Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
File: xjfMzVzaAYlbGJzKlfKWtcswx8g.mft (raw, json)
Hash identifier: ZQRMx9rb1FLBqvDRhs+zVfz2/5DDu1VUHttbG+Hjy+s=
Subject key identifier: 75:AC:BB:8E:07:F7:07:CA:BB:7D:D0:D8:68:05:60:3E:53:70:19:8D
Authority key identifier: C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8
Certificate issuer: /CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
Certificate serial: 01975234A1B370B285DE9C650F2F54C3C741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
Manifest number: 0F9E
Signing time: Mon 09 Jun 2025 01:01:10 +0000
Manifest this update: Mon 09 Jun 2025 01:01:10 +0000
Manifest next update: Tue 10 Jun 2025 01:01:10 +0000
Files and hashes: 1: setwbHKxCPa52Elr9rNK2rsq568.roa (hash: 02SvDqNnAJ5dRMEAMQRIAHSYXYUFEMZjO5nV2nUJjV0=)
2: xjfMzVzaAYlbGJzKlfKWtcswx8g.crl (hash: ndknB9WlAXEiVZnrEBgtmLDsqp+kwuhRDbwmh+XETag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:a1:b3:70:b2:85:de:9c:65:0f:2f:54:c3:c7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
Validity
Not Before: Jun 9 01:01:10 2025 GMT
Not After : Jun 10 01:01:10 2025 GMT
Subject: CN=75acbb8e07f707cabb7dd0d86805603e5370198d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:af:0b:59:00:f0:0b:ab:28:96:5e:0c:e9:
46:e2:bb:a2:8c:29:94:3a:42:e4:f9:0a:43:d0:94:
b6:a5:49:0b:8a:66:41:ab:08:14:41:bd:3e:fc:cf:
f6:26:dc:32:a3:00:62:1a:25:58:84:9a:fe:05:d5:
90:47:c3:d6:88:cd:c1:b8:43:cc:ad:1f:93:eb:6d:
b0:a9:91:7d:73:76:8d:66:b7:da:ac:3c:51:bc:f2:
c5:a0:dc:df:4d:dd:67:86:11:d9:43:22:c4:a4:cf:
51:b0:66:f7:36:22:ff:30:5e:c5:1d:9c:02:7c:2b:
d7:e6:4f:1e:e8:04:97:a3:25:c7:d3:4a:e0:9b:d3:
f8:b3:fb:85:6f:24:ce:b4:26:af:b3:69:85:21:f3:
6c:77:02:4a:ec:6a:77:f5:48:44:81:05:66:40:d3:
2a:d6:22:2c:43:92:01:08:8c:fa:6c:bf:4b:a4:b5:
cf:5f:83:78:ac:ee:56:20:0e:e1:37:e9:cf:1e:df:
7d:67:6d:d1:d9:9c:17:f5:81:f3:af:61:f3:9a:90:
bc:09:7c:79:b9:aa:d1:f2:f5:21:68:5d:ca:46:c7:
57:12:84:df:81:3d:9e:4c:0e:f9:90:83:9e:3a:85:
6e:97:b9:2d:9b:31:30:86:7e:66:04:00:6d:19:8d:
54:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AC:BB:8E:07:F7:07:CA:BB:7D:D0:D8:68:05:60:3E:53:70:19:8D
X509v3 Authority Key Identifier:
keyid:C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7f:76:74:73:19:62:1d:2f:da:53:2d:63:2b:59:b2:be:c5:
19:dc:ea:45:e0:4e:0f:07:15:cf:1e:8d:fe:ba:62:c1:80:0b:
49:e5:b3:d7:e0:5b:14:cf:39:68:8d:dd:77:47:31:4d:50:7b:
64:0a:9f:96:ee:59:c7:56:e1:0f:d7:f7:d5:e0:d1:4a:a5:a2:
87:40:e0:48:ab:9d:39:fb:3e:99:60:91:95:0d:47:cb:68:60:
67:de:0d:f7:3d:e9:f1:56:5a:1d:5e:3d:3d:b5:56:08:e2:6c:
76:2b:57:9e:ad:0a:aa:09:b7:5a:95:8f:a5:68:0d:e3:61:c4:
3a:45:bb:69:79:96:05:09:2b:ab:70:e7:d8:30:09:3f:a8:a8:
82:fc:1b:af:a1:4a:92:a0:81:ba:3c:ce:67:d2:fd:cf:c8:5a:
80:30:68:c8:cf:bd:aa:0a:1b:ab:95:37:4d:0d:cf:a2:30:ce:
0d:17:27:a8:e1:5e:67:b3:6c:e4:89:fe:a2:d5:be:df:29:a4:
f8:c0:f8:b6:23:1b:22:59:f8:77:5d:08:2a:93:70:bc:68:85:
f6:84:c5:7d:25:90:32:ae:1a:cd:fb:24:aa:00:45:1a:a4:a8:
7b:e4:8d:63:fb:3c:1a:18:48:ba:49:16:d9:57:c5:8d:21:f6:
1a:26:a1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:52:29 2025 by rpki-client