Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
File: XD6sD3atIc1SRFk-TBe6Zxtejuk.mft (raw, json)
Hash identifier: yWWv0k4LzXJZSa7mtWNJcmvm1AJODnWbuBgMJ/0JCUw=
Subject key identifier: AA:8A:E8:02:6C:6D:37:31:F8:6D:DD:8F:AB:7A:6D:61:AC:BD:FB:C2
Authority key identifier: 5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
Certificate issuer: /CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Certificate serial: 01974FD814CA120E22662B5CED18C7D028B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
Manifest number: 11E1
Signing time: Sun 08 Jun 2025 14:00:50 +0000
Manifest this update: Sun 08 Jun 2025 14:00:50 +0000
Manifest next update: Mon 09 Jun 2025 14:00:50 +0000
Files and hashes: 1: XD6sD3atIc1SRFk-TBe6Zxtejuk.crl (hash: gF7p1F7D8SJozBmDeutmIXAhRvA8yFxwbrf5sJZCE/Q=)
2: ml5z24U6xSCTuhnWBbQRxmv1hXU.roa (hash: NWPcXIF3UeWnsTiTzSSB4msAqIPsOtzwP/oaG1rR2kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d8:14:ca:12:0e:22:66:2b:5c:ed:18:c7:d0:28:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Validity
Not Before: Jun 8 14:00:50 2025 GMT
Not After : Jun 9 14:00:50 2025 GMT
Subject: CN=aa8ae8026c6d3731f86ddd8fab7a6d61acbdfbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:0f:86:ec:5a:68:83:35:0e:09:c2:2a:c9:
ef:3e:d1:4e:e2:c8:07:3f:76:15:66:3f:7b:c5:71:
a0:0b:c5:b5:50:33:4d:18:a8:8e:85:c1:c4:2a:1b:
a6:17:5a:81:6c:67:b7:9a:e7:9e:67:e5:f2:00:7b:
08:30:61:b6:2e:1b:e3:88:00:07:67:9b:6b:63:a1:
90:bf:5a:d7:b7:fd:db:c8:ea:07:5d:f0:87:e8:20:
61:80:1b:73:e3:6d:f0:d1:c0:30:3f:d7:cb:cd:9a:
a7:a5:d7:2c:db:60:38:c2:be:03:fd:ef:dc:8a:1c:
1a:0e:56:a4:e4:6e:d5:14:88:75:fb:17:08:2f:0b:
33:81:5d:3f:31:4a:63:91:d2:35:94:23:8a:63:ab:
cc:dc:23:fc:22:67:c9:0c:31:80:fe:2f:ce:17:64:
20:f4:66:75:97:13:de:e2:6a:fa:16:d0:51:f2:e3:
6d:da:b4:2a:23:22:b0:4b:53:bf:2d:8a:3e:c1:85:
85:db:ea:3d:d7:11:85:5a:d8:1c:46:12:27:3d:6f:
79:1b:90:23:de:60:24:b4:7d:d4:4a:59:ed:80:e0:
ae:e5:cc:92:54:bc:94:25:08:7b:ce:0e:ba:59:79:
5b:64:74:82:fa:11:81:eb:67:9e:80:e3:b9:d9:a0:
a1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8A:E8:02:6C:6D:37:31:F8:6D:DD:8F:AB:7A:6D:61:AC:BD:FB:C2
X509v3 Authority Key Identifier:
keyid:5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:22:d5:2b:14:b4:73:2a:7d:61:50:a4:2b:69:a8:61:a7:65:
e1:d5:18:ff:6c:fd:f2:19:12:c8:91:72:53:be:09:a0:17:f1:
45:82:4a:f6:66:ac:51:c6:b7:86:3d:b5:d7:9a:45:d5:94:36:
9e:ae:fc:e2:d0:f0:8a:21:d0:62:c3:59:cb:ec:46:09:56:1d:
6d:0e:c8:c0:c0:03:da:71:4b:a2:71:da:e3:d4:b7:80:9b:34:
3b:7a:80:f6:e6:b7:29:9a:95:f1:45:b6:f9:ac:f9:08:56:29:
e2:b4:06:6c:7f:22:38:6a:e7:7d:9a:af:ff:91:d9:1e:67:11:
9e:52:6a:5e:63:5a:a1:cf:b6:99:41:e4:44:20:2c:8c:b5:3a:
8d:06:3b:81:4f:fa:b2:10:2c:36:be:d5:8b:1b:f2:68:0b:e0:
85:e8:ef:6a:a2:0e:47:b0:81:6a:a0:18:a9:37:a6:d7:4f:31:
8c:76:3d:33:c7:92:e0:78:fa:3a:d2:11:00:d4:a8:b0:08:9f:
bb:17:f6:2c:5d:93:69:3f:32:de:26:b8:df:12:29:60:10:57:
e5:e4:35:23:3f:45:fb:f1:6e:4b:9a:63:b3:ba:14:13:9d:b9:
2a:57:8f:a2:76:51:f7:19:6f:d8:ea:d9:9d:78:bd:43:1f:2d:
de:5e:a2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:13:31 2025 by rpki-client