Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
File: xseGdZEgDB9fn9DMPemVTcE5hi4.mft (raw, json)
Hash identifier: /Q8xXtjFTBlesJr5GTl+Od1W8Xi7MQWf1nvG31mj5uE=
Subject key identifier: 17:B2:F5:F8:13:BA:94:A9:33:D0:98:E6:7E:70:97:5E:AC:6B:2E:71
Authority key identifier: C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
Certificate issuer: /CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Certificate serial: 019748551DC26ECABEE313F4E67CC9D961E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
Manifest number: 04D1
Signing time: Sat 07 Jun 2025 03:00:27 +0000
Manifest this update: Sat 07 Jun 2025 03:00:27 +0000
Manifest next update: Sun 08 Jun 2025 03:00:27 +0000
Files and hashes: 1: n5CLi01m2wEwkEwNJimVxySnb68.roa (hash: 5V0GC7bRrvLJkkKN335rdHnMpL5HHN7RxPUN+snnmZM=)
2: xseGdZEgDB9fn9DMPemVTcE5hi4.crl (hash: Y6OEWZpbDHFy0dR4bx5KdmHn3RFPdINRejjoFnGV6Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:1d:c2:6e:ca:be:e3:13:f4:e6:7c:c9:d9:61:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Validity
Not Before: Jun 7 03:00:27 2025 GMT
Not After : Jun 8 03:00:27 2025 GMT
Subject: CN=17b2f5f813ba94a933d098e67e70975eac6b2e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:2b:7d:00:26:c9:41:81:05:1c:f2:bc:66:
eb:12:8c:3a:16:e5:22:19:8c:1b:af:bd:f4:e5:a8:
b1:44:e8:46:20:80:b6:d3:e2:fd:27:19:a5:4c:06:
5e:3a:18:a6:57:78:dc:8d:82:63:4a:df:56:2f:0c:
5b:09:e0:4e:ca:17:f4:62:b8:cf:84:3c:43:77:a2:
56:f9:cf:9a:34:13:09:22:ba:6f:cb:d5:bd:8f:ac:
67:ba:e8:a5:9a:3c:28:e8:93:a9:f2:05:6c:46:cc:
06:a1:20:31:59:b8:00:fd:ac:51:19:cf:d5:71:f1:
5a:ad:4b:16:f0:c2:28:41:40:50:94:f3:4c:77:1f:
c0:cb:9d:b9:0c:31:2b:37:45:d3:a2:5d:bf:71:9d:
12:a8:2c:95:1c:1b:29:75:44:49:59:e9:bb:b9:d4:
87:bd:e6:a5:98:1b:14:50:bc:2a:ac:8f:b0:60:0c:
1b:7f:4e:0d:b3:94:12:5c:cb:6a:04:c1:f6:b0:da:
e4:53:76:ec:38:7d:be:4a:0a:d6:3c:29:a3:97:69:
1b:3d:7f:cd:20:67:a9:e3:3b:cc:05:e9:e5:67:47:
b4:56:47:35:57:d7:7d:56:89:a7:b3:6f:a4:0f:af:
cd:7b:20:7e:75:78:9e:b4:37:04:85:97:e0:a2:7a:
24:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B2:F5:F8:13:BA:94:A9:33:D0:98:E6:7E:70:97:5E:AC:6B:2E:71
X509v3 Authority Key Identifier:
keyid:C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5b:2d:ad:65:2e:c0:d1:6e:65:0f:cd:99:b3:20:bb:a9:81:
bf:8d:27:72:5c:f5:fd:60:99:8b:b3:ba:7e:fc:c8:25:5c:f9:
6c:eb:5c:bd:a0:bb:35:ff:00:f2:12:ab:42:ca:47:e9:60:d7:
09:22:26:83:6e:c8:61:80:a3:90:26:6f:fb:8d:72:f4:91:9d:
a4:5c:8f:77:07:a0:95:e2:55:54:15:90:6f:b6:2f:31:a2:35:
2f:f5:bd:0b:5b:5b:de:66:b5:78:c6:49:9a:94:c3:ce:b5:d8:
1a:18:9b:da:04:0a:f8:8e:e8:ad:14:01:1d:12:b5:5d:27:19:
da:1f:3d:af:c7:aa:2c:45:44:cb:91:34:a4:2a:49:d4:11:5a:
57:1b:b3:d2:06:30:07:0c:53:99:df:00:c9:46:79:73:e1:8e:
0a:e2:4f:87:46:87:46:ac:24:69:34:8a:1c:d0:d3:09:32:fb:
29:a7:e9:b2:9b:3a:c9:9e:0d:81:d8:5e:95:ac:6f:5d:11:28:
a4:f4:3a:5a:8b:fa:0c:d2:22:6a:98:d3:53:e6:80:65:43:75:
27:6b:f8:e2:76:56:c6:d8:4b:8c:00:43:d8:8e:ab:7e:50:f2:
7f:73:33:08:8d:c1:0c:e4:ff:11:1d:e6:97:33:3f:22:b9:a1:
7c:6f:ff:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:12:04 2025 by rpki-client