Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
File: XPiK3BnqrRPWhbgew5k1vUssaa0.mft (raw, json)
Hash identifier: qiwlXPopblPlqw8w4PPAvX3ixYgpkeo/LuTXvx4EOas=
Subject key identifier: 46:6C:BA:B0:57:CB:29:2C:BA:F9:99:B0:CA:D3:36:0B:59:7E:03:45
Authority key identifier: 5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
Certificate issuer: /CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Certificate serial: 0197481E71F8FEA840E0A4D0DA0C6015BE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
Manifest number: 1481
Signing time: Sat 07 Jun 2025 02:00:44 +0000
Manifest this update: Sat 07 Jun 2025 02:00:44 +0000
Manifest next update: Sun 08 Jun 2025 02:00:44 +0000
Files and hashes: 1: 2m-5sAN7fZLZtnlN4KyM3kDb8rA.roa (hash: GBh4Fs12dTfnHuJfy5lqzt0sICQWCnX0b8Yq+RaFO/k=)
2: XPiK3BnqrRPWhbgew5k1vUssaa0.crl (hash: 1pQu1w0Ph9XXqGWvBrvVLsVNPrWrTWGynaH1gHXXqYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:71:f8:fe:a8:40:e0:a4:d0:da:0c:60:15:be:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Validity
Not Before: Jun 7 02:00:44 2025 GMT
Not After : Jun 8 02:00:44 2025 GMT
Subject: CN=466cbab057cb292cbaf999b0cad3360b597e0345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1d:a6:62:f2:33:a7:f7:a3:17:54:fd:be:39:
43:5c:75:e1:70:53:8f:83:c0:1a:25:2d:d3:a6:61:
48:65:f6:52:d6:4e:6a:ea:cc:ac:7e:74:7f:c6:6d:
03:2f:4a:51:b7:43:1e:26:7b:56:ab:ba:7a:80:3e:
3a:71:a6:fb:ca:e3:d3:8b:37:c4:e3:e6:84:88:9b:
a2:2d:80:56:c1:21:6a:78:ab:40:c9:06:04:e5:a7:
56:fd:d1:f7:30:35:f9:91:89:1d:c9:58:b4:84:7b:
bc:51:3e:8a:8f:02:4a:ff:1e:1b:12:f5:1c:b3:28:
7f:14:1e:35:ba:f8:47:8d:e7:86:0d:f4:d8:e4:d0:
ec:c9:61:4a:11:62:46:83:14:57:1f:ff:bf:11:3b:
05:7b:e2:8c:c1:6d:6a:d9:dd:17:28:71:20:1e:e2:
90:2e:52:12:9c:f8:79:49:88:a1:00:ed:55:c0:d9:
36:c9:09:3a:41:6c:50:5a:51:84:d1:17:87:e8:6f:
e3:01:33:ae:b4:45:ae:03:b9:1b:4d:6b:f7:88:e8:
fc:85:10:22:38:f7:e7:ac:ba:0b:ac:5b:26:2c:7c:
fd:7b:bb:aa:0c:f2:2f:a7:8a:3e:5a:d7:ba:ba:29:
67:2d:51:76:8a:03:33:b1:e1:7d:78:83:16:db:6a:
a9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6C:BA:B0:57:CB:29:2C:BA:F9:99:B0:CA:D3:36:0B:59:7E:03:45
X509v3 Authority Key Identifier:
keyid:5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:bd:ef:4c:6f:69:47:a7:d0:e4:54:db:19:95:49:d7:a3:e8:
19:7e:9f:bd:e8:ab:46:71:0e:ff:38:47:27:0b:88:69:9f:e4:
fa:3a:c7:6f:ea:c5:36:5d:1b:62:35:4a:12:8d:21:49:1d:79:
9d:72:61:20:fe:57:35:00:0e:db:c9:d0:14:e3:c3:77:91:58:
98:c2:24:57:a3:70:64:97:26:80:aa:37:c7:bd:ea:5e:62:df:
90:a4:50:55:2f:33:b6:14:72:e5:0d:6d:af:13:59:98:65:93:
f4:92:06:dc:42:e0:4f:11:eb:0c:76:a9:bf:06:4d:b6:e3:31:
09:dc:b5:b2:d1:d3:41:30:a4:91:e1:27:fa:43:e9:c7:79:c1:
40:7b:e8:db:6b:50:86:0a:1f:f0:d7:5e:3b:08:05:8d:bf:85:
6d:9f:8b:39:27:53:2b:f9:cf:d9:72:af:ea:31:c4:5f:13:0a:
b9:7d:b7:e3:b5:f8:8e:bd:55:8c:26:a6:31:de:01:39:60:c1:
f1:6c:55:57:9a:da:ac:b5:19:4e:e4:b9:0b:b1:05:e7:21:2f:
3a:3d:ae:0d:04:25:cd:9d:e6:02:0e:49:5d:e0:14:7a:75:98:
52:85:37:fd:fc:2f:96:89:f1:9f:c4:b6:48:ed:26:b0:87:bd:
66:47:c6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:31 2025 by rpki-client