Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
File: XB3W7EouHzdshVxYMSGVoAXNuFA.mft (raw, json)
Hash identifier: tFUqccwGjCFm0WXO+7ZpZPTslRxTF5MkbpLbuflOgvs=
Subject key identifier: 92:F1:6A:8D:B7:E7:23:B2:BC:50:C4:A7:EA:D3:77:DF:92:64:DA:86
Authority key identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
Certificate issuer: /CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Certificate serial: 0197469EB90C5B193B5E4E530B85224B4C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
Manifest number: 0B85
Signing time: Fri 06 Jun 2025 19:01:36 +0000
Manifest this update: Fri 06 Jun 2025 19:01:36 +0000
Manifest next update: Sat 07 Jun 2025 19:01:36 +0000
Files and hashes: 1: XB3W7EouHzdshVxYMSGVoAXNuFA.crl (hash: fhI9m+BLhmdq70BMVzYAPNo6fMkNNf2qteZzpTPfG5U=)
2: yHRB4Y2OAyzADCHywRZPrfJRG4I.roa (hash: NribQFyQGW5J2lu2xgI9G6pKO663m0SkQqZCGrWC3Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:b9:0c:5b:19:3b:5e:4e:53:0b:85:22:4b:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Validity
Not Before: Jun 6 19:01:36 2025 GMT
Not After : Jun 7 19:01:36 2025 GMT
Subject: CN=92f16a8db7e723b2bc50c4a7ead377df9264da86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:c5:f9:b9:0c:93:a2:c9:d8:44:74:40:bd:
98:1b:6b:d2:80:22:39:41:ae:a9:db:91:a9:6f:eb:
dc:35:97:86:16:d4:e0:6a:fc:30:34:89:42:fa:bf:
f9:af:ea:eb:6b:42:28:cb:89:a3:44:4e:cf:38:93:
e7:bc:60:b9:ff:8c:4a:b3:91:88:b8:8b:be:e9:b6:
aa:8a:a5:ae:e9:4d:b8:14:3d:78:1b:a3:0d:98:e8:
5c:0d:dc:e0:06:48:a6:33:81:ae:e4:4a:70:1c:05:
36:43:02:09:8a:a4:84:88:1d:eb:66:c1:00:27:87:
fe:e0:ac:5d:44:04:d5:c3:1d:8f:21:a6:2a:24:4a:
9d:2a:96:f2:99:0f:81:95:4f:2b:72:1c:a0:67:07:
81:e0:56:90:9a:a1:28:da:f0:13:24:1f:90:ac:df:
61:20:94:08:9a:aa:8a:d7:3d:58:c2:3a:4c:c9:9f:
52:03:5b:0c:3a:df:9d:90:1a:d6:76:1f:e8:6f:db:
fe:f9:b7:e4:ce:2b:c4:14:48:98:a9:48:e7:45:fd:
f3:48:8b:f6:73:79:16:fb:d2:71:e0:1d:26:bd:31:
8b:59:53:0f:fd:e7:48:06:b0:b2:fe:98:66:68:0b:
a4:08:fd:ff:67:a9:d7:c3:4e:b6:66:63:90:59:11:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F1:6A:8D:B7:E7:23:B2:BC:50:C4:A7:EA:D3:77:DF:92:64:DA:86
X509v3 Authority Key Identifier:
keyid:5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:7b:9e:88:a8:bb:17:c3:ca:31:25:82:28:77:cc:1a:9b:cf:
85:1b:09:db:95:bc:1f:b3:7f:08:15:b6:e0:84:ac:59:00:47:
3d:ae:36:7c:57:0c:29:5a:71:e7:5f:68:b2:4c:af:a0:97:4b:
7a:f1:c9:ce:5f:b1:64:12:6a:b2:fd:3b:14:c4:4d:19:87:85:
52:4c:eb:de:26:de:d2:92:00:e9:f9:ad:20:83:64:25:50:a6:
0c:76:c3:0e:70:be:68:2c:2f:9c:fb:ec:f7:35:79:6b:31:73:
d8:62:62:e3:e9:61:4e:e8:0b:d5:50:7a:a6:0e:84:d1:aa:f5:
ad:99:8d:9f:3d:7c:79:91:da:69:20:0d:f4:f3:9b:04:e5:1f:
a5:c6:99:ee:86:72:bf:01:3d:12:84:dd:c6:ea:bd:8e:a9:9a:
a4:2f:d8:b6:f6:7a:f1:f4:8c:56:25:3d:f4:46:b7:0a:28:e9:
75:8a:6f:49:38:f9:53:eb:76:88:d9:75:eb:7d:39:c5:a3:9c:
e8:3a:18:16:9b:ad:82:f2:15:c0:ed:af:dd:dd:8c:a6:62:fa:
25:29:7f:91:69:43:e1:57:1b:64:10:64:41:eb:52:cd:4a:08:
b6:26:fa:50:82:de:86:49:9e:9c:5b:45:6f:17:ba:c8:26:19:
e1:0f:56:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:47 2025 by rpki-client