Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File: XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier: hwcrGEi6UEAR7isQGlUAG/If8YImGc1gsVLcH+A/knY=
Subject key identifier: E8:AB:49:BF:8F:A3:1E:09:59:C1:C1:06:14:4F:3D:19:81:24:52:23
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial: 0197469DF9AF0DAC755F8ACD1AB2B77B0BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number: 045A
Signing time: Fri 06 Jun 2025 19:00:47 +0000
Manifest this update: Fri 06 Jun 2025 19:00:47 +0000
Manifest next update: Sat 07 Jun 2025 19:00:47 +0000
Files and hashes: 1: RSjMhTaGtuAfeDXOX3uwyAT1Eok.roa (hash: Y4/cSuW1UOGa89zMuz5QH1r95dZUNstGhg+JOqcELak=)
2: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: B+qSpAzOYERzDI+gvYwnIuoDWy7EaofmUBR3gbBAb5w=)
3: xJZ2Genlg6FZ5BYdZvsnK__KGuk.roa (hash: vX+ymzFaWBe0MgYWBkL1Ckb8oOlGEmiJb877SUGvYCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:f9:af:0d:ac:75:5f:8a:cd:1a:b2:b7:7b:0b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
Validity
Not Before: Jun 6 19:00:47 2025 GMT
Not After : Jun 7 19:00:47 2025 GMT
Subject: CN=e8ab49bf8fa31e0959c1c106144f3d1981245223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:f9:6d:0d:3e:c1:0b:d3:f8:c8:f7:cd:1b:
91:00:8c:21:50:80:16:92:55:37:58:2f:76:46:02:
84:81:fd:e9:de:03:18:66:50:b5:a3:b5:8c:fe:e9:
39:8a:83:3b:a1:2f:dd:7d:fa:7b:1b:39:c9:27:62:
b9:ab:87:ad:ad:d0:18:a0:d3:2f:7d:80:90:4a:17:
40:3b:7f:bd:c7:4d:5b:a2:0f:54:49:c2:d2:02:1c:
63:cd:3a:a5:94:94:e3:36:8b:1a:fb:34:ca:16:d2:
2d:f9:c7:57:4b:14:f6:fc:2c:86:7c:10:25:e7:de:
07:36:91:1c:7a:64:48:59:62:6b:5b:b2:d4:36:0b:
8f:2f:d4:91:f9:93:8d:34:94:df:45:47:43:16:49:
53:d2:1d:0f:8e:18:4f:29:79:c1:d7:c6:bb:8a:61:
fa:72:55:41:0f:1c:aa:b7:c0:47:19:b9:d2:3d:ce:
64:9d:7a:8a:0c:58:f1:ad:f5:aa:03:e2:43:dc:1f:
6a:b5:b3:9d:9b:92:48:14:1a:c9:a5:2c:c8:4d:7b:
2a:74:3e:d9:a8:bc:80:6b:d8:9d:7e:b3:96:ce:55:
bf:99:36:51:88:50:3b:1d:d5:e5:7f:7b:c5:66:cf:
0a:c2:28:4e:c3:c2:e0:f8:47:75:3f:9d:3a:87:e1:
c8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AB:49:BF:8F:A3:1E:09:59:C1:C1:06:14:4F:3D:19:81:24:52:23
X509v3 Authority Key Identifier:
keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:23:65:7c:79:43:3b:11:2c:66:3f:7a:62:70:83:78:e9:77:
60:10:43:1d:3e:d4:48:e3:c2:a9:61:e6:85:6e:15:1f:c8:ce:
4e:69:e6:52:de:f8:38:93:b0:a9:21:dc:73:44:74:86:a6:7c:
de:77:f0:ed:65:ce:4d:72:e1:79:6a:04:aa:83:49:65:6e:3f:
a3:f0:ed:65:a2:f5:65:e3:0e:d1:a1:54:f8:72:7b:c5:28:b5:
29:e8:75:ed:71:50:c4:32:db:77:06:4d:bf:67:4a:6a:4a:98:
e4:c5:fb:79:97:9e:1f:00:70:8f:12:40:b5:a0:fd:21:97:55:
d4:c3:b9:4c:23:52:04:b0:e0:26:3d:0c:73:e0:44:93:e5:6f:
b5:60:29:08:2b:e2:fa:1a:af:12:ec:5d:03:fb:15:7d:46:96:
57:5f:a5:c5:98:38:0b:cc:c1:f7:f3:cc:76:ee:4a:c3:51:6e:
d9:a4:b1:af:9c:ff:3c:14:5a:80:86:e8:fa:dd:ba:dc:79:bf:
72:58:4e:cb:32:94:55:1c:93:79:ef:28:a4:69:7b:6e:d1:bd:
29:8d:b6:4b:07:dd:a9:6e:65:b1:da:6a:c6:82:6e:b0:61:8c:
a7:c8:28:0c:79:84:9a:0e:b5:ad:27:a9:dd:11:b1:9b:7f:8e:
4b:b9:e0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:52 2025 by rpki-client