Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
File: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft (raw, json)
Hash identifier: f0VVAL2jY8YKnDf70XZ7Sz9hI6GUpcAcHtMt9j0WRKA=
Subject key identifier: 1E:DD:93:8A:35:55:E2:14:46:4C:C7:6A:8B:83:33:E4:69:B6:3F:59
Authority key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
Certificate issuer: /CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Certificate serial: 0197530FAF44E7615C8D7B745A0841109214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
Manifest number: 059E
Signing time: Mon 09 Jun 2025 05:00:26 +0000
Manifest this update: Mon 09 Jun 2025 05:00:26 +0000
Manifest next update: Tue 10 Jun 2025 05:00:26 +0000
Files and hashes: 1: 1-PjUZT902dDkd6VPDrdDPHXwUZw.roa (hash: MHJPB3k7tQCL3suOF/2f4yZcUJ+jnvq9tJxwFWeEEbc=)
2: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl (hash: MNMThCPs2ZDNyinBlEIrW39zrkOmoc/1AnbhZrAW/yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:0f:af:44:e7:61:5c:8d:7b:74:5a:08:41:10:92:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Validity
Not Before: Jun 9 05:00:26 2025 GMT
Not After : Jun 10 05:00:26 2025 GMT
Subject: CN=1edd938a3555e214464cc76a8b8333e469b63f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fd:d1:99:84:51:e3:b2:bf:0c:ef:ac:2e:14:
de:fc:40:0d:d3:e9:ee:d3:6f:7b:f5:1e:71:92:21:
18:6c:4f:3a:15:b2:08:4f:86:95:f1:e2:50:c8:c5:
96:7f:ab:61:3b:51:44:bf:f1:72:63:e0:c0:c9:4b:
00:e4:36:17:4a:99:f9:45:3f:40:78:03:95:61:c3:
fd:8f:39:85:c5:71:33:46:33:02:01:5d:c1:16:84:
36:bd:79:bd:6e:5c:1f:7b:6e:5f:b2:c1:8a:db:dd:
f2:a9:4f:17:34:fa:42:2d:90:5d:10:47:55:e6:44:
9b:45:39:7a:ff:10:4a:b9:9a:33:bf:1d:65:e8:a0:
66:7d:de:db:3a:9d:ca:11:61:53:13:70:26:64:37:
09:9b:bd:54:76:42:9c:dc:cf:61:3d:b8:d0:47:b9:
c4:c0:1e:71:51:bb:36:d2:93:4c:5a:6d:50:2c:86:
dd:39:7c:12:e6:23:ac:84:c9:42:b1:fc:1e:31:ed:
61:91:6a:0a:ef:12:a6:e0:69:51:01:69:1f:42:53:
df:e3:02:87:ce:20:d2:5f:37:d5:0b:4e:8a:ca:f1:
c6:89:48:90:75:d9:21:b7:b5:5a:d2:df:0b:e6:19:
89:d8:cd:06:60:a0:1c:48:d0:e0:cf:c8:23:dd:03:
49:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DD:93:8A:35:55:E2:14:46:4C:C7:6A:8B:83:33:E4:69:B6:3F:59
X509v3 Authority Key Identifier:
keyid:91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:49:62:f4:cc:13:dc:35:b7:4d:95:9a:af:e5:a1:73:32:5f:
5b:21:3a:50:9f:de:a6:62:19:69:ba:89:a0:20:a0:c0:b5:26:
5a:1d:a9:a7:67:28:df:31:bb:8d:1f:d0:d4:be:d4:c3:3f:69:
5b:23:4d:d9:65:2d:f4:64:4b:8a:5a:c1:ee:76:57:54:03:6c:
b6:ee:dd:90:52:c5:c3:fe:9b:37:7e:80:1c:71:ba:60:e7:06:
03:20:b8:ba:36:eb:69:f0:9a:7f:d9:6b:77:49:b4:9b:88:02:
cf:e4:83:5f:92:95:16:1a:ae:a2:30:e0:78:42:0a:cf:b6:aa:
a0:bd:25:83:9b:d9:49:46:0d:35:b8:44:d6:df:b3:24:8a:7f:
95:94:ed:d6:ce:56:8f:cb:01:a6:ff:49:d8:4d:34:41:23:cf:
b5:e1:7c:e2:52:a3:82:19:64:06:bc:c3:9a:5b:a5:58:a3:a1:
91:cc:7c:e1:2f:32:82:d3:4e:7b:87:e3:7a:83:43:95:96:d3:
f9:db:c7:11:84:01:62:83:be:e9:60:31:ca:18:dd:91:bc:ed:
33:c0:68:5d:69:90:3b:cb:9f:d4:b9:64:a6:37:59:d0:16:11:
49:b1:2d:d6:cd:42:e0:e9:22:8d:4b:08:39:01:22:b9:3a:2a:
06:9a:b9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:20:24 2025 by rpki-client