Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
File: xDwiL60sJ8phLJjCc9TxZQbhsuU.mft (raw, json)
Hash identifier: vYJYKar91SycM/rjuu/DjcUfJubePMSGm5zI3yrdfxo=
Subject key identifier: 32:A5:C8:6A:6A:7D:11:7B:12:6D:FD:56:8F:FC:B2:F4:4C:B2:1C:10
Authority key identifier: C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5
Certificate issuer: /CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
Certificate serial: 01974D0D8A1454D4D4087CD72FEAE42CE7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
Manifest number: 0DFF
Signing time: Sun 08 Jun 2025 01:00:22 +0000
Manifest this update: Sun 08 Jun 2025 01:00:22 +0000
Manifest next update: Mon 09 Jun 2025 01:00:22 +0000
Files and hashes: 1: BxG4JwAN57vo6NBlUISw9RdW7m0.roa (hash: roJixiQowuB4avbvI55JLdOWJ/KjfR6U+Yu2VKUFfoA=)
2: xDwiL60sJ8phLJjCc9TxZQbhsuU.crl (hash: OFeCsW/aRYAeyS6Za+cUdiXcHOj6OUiVuIxlCkNkOqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:8a:14:54:d4:d4:08:7c:d7:2f:ea:e4:2c:e7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
Validity
Not Before: Jun 8 01:00:22 2025 GMT
Not After : Jun 9 01:00:22 2025 GMT
Subject: CN=32a5c86a6a7d117b126dfd568ffcb2f44cb21c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:18:9a:e7:fe:fc:ef:fe:c4:cf:da:a5:b0:
9e:ad:e0:61:4d:ba:71:c8:8a:ef:53:a1:c1:84:69:
c6:98:24:5f:72:99:6d:da:89:32:62:c0:08:c9:c5:
d2:2e:de:59:8d:92:00:49:0b:05:b1:2f:8c:9c:21:
2e:c7:e1:44:94:56:a7:dc:f0:fe:ac:22:ad:29:f1:
55:b3:4e:b2:f9:b7:79:10:7d:2a:fb:3f:0b:30:53:
e6:46:ef:ed:ad:97:1a:ef:06:93:21:ab:19:c4:ff:
dc:35:9f:f5:c3:82:27:23:48:0d:5b:b8:62:8f:f7:
f0:a4:3b:5b:6e:80:5b:9e:70:01:e0:90:93:bc:b9:
81:28:23:82:f7:e7:d7:7b:f6:65:4c:41:ae:87:c8:
91:66:29:2b:8d:e5:60:7e:4f:99:eb:d9:e5:78:19:
71:7f:f2:c8:4e:1b:9f:54:f6:88:2e:31:ab:9d:c2:
d9:85:ae:d6:cb:67:68:30:cc:1b:da:5d:f8:0d:bd:
cd:7c:84:ec:f1:0f:c7:ac:98:81:a8:6f:49:f0:dd:
0a:0a:d3:d6:d4:cd:ab:86:af:54:8e:83:78:69:cc:
0f:83:ef:4b:54:9b:bd:ab:39:ef:b2:1b:b2:80:d9:
ed:f0:85:75:7d:da:bd:f8:92:97:29:98:fe:97:f1:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A5:C8:6A:6A:7D:11:7B:12:6D:FD:56:8F:FC:B2:F4:4C:B2:1C:10
X509v3 Authority Key Identifier:
keyid:C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:70:e3:4d:8f:ba:1d:6b:df:a3:fd:d0:73:fc:a3:a2:04:2f:
bf:0d:9f:68:1a:37:a4:39:16:e1:ba:46:dc:1d:bf:a2:35:72:
b7:65:69:f4:1e:ce:09:02:6f:53:2c:3e:9b:c5:1d:e0:11:3f:
c6:99:b6:47:f0:d6:20:a7:b7:bc:a4:42:55:f8:c6:73:61:9e:
a2:79:9e:8b:1f:3b:f1:df:88:00:9b:20:93:ae:5e:f0:30:7f:
35:2c:be:30:f6:8a:0a:53:c2:ed:11:2b:c1:e5:e8:bc:e0:f6:
28:25:8a:d7:70:04:ff:2b:ee:97:9e:90:6d:4d:42:eb:aa:01:
9f:81:8c:ff:3f:e4:e8:a0:3b:46:58:17:2f:ad:5b:01:53:31:
59:66:a5:ef:f8:6c:f6:82:0d:ad:ce:b4:d4:93:18:37:3e:59:
41:64:58:ce:3e:d0:6d:c7:73:b2:6d:19:04:31:44:99:17:1c:
b6:d5:82:56:e6:dc:b1:9f:dc:e5:0a:f2:34:40:c1:f8:d7:07:
2d:38:e3:9a:96:fc:7f:e5:fc:6f:d0:e7:0c:86:69:f4:bb:a2:
7c:b0:7e:b8:bc:9e:25:5f:83:ba:9e:51:eb:0b:8b:ae:9c:1d:
7e:86:f0:e0:78:9e:50:8e:3e:6a:e8:b1:02:73:25:e6:61:69:
35:16:b1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:40:58 2025 by rpki-client