Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: QRLtwNoQL0tcU71q1i1Wuugu/buOSvvrjGuaHftJMtA=
Subject key identifier: 46:03:C8:44:49:A3:33:72:E9:9D:E9:10:97:ED:65:D4:9C:9F:B3:B2
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 019749685AC27C424C72B8903EDDF47C2057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 08:01:05 +0000
Manifest this update: Sat 07 Jun 2025 08:01:05 +0000
Manifest next update: Sun 08 Jun 2025 08:01:05 +0000
Files and hashes: 1: RMEEjlIMkQn-eVpgsZKUIgD2naA.roa (hash: ueUC7fhvm5el60XIzYyUHLJfoQdXhv3L7jiX08frMs4=)
2: pD7HPK_aW3QH3PPrNYbHeMKhGy4.roa (hash: GJeO7Q27YxmGksDjROFyKoncsMRwot0oI2b9og4LUSw=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: xHRxt2X/2cDLMeIKpKdB3QubCg66uMhAhyQQ+n15mI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:5a:c2:7c:42:4c:72:b8:90:3e:dd:f4:7c:20:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Jun 7 08:01:05 2025 GMT
Not After : Jun 8 08:01:05 2025 GMT
Subject: CN=4603c84449a33372e99de91097ed65d49c9fb3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:9a:33:94:fe:64:0a:a7:a4:95:2f:ba:6c:
e0:23:d2:66:09:7c:04:72:19:77:b0:08:ce:cf:e0:
62:78:86:4d:19:16:e4:4d:2b:3b:84:af:41:ce:86:
b1:55:b8:88:e0:3e:ec:75:87:49:90:6a:fc:78:98:
16:67:5e:77:c9:b4:68:19:e2:7c:53:e9:9d:7d:a4:
a1:31:f0:3a:b5:6e:a0:01:71:b8:a2:81:03:81:37:
f1:31:81:23:bb:d1:94:aa:2e:c3:d3:d9:de:b8:c2:
14:8c:b5:8d:80:4a:51:f3:77:56:f0:7f:de:6d:74:
d9:e7:50:ec:fb:49:45:8b:34:6e:33:ae:d6:e5:19:
d8:a8:18:10:ee:4c:16:a0:d2:f5:85:1b:b9:3f:77:
a1:5e:1d:d8:c8:d6:05:ae:40:a2:14:bc:5d:0f:62:
d6:76:78:51:9c:42:05:c9:9f:52:f2:f3:02:52:8d:
2f:dd:13:90:54:01:80:29:2d:75:f0:04:d2:d4:94:
48:19:0d:5b:14:23:46:4a:8c:c4:9b:86:26:4f:47:
95:67:b8:d7:95:40:36:55:9e:46:38:b8:b3:55:5c:
37:48:ce:c5:7c:8d:57:32:58:a6:79:28:27:40:9d:
62:de:04:a6:e9:ac:2f:4d:4c:31:d5:e7:98:ce:ef:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:03:C8:44:49:A3:33:72:E9:9D:E9:10:97:ED:65:D4:9C:9F:B3:B2
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5e:85:32:32:4c:7c:20:b2:97:b3:27:55:e8:6c:8a:6f:7f:
01:b5:63:a3:16:4a:84:46:76:dd:ee:ab:11:7a:ce:1f:b8:d3:
62:a8:2c:15:7c:82:85:3e:48:2d:e9:a4:d0:0e:2e:28:d9:a8:
06:0e:5a:1f:75:05:e6:fc:d3:81:af:81:81:38:d7:90:52:81:
98:fb:1e:43:eb:72:60:34:a1:67:f4:3d:cf:6f:96:45:dd:9e:
7d:2d:f0:0a:aa:a0:a3:8b:bb:53:8b:9f:b8:00:21:6b:fd:eb:
86:6b:a9:eb:23:1a:6d:d0:12:07:66:29:9d:7a:50:ba:df:60:
ba:08:6b:c8:d0:df:c2:4c:6f:ed:6a:95:6a:7a:db:4f:4a:45:
9c:70:8f:e1:37:e0:a6:e1:d0:39:89:35:97:93:f9:57:1b:90:
b7:93:81:45:56:37:5e:99:6a:43:fc:b1:82:70:1f:ef:29:cc:
1d:3b:a8:f6:b3:c5:53:7d:e3:1b:1e:ff:06:a0:90:92:12:62:
24:af:1a:ce:79:4b:6f:54:cc:c7:db:c2:e7:9c:bb:d9:83:d4:
19:55:64:a5:35:2c:b0:28:b1:e3:8c:83:3c:9b:40:0d:c6:e7:
26:a1:d3:c4:bd:57:69:3d:a4:73:7d:86:8f:8d:da:07:bb:6c:
dc:c5:95:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:43:35 2025 by rpki-client