Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
File: XS8h5aT74BUgX2zviK-uGc0GphI.mft (raw, json)
Hash identifier: bL4p0a45smuGZbrJbJR2d8c88CS0dfFXmXNcfNZBL4s=
Subject key identifier: F1:54:C5:00:61:B0:30:B5:F4:30:4B:EE:5D:4B:7E:67:87:45:73:60
Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Certificate issuer: /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Certificate serial: 0197488D2E9DE9F567E72C7E63E474E71229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
Manifest number: 150F
Signing time: Sat 07 Jun 2025 04:01:41 +0000
Manifest this update: Sat 07 Jun 2025 04:01:41 +0000
Manifest next update: Sun 08 Jun 2025 04:01:41 +0000
Files and hashes: 1: 3s8R9sRZRUNgHAycT7iMGkpoqeI.roa (hash: LAbsSBnsWLcRul98ZPfO4H8aiix0SGvDORk1UP26ViE=)
2: XS8h5aT74BUgX2zviK-uGc0GphI.crl (hash: un4pM9vJdWgQhjifXvaXauL6+RB7HDO+6TGMTTuX2Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:2e:9d:e9:f5:67:e7:2c:7e:63:e4:74:e7:12:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Validity
Not Before: Jun 7 04:01:41 2025 GMT
Not After : Jun 8 04:01:41 2025 GMT
Subject: CN=f154c50061b030b5f4304bee5d4b7e6787457360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0f:13:22:44:cb:fd:79:4b:7f:99:46:52:95:
89:17:05:23:b7:87:48:98:a4:07:69:18:4f:15:42:
65:66:33:f5:c4:49:be:81:56:f8:59:3b:a6:ac:f6:
84:79:42:55:43:d4:dd:f4:9c:75:a9:b1:40:f0:5f:
df:4d:95:5e:86:82:84:2e:2e:15:9a:ff:00:18:f5:
58:4e:f4:b9:61:71:7f:ac:34:a7:2a:59:fe:85:c3:
33:13:9e:0e:06:ad:ee:33:47:c0:e3:03:f9:99:d5:
d6:14:11:3e:c9:17:3e:9b:f3:9b:62:1d:27:2f:50:
50:47:5f:30:39:f7:56:56:a0:1f:0b:c6:ac:ce:b3:
53:38:5d:4a:de:b3:3a:94:89:4d:0b:3c:89:b4:84:
99:61:5c:0d:7c:6d:0a:64:9e:50:8d:24:40:0e:d6:
38:28:31:c4:56:42:bc:2c:86:8f:2f:4d:1d:04:c6:
f1:07:e5:24:88:f6:db:50:5b:03:f7:b3:b9:8d:d7:
6d:d8:75:5d:93:da:35:9e:24:4c:4e:7b:fc:82:aa:
31:a8:11:08:30:dd:8c:80:88:02:6b:87:2e:08:10:
7c:8f:26:19:ef:b7:f4:7d:03:09:c0:93:b9:51:fa:
43:72:3c:62:26:21:76:c1:bd:e9:1e:58:ea:20:66:
63:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:54:C5:00:61:B0:30:B5:F4:30:4B:EE:5D:4B:7E:67:87:45:73:60
X509v3 Authority Key Identifier:
keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:db:2a:1d:bd:dd:cc:c9:51:d1:e3:64:66:2f:9c:f5:76:04:
91:6b:6c:31:42:45:58:4a:98:87:fe:e4:d6:5d:24:ef:4d:ec:
0e:5e:0d:2c:ed:33:49:07:f7:cb:72:a8:81:77:59:dd:a3:de:
8f:a9:61:39:48:b4:53:72:b3:81:16:e9:49:e8:e2:be:e7:3c:
1f:92:e2:ec:30:23:59:93:4a:10:18:85:ea:15:f4:91:ae:af:
40:c6:00:a4:91:e2:3d:81:37:dc:13:36:87:33:74:e6:06:a6:
cb:29:47:4e:0c:ac:55:97:36:ee:b9:59:18:cd:6e:fd:67:02:
16:16:40:c0:2f:78:a5:ef:7c:c9:9c:d5:32:d4:35:6e:f4:85:
1f:3b:4b:57:51:c4:65:59:13:19:de:70:1e:b3:4d:24:0c:7d:
35:3a:7d:44:ee:62:37:b4:2b:eb:92:a9:c6:a9:0f:36:2b:1e:
ac:88:ee:ed:20:19:8d:c6:51:c4:c4:93:01:e4:1f:ce:16:8f:
41:df:0c:80:19:a3:4f:1d:ca:e9:ad:29:e4:a5:c8:e4:96:fe:
9a:96:9e:bf:4d:86:69:de:78:04:82:ad:34:c3:c9:09:8c:13:
78:6d:9b:47:62:2c:42:fa:5a:27:06:f8:a3:b3:8d:66:c9:8c:
8c:ec:16:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:21 2025 by rpki-client