Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
File: xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft (raw, json)
Hash identifier: gcZPYPoPE0utKazEow3hir7GqSn8Z2FvBLzZXhnuaR4=
Subject key identifier: C5:20:BF:DA:6D:B0:5C:1D:98:6E:E5:D2:7D:D2:E4:86:5C:4B:A3:B7
Authority key identifier: C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB
Certificate issuer: /CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
Certificate serial: 01974B5663D027869E10E2710FDC79C69953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 17:00:42 +0000
Manifest this update: Sat 07 Jun 2025 17:00:42 +0000
Manifest next update: Sun 08 Jun 2025 17:00:42 +0000
Files and hashes: 1: OvOkWatHrFgmj60O6Cjij4Ojo9Q.roa (hash: vl4YZSTqxlbqeunj3GnUeIqLip/YzNXqb6yP9ApEp70=)
2: W_HszaJ5NOP0MnKr_gX_tIwwzrM.roa (hash: KBxuRHIVq96Z+ZSk6DOhyPHLuGESXEU5ZMYMHCDEzBE=)
3: xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl (hash: O2HYEYtMlrG9Z4y3MraAemFKCowpPLVSP8qsTq/cYWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:63:d0:27:86:9e:10:e2:71:0f:dc:79:c6:99:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
Validity
Not Before: Jun 7 17:00:42 2025 GMT
Not After : Jun 8 17:00:42 2025 GMT
Subject: CN=c520bfda6db05c1d986ee5d27dd2e4865c4ba3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:31:25:0d:dc:b0:af:b2:ab:6a:27:18:6a:
0b:77:51:67:e6:c0:6f:47:23:07:7b:cd:01:1d:d8:
56:ca:52:b5:b4:2c:6c:59:fb:8b:7f:ce:7a:23:4a:
ef:06:72:9b:d0:13:64:b5:86:d1:61:a0:bd:7d:cf:
89:0e:21:05:bc:c4:c0:5e:73:ec:81:a5:90:94:b9:
7d:a3:3f:52:6d:0e:e2:64:fd:e0:04:24:0f:23:bd:
38:88:1c:50:58:c0:6c:f0:c9:97:17:fe:f3:00:3b:
56:c2:ab:e3:9b:ce:30:ce:82:89:0d:d1:d3:05:a0:
d9:8e:e7:45:8a:bc:72:10:72:2f:cb:ad:f3:86:6e:
52:aa:bf:3e:fa:61:67:1c:8f:4d:ec:20:e9:71:d2:
d0:ba:af:03:dc:3a:a9:f4:f6:f0:9d:18:1a:02:5c:
df:85:bc:22:2e:5c:8f:dd:ad:5e:4b:7b:24:eb:2f:
cc:81:44:74:e2:54:65:b2:75:46:e3:e6:68:49:ca:
98:9a:36:fc:2b:34:a2:51:1e:b4:1a:0f:69:cd:89:
89:41:ff:ce:c5:e9:f9:f3:c6:7b:55:d5:e9:0b:84:
eb:8c:f4:82:c5:88:8c:4a:88:12:cb:56:36:ff:31:
36:48:d4:54:13:76:db:7e:81:70:e4:17:dc:fd:0a:
62:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:20:BF:DA:6D:B0:5C:1D:98:6E:E5:D2:7D:D2:E4:86:5C:4B:A3:B7
X509v3 Authority Key Identifier:
keyid:C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7a:10:80:ec:7e:6d:a4:6a:3f:9c:34:1a:23:e4:c1:b9:ef:
c4:5d:60:c8:31:e3:ad:9d:29:4e:c4:04:d2:10:fb:cf:95:2f:
78:bf:11:40:c0:76:c6:10:a3:47:08:53:04:c3:29:51:52:ee:
a7:61:5a:70:5a:2f:20:0f:f5:f2:0d:8b:69:1e:db:8a:7d:b0:
19:8d:06:48:bf:93:17:aa:6c:97:2f:10:58:55:2b:34:bd:77:
5f:fb:07:c3:d5:d1:5d:2f:61:de:f9:ef:d5:62:ae:cf:bb:79:
15:74:34:57:5c:52:c2:0a:09:a6:10:d1:91:b1:8f:f3:ac:55:
94:db:9e:e1:ac:45:51:9d:22:87:1c:65:b3:c9:75:bf:12:d3:
cf:a5:89:bc:28:d7:b0:e5:fd:9d:85:2c:7e:c4:b6:5a:23:db:
2a:90:55:9c:d8:24:84:cb:f6:a3:c0:e1:27:7e:24:2c:5a:b9:
65:14:2e:e5:2f:06:09:9a:45:a9:93:74:d0:0d:cc:f4:7a:1f:
67:9c:28:bc:6c:0a:d0:8e:14:68:2d:3a:06:9c:9e:e4:7f:0a:
87:74:a4:88:fc:1b:d5:b1:76:1a:0c:6f:62:22:3f:ac:94:d7:
00:42:62:ce:57:bf:1d:d4:93:53:8c:56:08:5a:00:ab:86:d6:
ec:c9:43:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:03:13 2025 by rpki-client