Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json)
Hash identifier: gaJxpGkFnIBHjgcTyWD8CAkD68uUIy1tg86gujs5AsI=
Subject key identifier: 96:D0:1B:33:64:D3:80:EC:87:AD:35:C3:36:CF:CD:2F:A6:3F:67:78
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 01975F13BBA32FC8A8ACBDF3FD3599960716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
Manifest number: 1586
Signing time: Wed 11 Jun 2025 13:00:18 +0000
Manifest this update: Wed 11 Jun 2025 13:00:18 +0000
Manifest next update: Thu 12 Jun 2025 13:00:18 +0000
Files and hashes: 1: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: HOaKA9yLLJvtpSIHK5f79Fty9qeNuWyp3MKhss/3ONY=)
2: hmvS4nDPTxWW6kYfDbr8j0yfqsA.roa (hash: lNR9K/eeK5h6bqGDhHsX+aTIDMdTknqLa5mK45GIX18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:13:bb:a3:2f:c8:a8:ac:bd:f3:fd:35:99:96:07:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: Jun 11 13:00:18 2025 GMT
Not After : Jun 12 13:00:18 2025 GMT
Subject: CN=96d01b3364d380ec87ad35c336cfcd2fa63f6778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ef:5c:92:af:25:15:64:e8:c5:c8:94:00:e3:
92:65:13:25:bf:c9:9a:a1:de:c8:94:cd:98:f3:b8:
cb:d6:6c:c4:ff:b0:05:e6:30:03:ff:fa:62:e8:97:
05:1e:55:9a:4b:92:02:3a:8c:0c:d8:65:89:1f:d0:
47:8e:a2:a7:f8:1c:c5:75:cd:b5:d9:e9:98:5c:41:
0f:6a:5f:67:5f:11:ce:d7:b1:d5:57:3e:3e:42:97:
f2:05:20:db:12:87:77:d6:f4:1f:aa:15:53:e7:59:
c0:8c:e8:4c:b0:c4:16:a2:09:1c:96:70:47:c5:0e:
bf:8e:e2:4e:b2:98:85:52:64:ef:2c:eb:86:11:e7:
f0:9e:0c:92:c3:62:c1:52:e3:a2:33:55:74:c7:74:
6c:0b:8d:27:cf:98:3d:b5:f4:3e:6f:26:0d:bb:b2:
2b:3b:ce:bc:f6:67:94:d7:5e:f9:c6:c4:c3:47:bb:
fb:e3:33:6d:b7:0d:1e:2c:78:14:7b:a9:88:f8:72:
c8:06:3d:b3:91:21:e6:14:57:df:a2:d3:97:c8:cc:
c2:b1:ef:65:00:32:2c:85:21:1f:9c:3c:a3:e6:c1:
ba:27:ec:70:c3:2a:d5:b7:d4:b3:80:d1:7b:2d:1e:
1b:43:83:8d:0f:b7:d8:6a:f7:15:7f:72:55:f1:bd:
54:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D0:1B:33:64:D3:80:EC:87:AD:35:C3:36:CF:CD:2F:A6:3F:67:78
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c7:90:d7:36:69:5d:33:95:84:96:97:b0:49:3e:4e:4a:ca:
38:c6:0c:cf:eb:91:36:b9:ce:a3:c8:f0:ed:41:a1:41:5c:aa:
22:83:8e:2c:b9:d5:7a:ba:6a:da:db:6b:6e:d8:4e:d0:a9:cf:
86:6f:4a:de:ee:20:b7:cf:4b:6e:fb:ea:3e:a3:12:d0:00:cf:
bc:ac:0a:17:d6:af:79:87:af:49:e7:71:2e:e5:08:4a:4d:a5:
60:7d:a2:70:0d:2b:60:a3:2f:cf:d9:7b:35:80:36:2c:c7:b4:
e2:23:b1:3f:bc:f3:e5:a6:01:93:56:34:5e:23:6d:69:ae:68:
c2:a1:be:d9:c9:bf:6d:06:78:13:be:73:df:cf:ed:e1:58:27:
0f:12:85:f1:5f:8a:df:c6:5e:fe:9b:3a:2f:fd:d8:fc:49:66:
eb:42:b0:e9:c8:aa:8a:ea:8a:95:cf:b8:7f:57:92:54:00:ee:
4c:4e:c0:ba:79:de:f9:71:0d:aa:7a:8e:80:9c:d6:de:c9:3d:
1a:ac:32:cf:19:7e:2f:f1:d3:82:a4:d7:d7:2f:99:9a:9b:2a:
de:a4:2d:f4:78:57:e2:3d:8e:94:36:1a:b6:0a:40:d2:4c:11:
e7:0b:9c:cd:14:9a:9c:95:a3:81:8a:14:9f:57:a4:af:f5:20:
50:cf:88:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:50:36 2025 by rpki-client