Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
File: XUcovR9dE212i_F1NGHFPaRXRss.mft (raw, json)
Hash identifier: i8G/bMyTtzVfPn8T0Wxvx7geY7KQ64SWp5vdy2ENmD4=
Subject key identifier: 2F:A9:50:FD:1A:42:FD:AE:5A:F1:A2:B3:29:C7:9E:5F:FB:15:0C:4F
Authority key identifier: 5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB
Certificate issuer: /CN=5d4728bd1f5d136d768bf1753461c53da45746cb
Certificate serial: 01974DB25D90916C4D2A6D8CFD929CC6B48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 04:00:24 +0000
Manifest this update: Sun 08 Jun 2025 04:00:24 +0000
Manifest next update: Mon 09 Jun 2025 04:00:24 +0000
Files and hashes: 1: HBQ9odudt8FtC2hg2PdPFEmL6sY.roa (hash: qLOlhGmFNavd+EfWsRToyvlmrGX+k5BkUmneKAiMnB0=)
2: XUcovR9dE212i_F1NGHFPaRXRss.crl (hash: f68+E+h37RP6P8+UVQKFBoqeZX60DjiiCJJpVc3ML9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:5d:90:91:6c:4d:2a:6d:8c:fd:92:9c:c6:b4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4728bd1f5d136d768bf1753461c53da45746cb
Validity
Not Before: Jun 8 04:00:24 2025 GMT
Not After : Jun 9 04:00:24 2025 GMT
Subject: CN=2fa950fd1a42fdae5af1a2b329c79e5ffb150c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:57:88:d0:32:e0:ee:70:ae:ad:e0:f3:8b:
f3:f4:30:b4:f1:67:a2:44:c5:54:2d:af:b3:b3:b5:
44:f3:88:13:02:78:49:8e:ae:8c:e3:6d:1b:9e:86:
61:25:65:b7:43:f7:13:e8:80:56:a6:9c:89:d1:b3:
d2:d1:b3:ee:f3:28:c0:61:67:b2:8c:b4:4a:bf:85:
e2:50:19:39:32:87:c2:e9:05:51:5d:af:6c:a4:bf:
74:7a:c6:5a:43:65:e9:50:c1:58:5e:79:e2:5a:bc:
2f:1c:d1:da:4a:eb:f0:4d:6f:6f:53:4a:11:0b:27:
5c:a1:78:4e:37:68:65:1c:6a:1f:1c:a1:46:1f:c5:
40:d5:5b:46:dc:8c:0e:c0:c6:d2:0a:14:45:60:24:
bb:08:59:c3:12:13:88:2e:bf:f6:4c:17:10:c9:16:
e5:5f:fc:32:0f:a4:e3:c4:2e:3a:eb:66:f5:a3:d4:
10:99:c3:34:c6:57:51:c6:b7:87:ea:03:44:c5:8a:
78:4e:10:5c:a4:12:b3:8a:6d:61:3e:86:38:9b:77:
d5:bf:b2:fc:e9:3a:fa:31:12:44:91:06:7b:6c:15:
e6:07:19:49:f0:eb:c8:29:23:46:35:96:9f:f6:ab:
a5:62:01:40:d3:fe:27:b8:79:6a:80:6b:29:84:b9:
d2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A9:50:FD:1A:42:FD:AE:5A:F1:A2:B3:29:C7:9E:5F:FB:15:0C:4F
X509v3 Authority Key Identifier:
keyid:5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:21:7d:a9:26:83:a8:45:28:4a:00:10:c1:45:74:d8:ea:56:
c7:79:bf:5a:d4:3d:2f:12:e1:79:0c:50:4d:cb:18:85:47:5e:
94:fc:80:17:10:d0:43:07:b2:86:59:7a:d4:25:d9:4c:43:a4:
16:2e:bd:85:21:d0:6d:ed:11:e0:77:e7:1a:6f:e3:f7:5c:d2:
cf:30:fa:3d:94:3c:27:3d:30:72:b6:32:32:74:4b:8c:07:e0:
78:17:6b:e0:0b:32:8e:33:88:8e:53:b0:59:e1:cb:6b:db:df:
ce:73:33:66:d4:9d:2b:f4:98:03:c5:9f:01:2a:52:7b:cb:33:
77:b7:87:8c:0c:4e:cd:0b:a3:bb:cd:5b:2b:8e:0f:2a:ef:29:
47:85:eb:8a:b3:8d:cd:2e:2c:a8:0a:3f:c8:f4:3b:bf:b7:66:
a1:65:f5:45:18:73:26:dc:a5:44:97:53:d9:58:9b:d6:4c:56:
eb:eb:a4:f0:ea:3a:c1:de:b7:22:37:a9:f7:df:ab:22:a4:cb:
cb:ae:98:98:59:9d:7b:bf:72:19:59:30:45:57:bf:98:25:29:
9b:2e:1e:4b:66:b4:a1:ef:72:45:a2:81:af:db:bd:65:d7:7d:
55:c9:dc:e6:34:94:34:87:47:fd:90:6d:a4:bb:05:9d:4d:aa:
c1:74:ba:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:41:19 2025 by rpki-client