Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
File: xVoeQFH2j-i3IOg92tM7dlHLfvk.mft (raw, json)
Hash identifier: fSNSfj9X23Nx1Grk+9t2SN1tIcL/Anv1iJi2it3kgto=
Subject key identifier: DF:4F:D8:98:71:5B:0C:BD:8E:F8:79:3E:86:60:E1:78:C4:49:A9:ED
Authority key identifier: C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
Certificate issuer: /CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Certificate serial: 01974967C21901F3FBAAF0D844BDDEDF5F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
Manifest number: 0BFE
Signing time: Sat 07 Jun 2025 08:00:25 +0000
Manifest this update: Sat 07 Jun 2025 08:00:25 +0000
Manifest next update: Sun 08 Jun 2025 08:00:25 +0000
Files and hashes: 1: ZCz_B_c4Ab7TJ-Wdj6CNbe4vJM8.roa (hash: GKBVpj9NFqT4kWPy6LEsdkgiDMQ6Chmhcoso+7TmqfM=)
2: xVoeQFH2j-i3IOg92tM7dlHLfvk.crl (hash: ZBlEccRuDlP+GX9mEveywaE2z3PHaiBE6wFc87+q8vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:c2:19:01:f3:fb:aa:f0:d8:44:bd:de:df:5f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Validity
Not Before: Jun 7 08:00:25 2025 GMT
Not After : Jun 8 08:00:25 2025 GMT
Subject: CN=df4fd898715b0cbd8ef8793e8660e178c449a9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:6a:43:64:be:ab:c4:68:a7:6d:10:0a:bc:
3b:d4:96:31:0d:83:ef:29:de:43:da:88:59:87:9b:
ea:05:94:b7:d7:ee:fb:a2:f8:15:40:6f:f7:06:0f:
7b:0b:87:51:49:42:26:29:4e:ba:d6:83:7d:fa:61:
20:d3:58:05:07:46:7a:98:15:23:63:dd:64:fb:2c:
8d:03:a1:32:32:84:12:57:95:fe:2f:8d:64:db:ae:
61:f4:b6:1f:23:de:d4:7b:da:de:b3:d0:34:38:7c:
72:f1:5f:1b:72:a8:68:e9:8c:d6:e6:fa:3d:6e:55:
65:74:2d:a2:d4:32:e7:73:58:27:d5:25:1e:3a:18:
cd:ac:dc:a2:e6:46:f7:94:d7:aa:d7:0d:7c:d0:3d:
c3:9f:f2:90:77:1b:69:b8:23:3a:eb:57:52:ec:2c:
c8:54:c2:9c:a1:ac:cc:c7:86:22:60:a3:6d:67:eb:
bc:74:9d:07:c0:fb:f7:a1:35:14:44:71:3f:60:8f:
04:7d:ae:e8:e7:5e:23:7c:70:64:2d:d5:f6:c7:c3:
57:57:09:ee:73:d8:2a:fc:ee:a2:74:94:69:c1:5a:
60:9f:aa:f5:df:76:05:5c:68:5b:ac:1d:7d:8f:4c:
c9:8f:93:66:4e:c2:1f:7d:4d:43:3d:0e:f4:ba:55:
32:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4F:D8:98:71:5B:0C:BD:8E:F8:79:3E:86:60:E1:78:C4:49:A9:ED
X509v3 Authority Key Identifier:
keyid:C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:15:a8:fa:7e:18:20:b4:d5:9d:44:1f:0e:40:40:00:f8:a1:
43:66:02:f8:64:16:36:e1:e8:45:8a:a3:9c:87:62:b1:db:0f:
93:69:dd:dd:8f:63:7b:ef:fe:0c:61:77:31:24:46:57:1b:80:
65:9b:c3:17:61:82:2d:e8:46:c0:98:cf:88:35:4b:d6:bb:a8:
cb:24:95:fc:e5:bb:57:2a:10:3c:54:4c:ef:ef:e4:60:9c:f1:
fb:7b:81:33:97:74:08:88:9c:cb:2a:54:4e:7f:cd:5d:2c:d7:
d5:d6:8b:54:55:42:54:d1:13:c8:28:09:b0:ee:b7:17:8e:22:
01:84:65:89:93:bd:b5:3d:8d:bd:dd:09:ab:43:4c:77:c7:52:
cf:53:97:01:95:fa:db:d9:6e:0b:bb:6a:bd:16:c4:94:0b:05:
21:af:d7:b8:57:35:2f:a6:e9:97:20:d1:c5:3d:61:d4:e3:90:
ef:1c:39:42:ff:21:53:fc:d0:1b:2b:f6:c5:1c:70:fb:e3:ad:
ff:c2:38:f8:20:39:03:8b:7c:df:15:c6:35:ee:01:f9:4a:f3:
28:42:f7:17:5e:86:a3:44:b8:44:67:a1:ff:55:0d:4d:cd:1a:
1c:cf:81:67:4e:b3:aa:f4:58:73:69:15:23:96:cb:bb:3d:47:
84:a3:1a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:39:40 2025 by rpki-client