Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
File: xm3GDRbf4WSdhsFpPheFjCMGOH8.mft (raw, json)
Hash identifier: l9pfV855tJnjaKPLT5mFH8am8noeRw8OZ0xiAPA8EJY=
Subject key identifier: BA:93:04:33:5B:D8:10:BD:DF:4A:2C:7E:B5:E1:CA:E0:2E:04:EB:5C
Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Certificate serial: 01974666E21C6759F4F744017392294C46FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
Manifest number: 1363
Signing time: Fri 06 Jun 2025 18:00:36 +0000
Manifest this update: Fri 06 Jun 2025 18:00:36 +0000
Manifest next update: Sat 07 Jun 2025 18:00:36 +0000
Files and hashes: 1: 9wllcBQptpahKiXvdA8fp8dAnd4.roa (hash: EZriZJeJYlorIY+q2d7CpiKRv59NpOmz9CDJjivHJGw=)
2: JehPYERpWNPyZpbjXvQLka1W0tc.roa (hash: lTB81sn8qz5yoT+HG2SJwj2/2HvuYhBId4lkI/gSD6M=)
3: xm3GDRbf4WSdhsFpPheFjCMGOH8.crl (hash: To4cYWW+s1hkItLzqEOvDrRQjyYeFFaGCPqoqTdXZWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:e2:1c:67:59:f4:f7:44:01:73:92:29:4c:46:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Validity
Not Before: Jun 6 18:00:36 2025 GMT
Not After : Jun 7 18:00:36 2025 GMT
Subject: CN=ba9304335bd810bddf4a2c7eb5e1cae02e04eb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7b:63:67:0e:2f:b2:d0:52:b5:08:28:51:39:
9b:38:a0:c8:c8:c9:ce:15:ce:ff:ef:98:02:81:46:
2a:59:99:cc:d2:30:6d:ed:c3:e8:d8:26:91:cd:e7:
2a:26:0f:10:ff:10:c9:9f:d0:e2:ab:08:7d:8f:dd:
6d:50:db:bf:a5:ee:fa:98:72:e4:53:55:05:06:ae:
79:54:5b:6e:42:2e:00:0e:52:63:b0:f4:65:b0:b9:
39:bc:1c:ca:02:84:cf:a8:36:69:d9:1a:5d:ea:5c:
2e:3f:fd:ce:05:39:bf:93:7f:cc:f5:b6:2b:cf:37:
50:1c:3d:b9:70:31:0b:3f:d2:71:e5:06:8e:65:d7:
e7:06:25:b1:f9:b5:47:a0:cf:14:69:51:ca:cb:70:
18:78:de:7a:6e:10:02:8e:7e:c7:47:a3:c6:83:d4:
83:e0:a6:f5:34:a9:1c:59:31:fe:55:44:59:c1:c9:
55:1f:85:94:40:0a:ec:e8:a7:58:a0:d9:ea:d4:28:
8f:95:88:22:7b:c2:df:d6:e5:61:75:88:79:ad:05:
00:6c:aa:fa:23:33:5e:68:31:f8:f1:b5:e1:02:b1:
ad:c2:54:91:98:bb:a3:b0:5e:58:c3:89:72:a2:19:
6f:c1:ff:42:13:2e:72:9f:7c:8c:a6:b5:ec:0d:f9:
82:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:93:04:33:5B:D8:10:BD:DF:4A:2C:7E:B5:E1:CA:E0:2E:04:EB:5C
X509v3 Authority Key Identifier:
keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:79:4b:e9:ef:ed:db:54:18:a6:1c:f3:86:ab:51:c1:06:5d:
44:d4:cc:db:b5:8a:b8:32:86:f2:cc:6e:ca:2f:04:e0:f9:ca:
2c:a0:25:8c:37:18:45:3f:4e:5c:26:87:09:64:f6:bf:36:34:
e2:67:e8:e0:24:97:dd:26:6f:03:72:09:1c:00:24:53:e7:32:
c4:25:6e:b6:b3:5a:d9:8b:8d:4e:4e:4a:60:8a:fe:a5:f3:16:
10:90:1b:f8:4e:86:67:7b:bd:8a:a4:9d:a2:4b:ed:9d:87:04:
ed:27:15:25:64:f5:d2:72:9b:32:71:ea:db:52:d5:f8:38:87:
3d:33:1d:48:a6:0e:f6:99:2c:3c:79:9e:ab:b4:a4:90:79:4a:
d0:fd:c3:2e:5a:ca:66:78:33:d7:79:d2:b3:49:ac:bf:d2:e0:
ea:f1:cf:21:c0:b1:ff:69:7a:4a:94:a1:df:d2:0a:4d:cf:56:
af:8c:e9:f0:7f:2b:45:1f:7d:52:5c:42:c1:4e:14:e1:34:81:
c8:49:dd:d0:4b:3c:ba:db:00:9f:d3:10:3c:c4:97:5b:12:9a:
41:74:2c:b1:25:39:6f:59:77:08:43:3a:11:cb:2c:fb:c8:28:
64:1b:8f:c8:80:d7:57:9c:59:fd:8e:e9:65:6e:ef:2d:f1:22:
57:54:9e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:31 2025 by rpki-client