Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json)
Hash identifier: AX50EpAkJgcfhzm8lluh0FGF7nqI92bzmzViR2s/4bU=
Subject key identifier: 47:B5:92:69:26:CC:70:AD:72:72:4A:CF:89:15:85:49:5B:C1:66:77
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 01974B8D68DBD6010195F75B98A97092BF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
Manifest number: 1583
Signing time: Sat 07 Jun 2025 18:00:47 +0000
Manifest this update: Sat 07 Jun 2025 18:00:47 +0000
Manifest next update: Sun 08 Jun 2025 18:00:47 +0000
Files and hashes: 1: 7I-4Etn_-ATs5ke2k7C_Ri5wOGE.roa (hash: K1mMFeZqT9P2Y1UVAb4tDIF+y7HhkZLZ9faOLYgkjT4=)
2: XufZiysYk33Xck5lo3CwfpdliJQ.roa (hash: 4ytM8O/KmX8CZCFr30YeKBOK7MtkaAq/PPvvT8k7frg=)
3: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: 0l7l+oGFcKm2ciOpNLqPW+i8g5biE9+Ps1Rtusad7Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:68:db:d6:01:01:95:f7:5b:98:a9:70:92:bf:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Jun 7 18:00:47 2025 GMT
Not After : Jun 8 18:00:47 2025 GMT
Subject: CN=47b5926926cc70ad72724acf891585495bc16677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:29:bc:83:a3:54:14:b3:a5:48:43:99:b8:
13:4f:9a:3c:56:d0:fd:c0:5d:34:0c:a0:46:1d:47:
13:85:da:a3:39:ac:c6:6d:f3:ca:30:cf:51:25:8c:
27:db:38:26:d2:dd:f1:96:61:40:c8:91:48:73:bc:
12:2e:9d:2e:2f:78:0f:e0:b1:54:b5:d7:f1:f2:21:
da:79:b8:d7:40:04:20:24:c0:f4:15:15:ce:0c:1f:
2a:4e:be:36:19:a2:db:92:2e:8b:a3:98:3c:f1:07:
07:ff:0a:aa:e9:ce:9b:6c:90:0f:62:78:ab:1a:10:
a4:88:48:73:c8:22:a7:d4:5e:bc:f1:03:2b:88:cb:
ed:e0:79:bd:a1:89:e5:55:49:99:14:0c:de:2e:2b:
da:cb:05:57:b7:26:50:21:a2:35:f9:23:10:10:94:
bd:86:98:1b:0a:9f:67:8d:28:71:7c:89:86:a6:bf:
44:a9:9b:50:ac:95:fb:17:68:bb:3b:f1:8c:5c:e3:
ac:9a:9c:48:8d:78:ac:b9:50:07:d0:3c:b8:89:76:
05:20:b6:b2:05:8c:fb:57:53:bd:e0:c8:8a:72:3c:
fc:f4:7f:1c:cb:ce:e9:f3:8c:88:aa:39:f9:78:0e:
d9:11:2c:6a:d6:8e:10:3e:ab:7e:62:0a:d3:a6:65:
60:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B5:92:69:26:CC:70:AD:72:72:4A:CF:89:15:85:49:5B:C1:66:77
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:c2:57:e5:1a:57:ca:2e:28:9a:b9:2a:6c:ef:af:1c:bf:b0:
1f:f8:c0:db:7b:ea:2f:13:e8:9e:fb:b2:25:0c:8d:d4:9d:9d:
f0:e6:3e:82:47:62:93:b4:db:69:3e:93:5b:83:c2:43:5c:e2:
1f:9d:19:c1:7f:26:6f:97:0f:a7:49:09:9b:5e:8e:5e:14:ad:
f4:ee:17:68:3e:27:91:0b:e2:a0:4c:8b:03:95:34:a4:ef:a5:
86:a1:98:c7:9f:1c:33:da:5b:67:96:b5:9e:88:a2:9c:5a:0e:
56:c1:79:e3:4a:b8:99:45:38:7d:92:48:ab:3e:78:4c:21:ac:
63:83:53:61:da:13:e3:e4:ec:12:9d:f3:07:d3:e8:67:ec:37:
fe:c5:91:d7:04:da:f9:ea:79:ed:70:73:70:71:cf:43:79:b1:
5c:3d:2d:3d:90:88:b6:3c:5f:12:5b:79:62:21:79:28:ce:0f:
9a:44:b6:b0:55:fc:fc:7b:9f:ea:83:f4:91:a5:96:c2:71:4d:
fa:de:27:15:49:79:be:8e:37:74:41:a9:e8:b5:ad:82:91:a6:
5f:10:b7:60:4b:0c:4e:c5:5f:c0:9d:9f:a9:96:1e:72:ee:a5:
d5:9e:94:1b:a0:af:56:63:5b:bb:75:f0:14:31:ab:c3:d5:0c:
c4:3e:d1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:21:18 2025 by rpki-client