Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json)
Hash identifier: 84pick7/q2YUV5JsF46Vwo4D1E6isfflH5T2DY1XqJM=
Subject key identifier: 8C:C6:E4:8B:FB:9A:C4:A2:A7:12:41:D7:27:C7:02:59:91:10:64:DD
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 01975D255DB8819BC15C5C239A687C16F071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
Manifest number: 1585
Signing time: Wed 11 Jun 2025 04:00:19 +0000
Manifest this update: Wed 11 Jun 2025 04:00:19 +0000
Manifest next update: Thu 12 Jun 2025 04:00:19 +0000
Files and hashes: 1: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: dRdERcPvk3DLKmXziTFMwCjm2wnLD7TQ1AASlsVwowY=)
2: hmvS4nDPTxWW6kYfDbr8j0yfqsA.roa (hash: lNR9K/eeK5h6bqGDhHsX+aTIDMdTknqLa5mK45GIX18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:25:5d:b8:81:9b:c1:5c:5c:23:9a:68:7c:16:f0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: Jun 11 04:00:19 2025 GMT
Not After : Jun 12 04:00:19 2025 GMT
Subject: CN=8cc6e48bfb9ac4a2a71241d727c70259911064dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fc:ec:a0:84:2e:aa:77:25:66:be:20:74:ca:
95:b1:af:11:07:85:8c:cb:54:ba:ab:5a:bf:6a:1a:
d4:a3:4c:0c:3d:b2:86:7a:18:df:f7:ef:6e:0f:01:
00:18:8d:0e:84:da:1f:5c:7e:69:45:ee:33:7b:18:
18:1a:e1:6e:9f:8a:bb:d5:45:3d:dc:85:cc:0d:77:
91:4e:1e:55:ff:d9:3a:a7:14:c0:72:70:cb:f7:d4:
b6:26:e1:3d:21:fd:35:14:65:2e:16:f6:0e:07:e0:
c7:9b:2d:98:46:95:d0:e5:de:50:3e:8a:4f:d6:d8:
dd:ef:04:71:37:4f:ba:22:2b:62:73:19:d0:37:ff:
8d:bb:10:75:12:8b:ce:c0:1e:c8:15:ff:52:44:60:
c9:bb:03:c2:31:b1:e7:96:c8:d5:80:df:8f:85:54:
06:d3:35:e6:e8:91:e8:97:ae:71:d3:c7:32:df:f6:
82:d0:64:99:86:be:20:42:0b:61:7a:3e:5e:f6:41:
78:da:3c:c7:b2:bc:db:88:b0:32:63:dc:72:11:6d:
3a:51:8b:80:af:88:6b:a4:5c:4b:42:e2:7b:83:2a:
b6:5f:3b:33:00:70:e7:03:14:ce:21:6d:be:5a:33:
de:f1:31:b2:81:2f:b4:ba:b6:5e:86:66:89:89:48:
aa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C6:E4:8B:FB:9A:C4:A2:A7:12:41:D7:27:C7:02:59:91:10:64:DD
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7a:21:f1:53:d9:cc:11:fe:24:85:6d:14:a6:52:5a:7b:96:
8e:eb:82:f5:44:e3:0a:de:1e:9c:ec:a5:88:c1:e6:74:65:f3:
c8:16:83:43:56:7e:88:aa:f2:6c:f2:6d:a9:cd:df:63:41:2e:
96:27:d6:8a:36:84:bb:44:14:2e:72:3a:9f:75:18:c5:f9:8f:
9b:a7:7d:58:f7:3b:bc:a3:71:f4:87:b9:a6:a2:5c:9f:d5:12:
0b:3f:c9:a5:3c:96:35:25:6b:80:b9:82:d5:6c:e6:0f:f0:2c:
52:dd:b5:b5:6b:dd:20:f8:d5:27:5c:4e:0d:83:e9:29:f1:7c:
d9:f4:11:ad:be:c8:0b:69:b2:5a:8e:b1:06:1e:33:05:69:5b:
f2:ee:0f:81:04:de:7e:f3:40:a7:1b:b6:1e:67:85:a7:3d:36:
c5:17:17:d5:7c:91:36:bf:4a:e0:6f:b2:50:bd:0f:38:fc:96:
fd:c6:09:cf:de:81:b0:c0:d2:ab:8a:dc:ee:b1:c4:ba:8d:f7:
02:49:85:9a:e7:d3:8c:ef:a2:10:0d:02:bd:aa:fd:09:87:d6:
5b:b7:f3:9a:d9:fc:04:a5:6c:3d:46:bf:3f:4a:e3:72:b9:2f:
7f:1e:23:9d:df:a9:3c:74:95:d6:2e:86:1d:e1:6b:69:4f:87:
88:14:bc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:47:56 2025 by rpki-client