Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
File: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft (raw, json)
Hash identifier: tJFEu8NH/3O1wrO93zoXvtkbyCFwzOo87EYpFuUcU3k=
Subject key identifier: F2:75:75:9F:41:47:6D:78:E9:34:2A:A8:A6:80:0F:F3:8E:39:1B:EF
Authority key identifier: 5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74
Certificate issuer: /CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574
Certificate serial: 01974E8E1CDFD02DE173A8FAECCE3FF30AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 08:00:25 +0000
Manifest this update: Sun 08 Jun 2025 08:00:25 +0000
Manifest next update: Mon 09 Jun 2025 08:00:25 +0000
Files and hashes: 1: HZdIrchIDCiQCwbuPhc70E8YbWU.roa (hash: uDrefFzWXlfoxlCxsdKnI68bX6+lo8xUQyNPFxh8fsk=)
2: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl (hash: BEOi4cqvnuy7639ZkIvvnQp5QCB7LxrBxkVK0rDcMC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:1c:df:d0:2d:e1:73:a8:fa:ec:ce:3f:f3:0a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574
Validity
Not Before: Jun 8 08:00:25 2025 GMT
Not After : Jun 9 08:00:25 2025 GMT
Subject: CN=f275759f41476d78e9342aa8a6800ff38e391bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:1c:20:2c:54:dc:d7:72:7c:95:6c:d0:b2:
d1:73:02:0e:59:3b:13:d3:50:79:4a:00:a9:e1:5a:
35:f3:22:37:22:bb:6e:d9:94:70:df:f5:39:50:1e:
f6:85:6b:de:5e:f7:a4:31:32:04:9f:21:a1:14:7a:
ca:01:5a:6d:e5:74:d5:d9:86:4a:87:99:e4:bd:75:
e5:1a:73:bb:67:4e:00:05:4c:3f:95:e0:07:e8:61:
5b:d9:2e:d9:37:cb:fa:30:c7:20:5c:f7:bf:3b:a8:
ff:a2:2d:43:d6:ff:12:2f:9c:79:64:bc:ce:e8:b6:
85:df:37:cc:d0:c4:cc:02:4d:2b:ba:8c:8d:d2:6d:
be:34:2d:02:e8:9b:39:82:93:50:7c:ce:29:1c:f2:
2a:bf:1e:43:2b:98:22:92:2d:79:d2:47:20:aa:c7:
e1:3f:00:64:93:e3:1e:4d:fa:3b:82:81:aa:6d:b4:
ec:6b:47:e0:8b:4d:69:02:c8:5f:c8:92:12:6d:5d:
74:14:14:31:12:e1:a4:e0:c1:b0:4d:63:2f:33:fd:
02:ea:9a:4f:98:2b:46:aa:6f:30:52:ff:f3:d4:52:
0a:99:79:8f:8f:93:e3:ec:a7:6a:34:38:91:06:08:
71:6d:b6:12:32:fa:04:a6:81:be:0b:28:1d:c4:ca:
cc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:75:75:9F:41:47:6D:78:E9:34:2A:A8:A6:80:0F:F3:8E:39:1B:EF
X509v3 Authority Key Identifier:
keyid:5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a8:e3:7a:4d:d3:00:c5:66:cb:bf:2c:41:dc:42:c3:2b:94:
2a:78:eb:06:1f:03:5c:7a:43:11:7c:59:df:55:13:49:79:14:
a7:bf:81:fd:7b:7c:b0:48:db:44:8e:eb:8c:26:0b:4e:59:1c:
ed:71:be:73:3c:8f:36:04:e9:6e:d6:01:d9:2e:a4:92:27:29:
8d:25:d0:dc:51:e3:3f:54:17:7f:ff:0e:fb:8c:0c:36:34:de:
57:47:04:52:8e:aa:c4:bf:f6:da:1c:5a:89:0d:6c:94:fd:b5:
b5:80:25:24:51:cb:1a:32:74:86:f4:d4:2a:22:6f:db:75:10:
f4:de:07:e2:4f:05:19:58:5f:05:fe:3e:45:e2:8d:6d:43:f5:
f8:73:30:08:14:0b:6a:12:90:8e:10:ae:09:ce:66:d7:ee:50:
6a:17:71:f5:10:13:b3:8a:fb:a8:35:b8:32:31:5f:65:9e:a6:
27:43:77:23:fc:09:3d:5f:42:a3:3b:1f:28:4a:dd:4b:d6:6f:
a2:f6:bf:8c:0f:6a:f6:3a:0e:48:1f:35:5a:e1:34:fa:3f:23:
96:82:71:b4:b9:0b:60:05:5d:85:4b:3c:bf:af:1c:8f:ab:13:
6d:c1:4e:fa:b9:77:17:69:dc:e4:db:97:25:2f:49:e4:d1:99:
0f:bd:1c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:23:45 2025 by rpki-client