Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
File: xNN466ZI9D5TpKQeE0uQExypPNg.mft (raw, json)
Hash identifier: jOsUhfGDerzLpd1CR6Rkslt6XJP6R8z52QwCa8AGYi8=
Subject key identifier: 5E:41:7B:F3:BF:AF:12:B8:E5:39:B3:2C:F9:9D:92:B6:3E:12:9B:3D
Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Certificate serial: 019767E0B2B447FA69BF2F5C6782CA41335F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
Manifest number: 0ACD
Signing time: Fri 13 Jun 2025 06:01:08 +0000
Manifest this update: Fri 13 Jun 2025 06:01:08 +0000
Manifest next update: Sat 14 Jun 2025 06:01:08 +0000
Files and hashes: 1: gsd0lN6ZnIrIQD5lIwOejLd2Dv0.roa (hash: n34ueBlgPlEEtyoifu0C2ju9FVvPJQshh3AnTXlwP14=)
2: xNN466ZI9D5TpKQeE0uQExypPNg.crl (hash: fra8SCn93BdnxE0pGGT0rsubbHnRjuWqf4CQjw74UBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:e0:b2:b4:47:fa:69:bf:2f:5c:67:82:ca:41:33:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Validity
Not Before: Jun 13 06:01:08 2025 GMT
Not After : Jun 14 06:01:08 2025 GMT
Subject: CN=5e417bf3bfaf12b8e539b32cf99d92b63e129b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d5:79:66:28:d9:78:09:e8:e3:dc:f2:41:54:
eb:9f:56:67:30:74:b5:63:e2:bd:c9:61:8f:71:07:
22:9b:d0:04:2f:d3:78:4a:ab:72:f2:61:75:2b:b3:
52:b2:da:b3:7b:46:a0:d8:2b:28:60:a5:9b:b0:eb:
b2:a0:a3:37:ca:3a:f1:26:a8:cd:89:2f:f9:8c:8e:
a7:55:1e:13:04:27:5e:3d:71:59:86:0c:27:66:20:
cd:ea:7c:e3:1d:03:d0:78:01:ee:7f:1d:71:5f:12:
2d:56:74:24:c4:4e:c3:bb:5c:66:23:1c:f8:59:65:
6c:6a:55:24:54:7f:c0:f0:45:4c:51:8a:04:ce:fa:
0a:d1:a5:92:8b:c1:b8:83:90:11:c5:b6:c3:b3:27:
bc:e4:5d:4f:2d:5d:41:71:d3:3a:97:52:51:c4:84:
47:63:9b:71:07:b2:8d:cd:a2:37:94:75:eb:e8:c6:
d4:d1:97:b2:1e:ac:ff:b3:30:55:5d:a5:0e:92:a2:
fe:1c:b7:03:c0:46:f2:6e:7a:8c:dd:aa:31:8f:e0:
eb:8a:76:fe:61:e6:b7:ad:99:17:39:0c:1f:77:cb:
e7:74:34:c6:21:c9:20:1d:6d:01:a6:ab:51:d1:12:
75:b3:f4:2c:56:0a:be:76:f7:ad:07:c1:49:e6:af:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:41:7B:F3:BF:AF:12:B8:E5:39:B3:2C:F9:9D:92:B6:3E:12:9B:3D
X509v3 Authority Key Identifier:
keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6d:99:fa:8d:ea:92:dd:23:e6:16:14:02:a5:90:1d:9f:fa:
21:50:40:a6:08:94:1d:7e:31:ba:03:36:0d:c8:56:a9:ac:0d:
a7:15:4b:b0:cf:12:99:47:6a:47:7b:dc:41:61:66:4b:4b:42:
1a:5c:d7:2f:79:74:27:db:fc:19:73:7f:9c:cf:3e:2f:e3:22:
01:28:c8:f9:1c:4b:06:b0:39:a4:71:39:03:42:cb:5a:c6:f9:
96:51:91:79:9b:43:14:a1:7b:8f:55:8a:ad:82:80:77:a0:1b:
9c:1d:76:ea:c1:8f:8b:c3:16:b0:ba:8b:fe:b2:2d:f2:90:92:
6c:47:9b:4c:d0:d1:30:7c:b8:5d:00:fc:37:86:d9:8f:e4:1d:
e2:f8:14:c7:73:30:3a:13:a6:8a:17:e2:19:65:1a:ca:47:2d:
8c:81:c9:c0:a8:f1:76:8e:e7:26:b2:24:b5:14:4f:14:04:ca:
41:70:64:06:98:fd:38:2f:b7:64:e4:e9:b8:88:2c:71:22:d6:
8b:ac:94:ba:ef:0f:80:43:ee:96:27:ed:03:e5:7e:1a:ad:ef:
1e:21:13:58:bd:81:66:6d:f3:f3:75:73:6a:6e:e3:c8:77:a4:
df:7a:78:6b:f7:ed:73:54:2f:34:55:03:06:02:41:02:55:1f:
d0:4d:54:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:52:29 2025 by rpki-client