Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
File: xN29nyMJGTIb9WcG8QaTd5JhGfk.mft (raw, json)
Hash identifier: kW0jfxd5wQra9NYTkjsABY5SpEUS+8VfzA20b32Far8=
Subject key identifier: C9:F0:DA:E8:BA:C8:77:BA:62:09:58:4B:72:CD:E2:C5:3B:17:CB:4A
Authority key identifier: C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9
Certificate issuer: /CN=c4ddbd9f230919321bf56706f1069377926119f9
Certificate serial: 019767E00B06E164669C9A23D8E04D2FEFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
Manifest number: 05AB
Signing time: Fri 13 Jun 2025 06:00:25 +0000
Manifest this update: Fri 13 Jun 2025 06:00:25 +0000
Manifest next update: Sat 14 Jun 2025 06:00:25 +0000
Files and hashes: 1: 7qr12EYwsdyti-EmLWqRDogionQ.roa (hash: 5LhmlqfCFcdrvGQgZrfHuGwVjCahrEpoNBu5iKMaA/w=)
2: JEh62edtGcPK6W4aI6E72di6xCs.roa (hash: PD42vAZ0BIX3jY6yqazrN5UUOFytkMhASMCFsoaVQJg=)
3: xN29nyMJGTIb9WcG8QaTd5JhGfk.crl (hash: fUepHbNtuZ0gpzf79pCSHUualRfjXix4DY+qwyl996w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:e0:0b:06:e1:64:66:9c:9a:23:d8:e0:4d:2f:ef:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ddbd9f230919321bf56706f1069377926119f9
Validity
Not Before: Jun 13 06:00:25 2025 GMT
Not After : Jun 14 06:00:25 2025 GMT
Subject: CN=c9f0dae8bac877ba6209584b72cde2c53b17cb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:5a:a8:4f:5d:10:6d:72:d3:c7:cb:64:19:
fd:97:e7:95:5c:11:cf:43:91:f5:9a:85:30:7f:9e:
0e:ab:41:6b:e1:fd:57:ba:d9:d0:66:79:69:ce:6b:
71:d7:c4:56:3a:07:93:28:63:d0:e6:6d:a8:02:f4:
67:f8:3c:08:0f:7f:99:2b:8b:9c:66:e6:c4:0d:29:
ee:1b:0f:d7:3e:4c:79:13:30:61:2a:4d:33:98:aa:
51:6a:55:b2:c7:02:ea:43:8e:86:31:08:09:cb:84:
ab:37:32:49:08:3e:c0:09:e5:53:f9:16:fb:d9:45:
cc:bb:e3:0c:7d:21:f4:03:6c:b7:fa:5b:1e:c9:f6:
49:74:9a:53:03:0d:0a:eb:b3:1d:cb:32:07:46:e7:
7c:6b:f4:e1:37:24:0c:82:c5:ff:a9:20:85:2b:16:
98:01:dd:b3:09:84:ab:f6:6b:b3:cd:22:b3:56:b2:
f6:80:f6:37:4c:cb:9c:50:fd:f7:32:15:44:77:06:
f2:2c:1e:02:fc:e1:7b:21:4b:ff:b4:45:74:c6:5a:
5c:0b:4e:68:89:ef:df:a8:86:28:7b:d5:87:b2:80:
17:de:ea:45:ff:11:79:61:14:53:ad:80:ad:0c:c3:
83:a8:66:08:d2:22:0e:1f:c1:a1:26:2e:c4:3d:7f:
f2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F0:DA:E8:BA:C8:77:BA:62:09:58:4B:72:CD:E2:C5:3B:17:CB:4A
X509v3 Authority Key Identifier:
keyid:C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:93:01:cd:a3:65:0b:38:bf:95:f8:43:18:ca:4c:59:32:73:
79:84:22:07:6b:f4:76:44:a6:79:df:a2:ff:b4:87:d1:2a:8c:
35:6d:9c:5e:59:dd:2d:cb:c2:f4:53:ec:7e:97:a9:4a:f0:7d:
08:21:e9:94:60:ec:88:a0:9c:fc:79:cc:e5:0e:ed:76:a8:c4:
b2:84:9f:45:90:53:3a:88:27:c1:d9:09:b8:c4:c0:f2:e2:d8:
59:2b:3c:05:7c:5c:5f:d8:7f:54:b6:3a:3e:88:18:0a:8e:8c:
34:31:ab:dd:b7:d8:6c:52:53:70:9b:21:ee:eb:cf:eb:c5:f9:
56:6e:fb:7d:eb:9d:1b:83:a7:40:7d:0d:87:ba:54:5d:d4:41:
f2:aa:35:8a:84:d4:df:2b:30:10:21:76:fc:84:79:e6:17:89:
88:65:51:34:bb:05:c2:18:a6:4e:1b:6b:48:9b:5a:c1:8e:4d:
9e:83:5f:e0:18:a9:cc:3c:63:4a:99:17:26:3f:53:c5:10:7a:
ce:68:1c:c7:d1:e3:a4:45:ab:46:9e:1c:38:31:44:8e:c8:b1:
be:79:49:73:ec:6d:dd:26:82:8c:c2:53:df:2b:cf:a9:30:b6:
d3:11:b2:6a:eb:81:05:9b:6e:37:b0:46:a4:1a:95:e6:6f:b2:
0e:ec:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:35:25 2025 by rpki-client