Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: V9+YVJLZDnirhuC7557626a1YK8EFMnqRPr4wWFz+Ds=
Subject key identifier: D0:2E:BE:07:33:69:88:8C:5C:D5:21:61:63:B3:2A:A8:2C:90:BF:8A
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 01975158783443FC9BD030D9335D74DF1DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 030C
Signing time: Sun 08 Jun 2025 21:00:41 +0000
Manifest this update: Sun 08 Jun 2025 21:00:41 +0000
Manifest next update: Mon 09 Jun 2025 21:00:41 +0000
Files and hashes: 1: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: CHFgJMyBslLcNq8f2ZGCY5fpBLZlVOiTazRyYTxa5GQ=)
2: ZAeLAjytL7R3eCxSRuoyHN6_7mw.roa (hash: fwgZ3FgELKfh9d5JZWpb+7kZ9OlNjMIWIM8CDC2wbXE=)
3: sS98ShuiZY9gamFcZrqcbFzjMbs.roa (hash: BxhyjLfYrjzjXEBjZnGso78ZHOLYRxMopWgqZ0QBVko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:78:34:43:fc:9b:d0:30:d9:33:5d:74:df:1d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Jun 8 21:00:41 2025 GMT
Not After : Jun 9 21:00:41 2025 GMT
Subject: CN=d02ebe073369888c5cd5216163b32aa82c90bf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:af:d4:c6:ba:4d:07:83:7d:8b:08:1c:7c:
d2:23:fb:6c:79:f1:9a:a4:02:b3:24:5e:6a:10:95:
c1:8b:b5:67:61:1a:9d:ae:5f:33:2a:e6:f8:85:35:
a0:29:4e:32:c9:89:df:47:6d:d7:7b:02:34:70:47:
bf:ca:fc:c9:28:16:30:ca:4c:82:20:b6:73:0c:fc:
b2:36:99:1e:07:be:59:b0:91:cc:3a:81:7a:2e:1a:
aa:f2:a9:ad:c5:0d:d5:aa:0d:e7:76:b0:53:9d:39:
bf:aa:73:32:da:83:7d:69:6b:fd:da:37:cd:71:a0:
5f:10:66:b1:8e:66:ce:e4:eb:2c:69:3b:c1:2a:59:
a0:0c:85:64:88:a7:d3:f3:07:d7:f0:40:57:13:dc:
fe:7f:ba:85:d0:31:3f:bf:17:bd:db:de:81:15:30:
a9:70:05:df:f3:e6:1f:f4:cf:ad:b2:cb:46:90:ef:
53:e0:c9:60:cf:e8:50:c6:e6:1f:6b:5d:29:a9:88:
9e:ad:68:fc:9f:e6:f2:c2:ec:64:34:8d:16:1c:6b:
b3:d3:9b:3c:96:1d:bb:d2:3c:e3:51:98:2c:1f:d0:
e9:75:70:69:2b:fa:a2:2a:c3:72:86:77:c5:50:b8:
7e:6e:22:2f:94:86:78:ee:dd:f5:0f:f7:ab:28:cb:
44:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2E:BE:07:33:69:88:8C:5C:D5:21:61:63:B3:2A:A8:2C:90:BF:8A
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2b:e1:91:7f:0a:07:46:66:f7:2f:cf:d8:d4:b4:03:36:61:
ca:3c:7c:a0:36:bb:b2:fd:2a:0f:76:0f:62:c0:20:75:e9:c8:
cf:d5:af:1d:f9:2f:c8:b6:81:96:70:38:03:a1:18:0c:bf:04:
03:9a:62:8a:d3:b9:1e:09:35:ba:99:f3:1c:6c:1f:5f:63:7c:
78:b8:b1:78:9e:62:e7:13:ad:3f:d9:d2:55:74:5b:9d:4d:c7:
24:f3:63:9d:86:c8:71:54:61:c3:99:47:30:e4:c4:54:da:fa:
52:e6:6f:9d:c1:fa:d1:90:03:5a:4e:44:4b:4f:a4:6b:8a:06:
d7:ba:0f:b6:80:85:c7:95:41:98:36:ba:b1:c1:dc:4b:ec:e5:
ea:07:5a:90:e2:37:cf:69:8c:1f:59:94:a3:08:30:3f:37:76:
bb:90:09:71:f4:09:53:59:95:50:51:27:ad:ad:3b:5a:87:64:
95:b8:2c:70:b2:f2:e1:18:59:a1:86:f4:37:74:89:df:7f:f2:
de:bf:d7:a6:93:6f:8a:a3:dc:00:57:42:f4:5b:13:ff:84:e4:
df:7d:67:1d:c5:e1:24:c1:2c:2d:2d:69:eb:9e:53:99:40:56:
65:4f:03:5e:14:f0:28:d3:09:e6:bc:24:79:1f:1a:10:02:d5:
91:4f:76:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:42:08 2025 by rpki-client