Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
File: XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft (raw, json)
Hash identifier: ptN9G55SP7tHrCkHIcPbswxA8XrBHmM6RhmVRh+EKNU=
Subject key identifier: D1:CC:BF:F7:D0:D7:06:95:E3:A5:05:00:96:47:BA:39:80:10:CD:E1
Authority key identifier: 5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF
Certificate issuer: /CN=5e4098f206850488b72cdde8387c3181c63f8cdf
Certificate serial: 0197500F12FA34926BA4566CC67F0EA8DA74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
Manifest number: 0330
Signing time: Sun 08 Jun 2025 15:00:54 +0000
Manifest this update: Sun 08 Jun 2025 15:00:54 +0000
Manifest next update: Mon 09 Jun 2025 15:00:54 +0000
Files and hashes: 1: XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl (hash: nXWsKiKUv870cTZnCjgXZiTL1aQ66fSIft/XlZLokDs=)
2: Zalmb79lgnJ8ZqrgJMNHmIB0_a8.roa (hash: qT5QBRK21+1uxjdCx9gW03qYws/IDIrgYu8jrzg9fD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0f:12:fa:34:92:6b:a4:56:6c:c6:7f:0e:a8:da:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4098f206850488b72cdde8387c3181c63f8cdf
Validity
Not Before: Jun 8 15:00:54 2025 GMT
Not After : Jun 9 15:00:54 2025 GMT
Subject: CN=d1ccbff7d0d70695e3a505009647ba398010cde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:c3:5b:a5:47:62:12:13:d9:c1:90:f1:88:
8e:1b:bb:b5:cf:a0:8b:c9:48:c7:44:21:80:90:b1:
ba:4c:06:3f:20:15:bb:e3:8c:ec:8d:59:b8:19:1c:
a9:6e:f4:56:dc:47:7a:e9:d8:4f:16:9c:f5:f7:6e:
ab:f8:f9:b5:18:27:c3:54:03:32:22:44:1b:9b:0a:
e5:b1:6e:83:97:67:26:7b:12:07:fc:48:33:b5:87:
90:18:2d:7e:43:50:41:f3:42:56:f9:0a:df:7c:57:
5e:4f:6b:5e:4b:00:6b:53:15:23:eb:df:c6:06:de:
c7:93:4a:0d:4d:16:2e:ca:cd:e7:10:dd:6e:a2:1a:
6f:4d:9f:83:b8:d3:cf:d0:b3:15:dc:a3:fa:7a:ac:
56:1a:30:db:cb:e0:93:43:bb:6a:3e:67:1f:9c:aa:
0d:32:20:7b:31:61:06:4d:9d:e1:c5:fd:fb:86:5c:
96:15:6e:26:95:3b:d8:06:d3:1d:d3:6c:64:47:fc:
36:02:4a:c2:c7:7e:56:09:60:05:3b:32:d5:e2:c0:
00:6a:c5:3c:6c:e5:98:b2:d0:ed:8d:39:12:57:a0:
cb:d0:7e:64:ae:79:d5:45:26:eb:4c:d4:d4:38:65:
e5:40:37:b2:d8:a3:53:d7:81:e8:f9:55:09:01:bc:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CC:BF:F7:D0:D7:06:95:E3:A5:05:00:96:47:BA:39:80:10:CD:E1
X509v3 Authority Key Identifier:
keyid:5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b8:c0:80:03:be:e5:a2:4b:2c:fa:a4:56:fb:fd:df:95:96:
43:d1:da:ef:81:43:e8:fc:ed:ee:7a:92:18:9d:56:da:91:8f:
74:0f:1b:71:78:2d:1f:53:67:eb:21:01:ba:ab:fc:bc:4b:f1:
27:c6:94:7e:70:8c:0b:45:94:3b:26:9d:ae:f5:78:d9:2f:84:
31:88:5d:6f:6b:51:7e:59:63:e0:91:bd:80:b9:3a:b2:6a:c0:
b8:31:72:f2:01:7a:77:17:dc:a8:31:85:7b:fa:1c:0c:98:66:
62:69:d7:41:69:69:c3:8c:54:db:b1:02:ff:2c:9a:48:ef:5a:
6e:36:e0:06:76:78:02:d2:6e:26:e9:0b:e8:a5:70:f6:b0:e0:
fc:7a:0a:63:ae:3f:9f:f0:91:d5:fb:ca:3f:ae:d6:80:38:34:
00:44:64:39:a5:9c:8b:ab:9d:ce:1f:ef:9f:7a:06:67:87:27:
f3:ff:3a:2a:e5:72:5a:98:aa:be:24:d3:d8:5f:a3:72:dd:4f:
5d:00:4c:bc:b5:f5:8f:a5:50:93:ab:6b:48:96:ad:ff:75:d2:
0b:05:be:29:63:5f:92:c5:6f:74:cd:f8:86:00:70:d3:58:78:
2d:f8:8e:34:7d:c4:2e:76:d6:f2:55:32:bb:7b:1e:9c:71:30:
ad:16:11:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:07:45 2025 by rpki-client