Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
File: XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft (raw, json)
Hash identifier: BYmNWdza82nRCUENkNNa1B7D/B0dqAiO7xgxUbm1ImQ=
Subject key identifier: 7B:D4:E3:4E:E6:CA:F9:61:A0:E0:F9:85:79:B7:18:6B:D2:25:CC:3B
Authority key identifier: 5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
Certificate issuer: /CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Certificate serial: 019757C81E0FCE7FBA651B576B29FA928373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
Manifest number: 1584
Signing time: Tue 10 Jun 2025 03:00:22 +0000
Manifest this update: Tue 10 Jun 2025 03:00:22 +0000
Manifest next update: Wed 11 Jun 2025 03:00:22 +0000
Files and hashes: 1: XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl (hash: VuOFG8rR6hO3e3kezSIbKVcRmwN6+syRWPikE57MUFs=)
2: ZhJ5kdVgunlmo848w1nL5S4mr34.roa (hash: /GDuU5hcbbZPCMfEmpk6BhKCTJ1fC6jXDas0PVjpCto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:c8:1e:0f:ce:7f:ba:65:1b:57:6b:29:fa:92:83:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Validity
Not Before: Jun 10 03:00:22 2025 GMT
Not After : Jun 11 03:00:22 2025 GMT
Subject: CN=7bd4e34ee6caf961a0e0f98579b7186bd225cc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:3d:e9:54:1b:5a:82:7b:29:97:c7:16:ad:
85:72:51:d9:16:da:47:a0:12:f0:20:e8:bf:bd:5b:
91:09:1c:01:14:78:99:14:79:9b:bb:2f:bb:60:33:
d5:61:ea:ee:8f:b4:0b:d9:9c:8c:c8:5d:ba:be:95:
5a:44:93:2c:e9:7f:6e:76:92:24:b6:f5:9e:0c:10:
5c:31:46:34:bf:49:70:e8:1e:92:01:35:d1:da:87:
de:17:b2:19:45:b7:c1:7b:06:be:6b:27:65:db:c8:
51:38:97:7f:ae:fe:7c:2d:0d:e5:df:f7:9d:69:af:
98:6b:57:87:0e:0e:92:93:37:b7:7f:d7:71:d3:5c:
ab:34:52:00:68:69:cf:88:52:45:d3:2d:1f:9f:fc:
f2:27:24:a7:47:75:92:2e:a4:62:0b:7c:46:80:a0:
33:94:4d:0c:9b:84:ef:e0:cb:ff:dc:83:d8:26:bb:
fe:2b:65:77:cb:78:02:70:14:67:ed:44:0d:10:4d:
79:e2:cd:ec:54:da:2e:ca:c2:cc:40:f1:87:40:af:
9b:95:d9:2e:e5:50:18:e7:ce:1f:2e:7a:dc:b3:90:
06:c5:05:5d:af:01:7c:d9:5f:59:c6:9b:3c:1d:9b:
bc:c8:7b:58:5d:93:26:fb:99:93:fe:69:1f:c5:0f:
51:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D4:E3:4E:E6:CA:F9:61:A0:E0:F9:85:79:B7:18:6B:D2:25:CC:3B
X509v3 Authority Key Identifier:
keyid:5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ed:d3:9c:23:da:68:06:26:33:85:90:4e:3e:69:85:0d:fe:
a7:99:05:e2:75:83:29:18:a2:6d:ae:98:d7:47:2c:5e:a5:49:
ba:44:cd:40:8c:c9:6a:bc:6f:95:b6:fa:a7:96:23:6f:5a:cc:
26:7b:71:14:9a:e8:ef:9c:07:a6:12:ce:5c:46:85:b2:e2:f7:
5e:0f:ea:33:b8:6f:ae:39:0a:7f:1f:74:da:63:21:e9:c5:da:
5b:7a:26:85:b3:7d:11:3f:c1:5a:39:b4:fd:3e:c3:df:ec:5c:
9e:27:78:cf:0b:b1:34:1f:7f:4e:ba:34:63:b3:a6:7a:b0:59:
f9:89:99:20:91:98:46:27:84:c5:27:44:79:1c:92:d6:1c:bc:
cc:8f:c2:71:d8:0e:86:c2:9d:0d:25:28:f7:a7:be:15:0a:ae:
e8:db:9a:2e:18:b3:6b:84:40:c9:66:bb:23:f6:ca:68:49:6b:
32:5a:e3:5d:d1:d1:d3:e4:41:9f:9f:61:cf:3f:02:aa:a6:a6:
9c:db:f8:39:5d:a8:a9:06:49:01:67:4c:3a:3f:14:a9:9c:0c:
63:14:b8:33:2b:7f:c3:a5:77:e4:dc:74:89:2e:83:5a:7f:ac:
50:bb:bf:f2:8d:02:c6:24:7d:8a:f0:d0:9d:40:d6:70:9e:df:
36:7b:38:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:05:33 2025 by rpki-client