d:b7:4d:
a4:78:e2:73:3b:f6:fe:9d:7c:bc:d3:29:2c:de:a5:e1:28:d9:
63:ac:a9:91:5c:3e:33:1b:30:96:f4:1d:c4:1c:45:6e:d9:1c:
f8:8b:ec:14:3c:21:2b:59:97:7e:83:5c:91:d4:0a:9d:2f:1b:
07:3d:31:7a:50:51:ff:6e:dd:3e:67:ba:59:13:c2:ff:6d:6b:
ff:46:ba:88:12:6f:15:49:af:06:b8:56:88:3e:f1:11:6e:d1:
12:30:81:e1:2c:ed:5b:5d:fa:f0:cc:eb:d1:91:4d:07:3c:72:
30:8d:78:05:12:96:00:e8:d3:69:f9:02:f4:eb:67:0b:ff:bc:
6c:5d:08:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:07:37 2025 by rpki-client