Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
File: 3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json)
Hash identifier: 4eJ2QzxomdbRFvG8tofq06TpoejKvLMwb7fAZa3Jkjw=
Subject key identifier: 1C:A6:13:5D:7F:04:BF:17:2E:20:57:8E:CC:96:E7:11:AD:08:21:80
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 019748C332E43111A05F2E79F91543105D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
Manifest number: 1558
Signing time: Sat 07 Jun 2025 05:00:41 +0000
Manifest this update: Sat 07 Jun 2025 05:00:41 +0000
Manifest next update: Sun 08 Jun 2025 05:00:41 +0000
Files and hashes: 1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: iQq4UZJM1Zy0c/I/PgxtpmuJjXr3o1Sqh5NnC97l9p4=)
2: EsL5vRvD6Hsz2Ac1BO5dG0iZtiE.roa (hash: 6YJicTgp9qVMpWAlIAbPHHma7brtZhgeBhN6tMg/gfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:32:e4:31:11:a0:5f:2e:79:f9:15:43:10:5d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Jun 7 05:00:41 2025 GMT
Not After : Jun 8 05:00:41 2025 GMT
Subject: CN=1ca6135d7f04bf172e20578ecc96e711ad082180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a4:ad:9c:ac:7c:46:d4:4b:3c:e9:42:4b:7f:
07:bf:ce:2e:fd:7f:e9:fc:17:a9:1c:77:59:67:62:
40:ec:48:8f:e7:2d:4a:77:3c:33:5d:bd:91:bc:8d:
3f:6a:79:ee:e4:05:ac:b4:f2:e9:b0:81:27:17:31:
f2:7a:39:ec:56:2b:26:cf:e0:8d:59:54:a4:cf:37:
32:90:2e:bf:1b:0c:6e:ca:32:9d:d2:43:9a:c6:23:
0c:97:cc:24:ab:c3:72:16:f3:ac:fe:c8:bb:17:01:
1d:df:db:65:5c:b1:a5:a1:9e:89:98:5b:3b:51:4f:
d9:e0:c4:3a:9e:9e:87:6b:e1:e7:36:18:5f:2f:33:
35:6a:d5:31:21:03:6c:32:80:4e:4e:a9:cf:5d:0f:
aa:28:2c:3f:10:23:0d:68:bb:d0:0e:6c:04:b9:22:
92:d6:37:b8:fa:f1:41:42:1e:11:f2:53:6c:63:22:
4a:e3:ad:56:e4:34:4d:31:70:a4:67:46:d7:2b:d0:
b0:a9:b0:7b:04:6b:c9:ef:34:ea:07:7f:5a:ef:07:
7f:30:0c:9f:5c:9f:ea:04:71:6e:ad:84:e3:1b:ae:
03:dd:d5:08:2d:e0:45:c9:7e:60:35:9d:e6:07:35:
db:94:57:10:39:e4:b0:3d:bd:85:75:f9:77:94:76:
ee:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A6:13:5D:7F:04:BF:17:2E:20:57:8E:CC:96:E7:11:AD:08:21:80
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7f:53:11:70:7a:72:fe:2b:7e:10:b0:64:c3:d2:a1:07:6c:
22:a9:7b:76:02:bb:f8:35:a6:32:ea:dd:13:be:90:7d:64:81:
2a:0f:0c:76:53:a1:3b:1c:d8:4a:be:73:c4:d6:b1:82:cd:f1:
6d:23:8e:9c:c5:fc:38:c7:0a:a1:eb:e1:44:d6:ef:2f:7b:0d:
cd:2c:7a:23:9a:5d:65:c8:bd:56:31:db:b6:04:d4:27:f1:8d:
31:7a:63:e6:15:e0:fd:c3:48:43:cd:8d:de:d7:a5:b1:95:eb:
65:4d:25:e2:69:93:81:ad:49:50:af:7b:ef:b4:98:91:71:60:
e6:a8:28:3e:d0:d9:13:40:82:de:15:0d:ac:99:1a:c6:da:97:
17:59:0d:3b:7d:1b:53:3c:ea:80:ec:fd:5d:b6:75:9c:40:d3:
be:15:01:07:cf:6b:af:fe:d4:02:84:0c:f3:d1:be:ec:16:f1:
32:34:c7:e3:ad:9b:2d:b0:f0:cc:3a:ad:11:0e:f2:b7:4b:ed:
c5:db:7e:b2:12:4f:63:0e:ae:8e:e5:b2:a4:ea:36:94:d6:59:
bc:91:6b:53:9e:c9:9e:3d:66:b6:15:fc:8e:20:52:6c:1f:cf:
04:80:a7:f6:b0:f0:df:be:a3:7b:7f:c8:79:05:5b:5b:fe:e2:
b2:ba:60:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:43:01 2025 by rpki-client