Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
File: xk0ihrXMe-Qviuuutqrlfnzn2is.mft (raw, json)
Hash identifier: sdEtTeHBBGqkqsMo/bI7T5Hlo9MSEKm+3hZ8ql9A6yo=
Subject key identifier: CF:1D:87:0F:2B:B5:80:EF:54:04:F1:42:AA:69:D8:96:B1:43:56:19
Authority key identifier: C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
Certificate issuer: /CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Certificate serial: 01974FA0F6502C7348941D35F37A737765C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
Manifest number: 1280
Signing time: Sun 08 Jun 2025 13:00:38 +0000
Manifest this update: Sun 08 Jun 2025 13:00:38 +0000
Manifest next update: Mon 09 Jun 2025 13:00:38 +0000
Files and hashes: 1: kR9L0FG1sHus996EjzOxHeu0FXE.roa (hash: UCFmwyRMlD4Wx3VXNW0aEuOECURhEH5R/h4nsdT+Qoc=)
2: xk0ihrXMe-Qviuuutqrlfnzn2is.crl (hash: 24tT+96JyX+nC3Egy1+IGSOIL4FUn8XyPQMyiMpHirg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:f6:50:2c:73:48:94:1d:35:f3:7a:73:77:65:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Validity
Not Before: Jun 8 13:00:38 2025 GMT
Not After : Jun 9 13:00:38 2025 GMT
Subject: CN=cf1d870f2bb580ef5404f142aa69d896b1435619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:1d:4d:f6:cf:db:f4:16:13:66:4c:33:76:
d9:38:fe:b3:bf:de:bc:26:dd:85:95:67:1b:d3:82:
bb:0b:f5:e2:28:8d:0d:9d:72:fb:85:2c:fd:f5:a7:
f7:02:61:df:df:e3:91:3c:96:ea:32:5f:32:5e:af:
1b:12:a9:d3:d1:54:7d:73:ef:8d:76:16:67:40:fb:
42:c7:83:ce:39:01:92:2d:46:3c:bd:80:1d:41:89:
b2:d2:79:dc:3e:04:6b:dc:c4:4a:1a:bb:95:b7:5e:
00:ff:30:19:04:fb:16:11:fd:90:ac:11:34:40:f6:
97:43:18:7e:0d:28:4d:77:c9:01:e8:6f:84:1f:48:
23:bd:3e:13:9b:2e:69:9d:7c:80:83:39:70:2c:57:
d6:e9:d1:c9:bd:7a:98:20:ac:05:d7:8c:bc:2b:61:
15:8a:b4:0d:78:93:3e:b3:3c:fc:84:52:a5:fa:a4:
81:63:a0:2d:07:de:9d:f9:86:6a:1b:75:39:5a:c5:
4b:31:95:15:29:20:2f:e9:e4:2f:01:0a:4c:b5:41:
30:f0:02:1c:a6:da:e1:dc:0b:67:f3:71:f7:67:4b:
77:d2:0a:69:e0:e8:11:b6:93:a4:85:96:78:19:74:
ad:9f:2a:de:a3:6e:0d:5a:96:15:ad:a3:5f:13:ad:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1D:87:0F:2B:B5:80:EF:54:04:F1:42:AA:69:D8:96:B1:43:56:19
X509v3 Authority Key Identifier:
keyid:C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e3:bc:c9:65:10:99:a8:5d:fc:6a:65:19:16:5e:59:3e:ac:
72:12:ed:16:48:21:40:76:90:ef:cf:ad:e6:7f:af:ce:7d:65:
ee:ee:d5:51:87:bd:b2:15:9a:c4:9c:d0:b0:af:89:4d:94:ae:
c6:74:7c:fa:dc:d0:55:a5:62:7b:94:93:45:79:1a:fd:e1:58:
3f:eb:e5:79:d7:a5:46:99:f2:cf:62:cc:30:46:3f:18:1e:25:
62:84:27:65:e3:6f:04:4f:42:b9:46:eb:92:1e:cb:be:f5:3c:
bd:e9:66:e9:2d:c0:fd:25:6d:b0:4f:af:ed:2e:9a:e6:05:97:
33:e7:c0:5e:ef:8e:aa:31:df:e8:f6:00:4d:9c:ec:b6:ef:e8:
a8:af:0b:ee:73:9c:9d:86:8c:62:48:76:1c:e2:82:2c:4f:39:
70:d8:72:61:4a:9b:a6:31:7f:59:44:6f:40:28:dd:12:fa:69:
74:70:b5:3b:7b:b2:0c:75:8b:02:45:c6:0a:a0:c9:8f:fe:8d:
a0:ca:ce:96:24:c5:00:4a:d3:64:ec:6a:0c:6c:23:b9:f5:d9:
b9:6c:54:44:f2:39:14:18:60:e7:0c:a1:70:25:eb:42:1a:86:
c0:d4:32:f9:ad:ff:35:80:df:95:e0:a7:77:50:87:b8:67:4b:
62:1a:72:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:23:35 2025 by rpki-client