Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: f38EIb45GscKOEeGKGKImmGsKCslnbF+iyz/JdDAHlA=
Subject key identifier: DC:FE:86:75:FE:A8:15:ED:EE:86:48:C9:1B:D0:BE:21:80:CE:BB:90
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 019747E7641C137A3CD855DA7C38C2BCE5FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 1585
Signing time: Sat 07 Jun 2025 01:00:36 +0000
Manifest this update: Sat 07 Jun 2025 01:00:36 +0000
Manifest next update: Sun 08 Jun 2025 01:00:36 +0000
Files and hashes: 1: V1dxs9JhyjDMxU7zwFABoBAdx60.roa (hash: jK0rBU9juj3Cm9p+z0cyDJb76/ejVGKYQgHCoAgwZ5Q=)
2: ggaujxDkTjz3ur815c8t-PcBT3o.roa (hash: kBi/tXIf057RjeVgxSaejXzvw/f4YkfQil/vCr+FLSM=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: FAGLcUBxTmgNLWsshSSfhZzF436bnMyFXdVfL3yKRck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:64:1c:13:7a:3c:d8:55:da:7c:38:c2:bc:e5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Jun 7 01:00:36 2025 GMT
Not After : Jun 8 01:00:36 2025 GMT
Subject: CN=dcfe8675fea815edee8648c91bd0be2180cebb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:26:43:86:58:64:42:87:d2:4b:f5:c8:ab:ae:
c9:06:58:91:b0:45:43:7a:18:0c:27:3b:d7:9e:06:
6b:ec:14:7c:2f:30:56:fa:07:48:60:0f:ce:5d:a5:
3a:68:e7:14:d9:5b:b8:db:18:4e:4a:f5:7e:8f:20:
b1:5a:f7:41:fa:3f:ff:f1:83:bd:8f:77:d4:74:9e:
ed:3c:7c:43:a5:18:f5:f6:b0:33:15:b7:c6:dc:fe:
5b:3c:5b:a1:a6:24:23:39:2a:35:5e:59:72:4a:f3:
17:57:f3:f2:f1:c2:0f:0a:4b:65:ca:be:7a:35:1a:
6b:80:ab:cd:5e:43:70:13:63:c2:a3:a3:64:f9:ec:
16:58:91:34:37:09:46:d9:24:24:b5:e0:71:44:90:
54:77:22:8b:1f:be:95:7c:ef:8b:50:f3:34:b0:96:
2e:5b:a5:c2:ad:cd:ab:23:b1:f5:a1:eb:45:98:35:
17:e4:57:5f:cb:3c:d1:5e:ab:d5:93:81:d9:96:29:
f2:1f:1a:7b:b0:31:69:55:46:5a:39:19:53:23:81:
8c:2b:ae:25:fe:ee:be:15:e3:db:44:07:aa:ac:24:
5d:c7:51:8c:c6:bb:6b:73:74:e8:48:5f:1b:9d:c4:
e9:48:9b:39:74:5c:52:c6:00:c3:e6:f8:c2:68:90:
bf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FE:86:75:FE:A8:15:ED:EE:86:48:C9:1B:D0:BE:21:80:CE:BB:90
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e8:95:59:40:90:dd:87:28:23:0f:02:3a:b8:8e:50:6c:96:
98:ef:f1:d1:2c:1a:73:25:f8:77:19:9b:a8:67:8e:05:1b:32:
cb:b2:9a:c6:ca:b0:e3:36:cb:42:62:93:7c:62:4c:11:28:df:
64:d0:b3:7f:4a:60:fe:c2:66:92:c2:c6:5c:71:a5:e2:e0:19:
08:2d:5f:23:0f:ea:b1:84:42:05:e6:a3:b1:90:b2:6e:53:81:
1f:ba:a0:6e:28:5e:ea:9b:b3:5b:70:7f:3d:d6:e8:b8:74:14:
48:ce:fe:31:81:da:f2:8c:02:d3:33:83:64:37:bf:b0:40:2a:
e1:53:21:db:e2:42:86:b7:f8:bc:fc:93:0c:b6:f0:b5:68:d7:
2b:b9:f4:ed:50:09:32:26:b5:8c:60:26:79:68:c0:50:c6:86:
d2:f0:05:c8:11:61:99:3e:ea:3f:7a:ed:94:a5:0b:09:25:03:
4c:b9:e7:17:45:47:19:53:3a:82:ec:e2:4c:2f:d9:f5:e4:7c:
52:68:df:1c:f6:ac:a4:ca:1e:3f:fd:5f:7c:4f:09:7e:a3:f7:
89:0d:00:97:f1:13:f2:54:d7:f8:61:0d:49:3e:9d:e6:2d:3f:
61:29:61:68:fa:b3:c2:99:d0:f2:b3:61:eb:9f:a7:87:e1:d1:
a5:03:13:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:40:02 2025 by rpki-client