Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: zBWKyAUmSRDLsMB6krS3i0wL0vWBSB+vJqKGT9pRvJg=
Subject key identifier: 3D:E8:50:79:97:06:83:F8:85:C4:32:EE:BD:D5:49:3E:DE:62:B8:9A
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 0197499F489D0B08C276225198C92783D41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 04B2
Signing time: Sat 07 Jun 2025 09:01:04 +0000
Manifest this update: Sat 07 Jun 2025 09:01:04 +0000
Manifest next update: Sun 08 Jun 2025 09:01:04 +0000
Files and hashes: 1: 3EU0oyFeuVgyRfJv8cphRhidY_4.roa (hash: uUVRINmwKIXEw7WBi5QJ2PuB8r4TwtW/ERy1bKhXTs0=)
2: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: Le/5edWrxjBEu/+GVPZ/KtS+i/QyRvpn7puGcQd4qR4=)
3: z8EvHyxXFy9jjv9R0JxJLEvy2D4.roa (hash: sXJWZt8I6k1zbSOq8kLHcxqJ9ibbT5w1l4T6edD/QLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:48:9d:0b:08:c2:76:22:51:98:c9:27:83:d4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Jun 7 09:01:04 2025 GMT
Not After : Jun 8 09:01:04 2025 GMT
Subject: CN=3de85079970683f885c432eebdd5493ede62b89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:35:73:24:df:dc:4e:54:8a:fe:8c:59:bf:
09:1b:46:38:aa:f6:33:24:6c:1e:3f:58:4f:c6:1c:
ef:ce:b2:d2:1b:70:17:fc:cd:2f:41:c7:56:c6:d6:
a5:d7:bc:f6:6b:ff:06:89:a6:cb:d9:22:5c:f1:04:
45:41:1d:58:5b:5d:72:33:2e:25:1a:2a:ca:5b:ec:
75:c9:35:45:27:8a:dc:f9:cc:47:90:bd:7a:76:24:
f4:6e:2a:c6:ae:eb:88:33:fc:56:df:32:d5:1b:71:
1d:4a:c8:86:ef:3e:35:99:7b:a5:71:41:a5:de:37:
4d:ea:b4:97:21:63:ea:eb:24:c5:ed:84:3b:27:24:
2c:29:1c:ef:ba:f4:2a:ef:1a:16:d2:4a:e2:47:68:
ea:ce:ca:24:61:66:d1:a1:8c:18:09:c2:3d:80:1f:
55:cd:5b:09:b8:d5:1b:3a:40:06:94:19:bc:f5:77:
aa:c4:db:43:c3:8a:34:f4:49:a7:c9:ba:bd:42:eb:
11:cb:bd:7b:28:76:db:08:58:c1:a6:07:98:1c:cb:
18:91:d6:ed:2c:07:e9:44:b2:dd:c0:a3:51:37:37:
59:de:68:9f:2c:38:37:de:12:58:63:f3:53:88:b2:
be:fa:99:b5:4c:2f:8c:77:7b:30:d6:69:2e:53:1d:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E8:50:79:97:06:83:F8:85:C4:32:EE:BD:D5:49:3E:DE:62:B8:9A
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7d:e4:ef:2b:78:20:e8:36:4a:6b:9d:40:f2:9c:42:f2:f6:
88:e6:c2:bb:b1:63:69:98:23:2e:9d:99:64:50:f6:c5:cd:ff:
ba:9a:3a:13:a2:69:be:35:00:ae:79:7a:26:a8:ed:19:b1:b9:
38:b5:56:75:4c:19:a6:43:7f:24:32:34:90:62:45:f4:b5:c0:
e5:40:63:fa:0c:0d:04:b1:0d:c1:c1:e1:80:74:9f:02:c5:57:
5b:b9:18:fa:37:b4:bb:38:2e:f6:fb:a0:20:0b:ef:7c:a7:a5:
d8:b2:25:1e:a5:13:3d:db:e8:c9:1e:93:4f:e7:1f:f0:f0:a4:
09:a4:ce:98:0b:6f:a0:80:4c:08:37:c8:2d:e8:10:73:6f:4c:
fa:6a:6e:dd:b0:c7:00:26:b9:58:16:b8:52:4d:03:05:47:9f:
ba:e6:f1:62:af:7f:f9:0a:d7:93:33:fd:6f:03:cc:1b:6a:3a:
7b:5e:f3:3a:0a:97:06:78:54:59:86:b0:33:92:58:d2:c9:12:
f3:ee:1e:31:50:f8:47:20:87:7a:27:70:bf:4f:da:96:7d:e4:
3d:e4:c1:4f:1c:9a:7d:e8:bd:2c:63:fb:e2:c4:88:f3:85:93:
e8:08:71:b3:06:05:ca:62:41:14:8c:43:a0:dd:61:53:2b:22:
d9:02:71:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:13:38 2025 by rpki-client