Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
File: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft (raw, json)
Hash identifier: G/k74EgrXq3irG83DJsT8+DxZOlmMbsgZOmGLXWhC+Y=
Subject key identifier: A2:BE:0A:96:C7:A7:EA:FF:92:CE:6F:52:E2:B8:0D:E5:40:9C:D4:47
Authority key identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
Certificate issuer: /CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Certificate serial: 01974F33A16EFAEB811234C32D157F58145E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
Manifest number: 1234
Signing time: Sun 08 Jun 2025 11:01:12 +0000
Manifest this update: Sun 08 Jun 2025 11:01:12 +0000
Manifest next update: Mon 09 Jun 2025 11:01:12 +0000
Files and hashes: 1: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl (hash: 2klYYF9QxFsU6Et1tZXSWJbXbz+71J8XDEfUo2vdPIg=)
2: gbEdvQz4q0AdyM98MXiZjERkDX4.roa (hash: QnkSlwi1hREwXQkmvd9zqXoHe57V+gXhpktYubECCFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:a1:6e:fa:eb:81:12:34:c3:2d:15:7f:58:14:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Validity
Not Before: Jun 8 11:01:12 2025 GMT
Not After : Jun 9 11:01:12 2025 GMT
Subject: CN=a2be0a96c7a7eaff92ce6f52e2b80de5409cd447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7a:0b:5a:c2:5c:ac:6c:b9:d1:27:bf:ee:a7:
c3:1d:c1:8e:5f:88:13:3f:71:f3:21:04:81:bc:f4:
e3:9a:2d:cc:2f:b5:d8:35:54:c2:f1:55:f4:8a:a3:
4c:d1:5d:2b:fb:30:b9:20:f6:65:7e:60:7b:5d:69:
8d:18:6e:c8:94:f7:f7:36:c0:37:9b:83:f5:86:0f:
e5:05:b8:74:2e:ac:4f:13:12:77:c3:89:48:49:ae:
c0:f2:47:22:80:98:f1:fd:a1:5b:07:e4:d7:b5:04:
f2:0c:6f:24:e4:01:ac:dc:0e:c8:db:9c:ee:c6:28:
81:4c:8c:cc:42:77:d8:53:eb:1a:b6:37:fc:82:cc:
2b:c4:bc:a6:5d:70:20:84:55:13:83:32:51:66:bf:
a3:7f:14:6d:ae:42:cf:ee:24:8f:8f:e1:3b:42:08:
4d:2a:9a:5d:c6:21:5d:c9:d5:34:ef:9d:47:59:de:
6e:d0:73:51:3c:9a:a3:83:c9:44:c0:a9:c6:27:e2:
88:3f:52:4d:96:b1:04:67:71:0d:5f:9c:99:38:2f:
90:84:82:ea:18:3d:f9:2b:e8:31:38:0b:60:18:eb:
54:ed:81:0d:b0:89:3f:16:98:c0:64:07:13:2e:d0:
a5:3d:7e:df:03:e6:a3:37:bc:6c:43:c5:0d:e4:35:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BE:0A:96:C7:A7:EA:FF:92:CE:6F:52:E2:B8:0D:E5:40:9C:D4:47
X509v3 Authority Key Identifier:
keyid:5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:39:ab:07:36:5d:d2:c5:a0:e6:78:a0:25:27:bc:dc:85:e6:
aa:c0:c3:89:62:81:da:54:0e:a9:de:67:73:10:62:0d:28:0e:
b8:eb:f6:87:89:ee:5f:14:69:93:62:e7:ab:e8:b2:d7:8e:e9:
48:73:e2:79:e0:27:17:ca:58:0c:9d:a5:24:8d:da:c6:2a:4c:
53:4d:7d:fc:94:01:5f:45:2c:48:2c:a2:4b:16:b2:b7:25:33:
5e:45:d0:e0:83:27:58:da:53:00:4f:6f:ab:a8:32:09:53:46:
8c:eb:64:11:3e:32:b7:c0:ee:e6:7e:fd:42:af:34:03:77:9f:
16:c2:07:d6:1b:fd:7b:29:98:a8:0c:40:a5:bd:64:29:55:1f:
e6:b4:94:90:42:a5:9c:91:9e:bf:10:c1:32:77:51:fb:59:63:
79:52:0e:78:a8:24:87:66:8a:1a:f8:dd:60:29:c3:1f:b1:9e:
3d:3e:3c:b5:17:81:f0:0a:2a:8a:60:9e:7e:16:4a:cf:18:bf:
87:37:81:91:1c:25:3e:9d:0b:25:ad:f8:e7:3b:9a:ed:2d:df:
d0:32:48:1d:99:89:d7:04:72:9b:5e:40:d6:70:07:dc:22:61:
e3:4e:21:2a:49:5b:b6:0a:3c:9c:5f:2e:6d:c8:35:34:d4:e6:
f3:f2:ee:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:44:41 2025 by rpki-client