Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File: XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier: AqN54eY+gCi+lf25RoLyQLsTXcSEBfaNnax4OqifsbM=
Subject key identifier: BA:F0:0E:09:D1:FD:3B:90:33:12:1F:DE:7B:5A:4C:9F:26:0C:52:B1
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 01974FA0D1F0A6597DCCA2C0B8F66C960968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number: 7C
Signing time: Sun 08 Jun 2025 13:00:28 +0000
Manifest this update: Sun 08 Jun 2025 13:00:28 +0000
Manifest next update: Mon 09 Jun 2025 13:00:28 +0000
Files and hashes: 1: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: 4HBr878oiUqOpAlkvbJkxv86smKpO9uwUMzuX1HiXD0=)
2: aiQzKvCLxoc-jbSifPWI0H5s0EY.roa (hash: 2MNoWPbLxGTHxE75GVGoT7L//M3cbhmYnAI81N0/HEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:d1:f0:a6:59:7d:cc:a2:c0:b8:f6:6c:96:09:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: Jun 8 13:00:28 2025 GMT
Not After : Jun 9 13:00:28 2025 GMT
Subject: CN=baf00e09d1fd3b9033121fde7b5a4c9f260c52b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:42:d2:cd:a7:87:36:c1:a3:ea:98:87:5f:
b0:e5:c1:cb:0e:aa:73:e6:5a:fe:4a:55:f9:9d:f8:
af:63:86:1e:82:1e:39:b9:6d:f9:2d:b2:c4:7c:8c:
55:e4:3c:32:d7:92:db:84:47:fa:66:47:e4:ee:04:
72:55:69:7a:bd:f7:88:56:16:a5:09:ac:60:74:e2:
f3:8c:30:72:ef:66:33:19:84:b4:c1:d2:3c:37:dd:
1b:29:4a:cf:63:26:a8:c6:af:61:fc:66:35:2b:52:
30:34:73:3a:78:37:69:e3:e8:55:eb:6d:a1:bb:52:
0f:48:52:11:db:db:c5:ee:d0:e9:9a:c9:78:bf:be:
73:58:9b:15:6f:e9:62:fa:49:0f:7e:b4:c6:61:6c:
93:45:55:09:9a:ab:26:7c:b9:1b:ac:f3:8f:3c:20:
02:ab:3c:6c:e5:aa:ef:dc:5c:15:fb:7d:c8:5c:78:
3a:8b:f9:fc:ef:5f:1c:90:38:e8:6a:76:78:d7:49:
90:63:43:bf:fe:48:fe:95:8c:a4:a0:4c:f7:51:2a:
d5:03:30:2a:95:7b:4a:c1:24:ad:59:49:23:a0:b8:
1e:f7:ec:84:27:76:e9:f3:fe:62:df:56:b6:9b:5b:
23:7e:0e:e6:3b:cb:00:8f:62:f9:52:dc:06:d5:97:
68:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F0:0E:09:D1:FD:3B:90:33:12:1F:DE:7B:5A:4C:9F:26:0C:52:B1
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d2:78:d0:bc:3e:5f:b4:89:97:95:be:f0:5f:5a:5f:4d:de:
98:3e:73:78:01:19:77:2e:3a:9b:4f:59:37:00:ec:59:61:1c:
7e:d4:77:35:eb:b0:e9:bc:70:a8:fb:26:c1:01:c8:44:4c:06:
d8:20:7c:cf:ab:cd:09:43:6e:73:3b:4c:92:b0:47:76:e4:06:
45:71:59:c6:cd:53:e4:53:dd:11:61:f6:7f:04:f8:77:95:39:
10:15:b3:f7:87:92:64:85:92:f2:5d:b1:1e:db:df:77:7e:50:
e7:3a:15:45:bf:09:13:82:69:29:a1:a6:24:1e:41:5d:09:76:
bb:d2:14:34:46:4e:b9:7f:c6:18:40:d9:25:0d:f5:db:b7:0a:
50:21:ce:a5:09:b1:59:05:72:79:a8:1f:e1:2e:0e:7e:2c:64:
b2:8a:3d:91:e0:1a:7b:d9:a6:2b:9f:77:3a:36:2a:65:bc:a3:
64:aa:bd:90:ee:35:f9:48:2b:14:19:f3:44:c2:88:ae:e4:4e:
0c:73:0e:01:b1:46:5d:64:6f:f1:f8:f8:e2:97:01:4b:7c:61:
57:e5:fb:04:bc:1c:3e:0a:7f:84:7a:39:90:db:ad:5b:13:24:
ee:ea:81:c6:27:96:bd:e8:5e:5a:4c:fa:83:ea:9c:59:08:09:
90:e2:1b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:23:50 2025 by rpki-client