Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft
File: X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft (raw, json)
Hash identifier: HFsggu6/OrMvRECLJKwWYJhg9dvpBVPvMYXiBqW7tn8=
Subject key identifier: AA:FD:91:23:A5:96:F3:54:66:8D:AC:06:8E:ED:9D:70:25:9B:E7:B5
Authority key identifier: 5F:40:62:82:EC:14:FA:0B:C7:D6:51:1E:FC:BC:6A:E9:F1:E0:5B:3D
Certificate issuer: /CN=5f406282ec14fa0bc7d6511efcbc6ae9f1e05b3d
Certificate serial: 019749681BDE00CB5DDAFEA6C6ED6C93A19F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0BiguwU-gvH1lEe_Lxq6fHgWz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft
Manifest number: 2A
Signing time: Sat 07 Jun 2025 08:00:49 +0000
Manifest this update: Sat 07 Jun 2025 08:00:49 +0000
Manifest next update: Sun 08 Jun 2025 08:00:49 +0000
Files and hashes: 1: X0BiguwU-gvH1lEe_Lxq6fHgWz0.crl (hash: Qn2WQ/634aKRjBOcKFNo2o1t91MkXwveBXwf5aDis5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0BiguwU-gvH1lEe_Lxq6fHgWz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:1b:de:00:cb:5d:da:fe:a6:c6:ed:6c:93:a1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f406282ec14fa0bc7d6511efcbc6ae9f1e05b3d
Validity
Not Before: Jun 7 08:00:49 2025 GMT
Not After : Jun 8 08:00:49 2025 GMT
Subject: CN=aafd9123a596f354668dac068eed9d70259be7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:c7:a3:6c:f6:4b:b5:dc:7f:c9:0e:ee:2a:
ba:a8:c6:51:26:32:b6:bd:88:ab:8e:23:df:ce:3a:
69:52:6e:a0:0f:7e:b9:33:f6:c3:5b:e0:76:00:36:
02:e8:28:8e:3c:ab:18:ab:71:d7:b5:76:94:49:de:
1e:8f:79:07:df:0a:b5:e9:7f:0d:ec:d2:01:2f:06:
a7:c8:80:27:da:84:04:56:f7:f7:1e:62:06:49:07:
b6:2b:a5:f7:7b:0a:5c:d9:9d:78:74:be:37:53:c7:
39:b4:44:cd:7e:0a:59:31:1f:e1:83:39:2a:61:88:
78:81:b6:5f:05:d5:3e:d1:30:f6:ea:eb:c3:93:06:
23:e7:85:fe:d7:bd:73:23:d5:12:fe:aa:4c:fa:29:
b9:13:3a:87:e1:ef:32:87:93:56:68:28:0f:6f:3e:
65:1b:1c:8d:13:2f:f5:0e:dd:15:0e:34:f4:88:9d:
46:a9:4f:7e:18:fe:63:b6:ed:f4:b1:0a:e4:3a:2e:
4d:10:a7:ae:50:49:28:c1:60:7e:b9:ea:6a:36:e5:
95:9c:38:6d:55:9b:59:f3:a3:3c:21:b7:cc:8c:06:
b2:65:f9:c7:85:20:fb:c5:01:a3:2d:cb:17:06:02:
76:dc:04:a6:9c:c5:eb:c6:00:df:31:2f:01:03:ab:
e0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FD:91:23:A5:96:F3:54:66:8D:AC:06:8E:ED:9D:70:25:9B:E7:B5
X509v3 Authority Key Identifier:
keyid:5F:40:62:82:EC:14:FA:0B:C7:D6:51:1E:FC:BC:6A:E9:F1:E0:5B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0BiguwU-gvH1lEe_Lxq6fHgWz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:98:01:78:01:43:f3:ea:6a:f5:82:f9:1e:e4:df:59:01:94:
16:ed:78:0c:18:6c:e9:c4:be:6f:6d:71:49:44:77:54:2c:a1:
26:f9:23:21:e2:e0:4f:43:cc:d9:db:4a:fa:ad:9f:a2:b5:d8:
cc:4a:0b:36:03:f8:3f:0f:36:72:21:a2:70:5a:76:97:d4:aa:
7a:0c:94:18:a2:96:30:09:b3:af:41:57:a2:98:0c:53:f1:99:
63:f2:d6:8f:01:75:cf:ce:72:47:12:f6:21:2b:c7:cf:f1:57:
28:fb:fd:e3:66:98:31:2c:af:1f:49:63:c8:3e:73:ce:d9:ba:
c4:6e:4a:2f:f5:ea:ed:ff:60:40:6e:c6:58:9c:c1:df:70:a0:
aa:02:5c:95:5e:b4:47:c5:45:70:42:14:ae:92:b2:c6:2d:71:
79:3e:4e:e2:49:fa:5e:f9:91:0a:11:27:8d:c2:1c:90:30:1c:
1a:d6:c9:31:1d:89:52:c2:81:00:c5:f6:c0:2d:7c:d0:8f:3c:
57:34:4f:fe:00:41:e7:47:59:c5:e1:70:96:4b:54:00:c8:e6:
40:4a:6a:9d:13:a0:57:0c:da:ca:59:6b:fa:01:83:21:40:6f:
55:fa:62:43:07:e8:92:eb:fb:ec:93:5b:99:c9:44:d0:6c:af:
ad:73:e7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:40 2025 by rpki-client