
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
File: X4anFB9vt7TCi84xRGe2FU4Pk3c.mft (raw, json)
Hash identifier: oPQOfqAxME68m4NGs8VoC9vGBh2c09ktjEXGf2S6Tto=
Subject key identifier: B6:A3:71:5A:9F:A6:FE:CF:20:28:8D:1A:72:CF:93:6B:EC:F5:BE:10
Authority key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
Certificate issuer: /CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Certificate serial: 019748FA2A5C75BF3D20260C176D4C5C44C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
Manifest number: 0D16
Signing time: Sat 07 Jun 2025 06:00:43 +0000
Manifest this update: Sat 07 Jun 2025 06:00:43 +0000
Manifest next update: Sun 08 Jun 2025 06:00:43 +0000
Files and hashes: 1: BR7Kxw4uDHIJjtWZxBN3yY39MEc.roa (hash: NNnpY2dCMdRRtPAK+Xc47po5O7wykSonQcaPlzT/ALM=)
2: X4anFB9vt7TCi84xRGe2FU4Pk3c.crl (hash: +3Jm1490x3OM/oezVzP7svuu6wF/H3N+6jZbvOBk1nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:2a:5c:75:bf:3d:20:26:0c:17:6d:4c:5c:44:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Validity
Not Before: Jun 7 06:00:43 2025 GMT
Not After : Jun 8 06:00:43 2025 GMT
Subject: CN=b6a3715a9fa6fecf20288d1a72cf936becf5be10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:af:3a:1c:a5:1f:97:b3:e1:20:2a:d7:d5:
6e:76:47:ff:41:ae:8c:cd:cf:c4:49:cd:de:25:99:
d7:c7:ce:33:0a:ac:9a:c0:22:92:26:cf:8a:db:7c:
9d:4b:34:07:28:7a:83:e0:2c:63:8d:a5:b0:ea:d4:
32:15:9e:35:5c:44:8c:04:7e:9c:9e:59:18:4a:75:
13:42:f4:d5:3f:bc:39:2d:14:cd:39:71:aa:d3:b3:
1e:34:8c:06:e8:ce:30:b8:5e:af:16:0f:e7:80:67:
78:ac:d7:de:58:cb:75:cc:00:18:71:f0:7e:3d:cf:
f7:d9:4b:82:31:a2:85:95:e7:24:46:63:82:74:c8:
f6:87:db:66:18:e1:be:ac:06:df:6a:ef:7a:ae:be:
d7:14:59:36:22:4b:de:b0:f6:4b:d5:88:72:9b:80:
e3:c4:3c:d8:bf:37:9d:b6:37:b3:ba:f9:88:07:45:
4b:b3:07:46:30:bb:9a:66:6b:34:ab:4c:03:5c:61:
80:08:92:45:d4:89:54:22:7e:50:9e:ad:9e:04:b0:
b0:0a:9c:2c:14:04:2a:57:9a:ba:22:cc:ca:0c:36:
e2:15:3a:8d:5e:07:b8:7f:ee:c9:e1:1d:2d:9f:64:
74:06:b9:8d:40:d7:7c:19:3e:48:63:f2:52:52:b0:
85:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A3:71:5A:9F:A6:FE:CF:20:28:8D:1A:72:CF:93:6B:EC:F5:BE:10
X509v3 Authority Key Identifier:
keyid:5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e8:b4:42:36:67:5c:7b:dc:78:9d:2e:b8:5d:f8:9d:1c:0c:
7d:3d:ba:ae:cf:5e:0f:f9:77:76:64:38:eb:30:e7:c6:d1:87:
7d:5e:5a:21:e2:44:29:ee:10:73:6f:6e:8e:b6:94:7c:ea:13:
67:75:a5:32:5e:40:cf:88:d8:5b:f3:a5:80:62:8c:86:f8:2e:
46:bd:35:24:e9:22:db:bf:5f:39:21:29:91:55:3b:0b:0d:70:
a3:c0:8e:30:63:2a:f8:e2:01:da:a4:78:50:20:71:9c:06:8c:
95:ee:04:7b:bd:aa:34:d4:72:98:ee:fe:7c:9a:49:ed:b1:ab:
8f:14:2e:54:cf:ad:d1:17:92:09:be:91:f7:4f:79:08:70:13:
09:94:44:37:3d:ff:eb:80:ea:33:69:89:4e:db:fc:8c:0f:47:
7f:37:d7:be:1c:f4:46:b5:85:24:3c:44:24:db:e9:a4:35:90:
6a:ac:66:ce:e0:3c:37:4c:4b:04:2b:d6:81:e9:1a:cc:cc:ef:
ad:d6:26:a0:f1:0d:64:5b:98:23:6e:1d:19:40:4f:ab:ef:cd:
5a:6c:a5:03:e6:fb:5a:c1:d8:c0:ed:04:29:00:c2:b6:29:a6:
2a:38:37:ac:5a:61:4d:09:d4:79:6a:24:d6:4e:52:d4:fa:5c:
11:d5:1f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:03:02 2025 by rpki-client