Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
File: _XF_OrY5RaG-c5wrOiWJvqVd224.mft (raw, json)
Hash identifier: 8NhLsMvpaZG35AZCBeym56dJPxk/VqIzHaYlCIZ/CFo=
Subject key identifier: 70:71:EC:3B:E5:C7:7D:95:EF:80:94:0D:6E:D3:4A:90:D4:88:6B:15
Authority key identifier: FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
Certificate issuer: /CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Certificate serial: 01974D7C23F52B9BE630AC1ADD691C5F9BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
Manifest number: 0B30
Signing time: Sun 08 Jun 2025 03:01:10 +0000
Manifest this update: Sun 08 Jun 2025 03:01:10 +0000
Manifest next update: Mon 09 Jun 2025 03:01:10 +0000
Files and hashes: 1: _XF_OrY5RaG-c5wrOiWJvqVd224.crl (hash: cp+L0wJBGm8PaIg7mecZGmTnN9RDX2p97JjosLWOEM8=)
2: gzdyy5qInnSa0M6b956pVUzgC-k.roa (hash: 2Ow3V4pucXvBImXLn02gpmIFTSdf3VU+/V7SnyCKOjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:23:f5:2b:9b:e6:30:ac:1a:dd:69:1c:5f:9b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Validity
Not Before: Jun 8 03:01:10 2025 GMT
Not After : Jun 9 03:01:10 2025 GMT
Subject: CN=7071ec3be5c77d95ef80940d6ed34a90d4886b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:3a:cf:83:04:ee:81:c9:a8:5a:96:26:a5:
e7:66:2e:b8:8a:7f:a3:37:0c:fc:1c:fe:70:6b:5e:
13:3a:0d:73:24:2f:2c:f2:20:e1:89:6a:d1:96:a4:
c5:16:65:8b:33:c5:9d:18:c5:64:44:83:88:76:47:
96:3b:b6:07:bc:b4:9d:a4:b2:4c:6d:75:44:8d:be:
e2:98:63:4c:a5:10:6f:9e:0d:01:5c:f5:18:a6:60:
0f:04:6e:a7:24:a8:91:ba:21:ff:1c:c6:be:3c:bd:
47:7b:a6:91:a3:e4:52:d2:db:20:9f:10:87:d6:58:
c1:79:db:bb:a1:48:2e:69:57:01:f3:78:0e:6d:1a:
9a:27:03:02:f2:35:da:9a:2d:d3:63:65:58:cc:b0:
c9:33:3b:12:14:e5:65:c8:30:46:0b:71:03:1d:8a:
ab:4f:77:b1:f9:71:28:41:ee:6c:ce:0b:ad:2a:ac:
23:99:ba:a7:4d:75:59:af:03:e6:85:8d:65:70:a4:
ef:39:89:f6:13:7b:8c:c2:7e:69:ac:e0:ce:56:f3:
73:c3:3d:52:d6:74:99:08:d8:be:6d:29:94:5b:5e:
27:d8:af:1f:54:47:06:c9:12:4f:63:8d:d2:92:2e:
db:d7:d6:af:17:f8:ac:44:67:9b:c2:3a:12:28:89:
47:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:71:EC:3B:E5:C7:7D:95:EF:80:94:0D:6E:D3:4A:90:D4:88:6B:15
X509v3 Authority Key Identifier:
keyid:FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:56:e6:b4:53:79:62:42:b1:f9:5b:d9:22:37:94:3a:75:07:
bb:d3:85:fe:85:2b:97:90:4f:b8:7a:21:03:c0:6e:d0:4a:84:
f9:6f:d8:4d:74:a7:a3:71:9d:8a:16:41:a9:18:56:2c:46:a1:
f1:ad:11:49:35:cd:27:83:1e:1b:fd:17:a6:54:ec:30:0a:44:
fb:1f:6a:4d:07:ad:1f:c2:68:f0:8b:3b:b2:fe:97:8b:28:74:
cd:0a:25:f3:74:5c:1d:52:10:74:c8:ee:89:27:eb:d1:cf:db:
a2:6e:de:cc:19:d8:6a:a7:17:ec:43:bb:bc:f5:9f:14:18:1a:
9a:92:76:fd:12:67:c6:df:fc:7e:66:82:e5:08:0b:e3:8c:75:
45:5e:37:36:0c:b8:37:39:2a:59:dd:20:cc:c8:e0:15:1b:1f:
a5:d0:2f:be:73:59:f5:85:bd:28:5b:4c:b6:15:d7:2e:6b:29:
1b:f7:31:80:e1:07:6a:b8:0c:14:71:96:f9:72:cd:2e:02:0d:
ed:0e:62:1e:72:b7:ef:67:51:0e:8c:6f:f0:f6:67:5f:48:ec:
6d:08:b9:96:45:d0:ad:0d:b5:ea:db:8e:d7:e6:f9:b5:29:97:
16:df:18:94:e0:f9:6f:13:7f:1f:8b:80:a2:40:92:ca:e4:8f:
96:cf:6d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:43:05 2025 by rpki-client