Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: 6S9RpP2Iwg8z/lkRZhhY1uJ+GCTK1obekJwb8G8UXMw=
Subject key identifier: BE:A2:AD:37:D3:1F:A5:FA:00:E8:CF:B9:8D:5C:F8:4D:4A:D5:BC:88
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 019749313F6D3843845D11741DDBF8C12231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 1356
Signing time: Sat 07 Jun 2025 07:00:53 +0000
Manifest this update: Sat 07 Jun 2025 07:00:53 +0000
Manifest next update: Sun 08 Jun 2025 07:00:53 +0000
Files and hashes: 1: 1-odAb-HXEiGLPx5y_PADnZMBf0g.roa (hash: 4z0B6lGqXvXr1EDmabK3iy+SlaX1WPh7Y1Hx0zBd0iM=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: ES0Kb3Tpuw9N8pPGM5mwdykJXgUIjlKEe4SIHu6Tzio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:3f:6d:38:43:84:5d:11:74:1d:db:f8:c1:22:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Jun 7 07:00:53 2025 GMT
Not After : Jun 8 07:00:53 2025 GMT
Subject: CN=bea2ad37d31fa5fa00e8cfb98d5cf84d4ad5bc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ec:f0:bb:1d:29:52:f5:12:52:b8:8c:b8:ff:
ff:62:7d:63:81:bd:0a:d6:7a:06:93:7e:02:1a:ff:
2d:fe:a3:52:3e:9b:cf:5c:8a:e4:45:fc:39:ac:b9:
02:95:c6:c0:1a:9d:b9:65:3b:39:98:50:a2:f0:34:
f4:27:8a:77:48:5a:40:56:2f:04:39:53:f3:41:18:
02:06:8d:fa:6d:e0:f0:46:84:35:42:f8:9d:25:88:
a8:37:a5:00:93:50:54:25:14:1b:97:8c:86:32:a3:
fd:eb:94:77:cd:c7:ba:5a:2a:77:77:db:fe:f2:56:
db:3b:ad:5a:17:06:9d:04:fe:00:8a:4d:fd:62:d2:
7f:c5:b6:84:b2:4a:9f:0e:bc:f7:bd:ee:7f:f1:7f:
0c:bc:54:c2:20:4a:a8:85:50:8f:ab:7f:05:9f:d2:
ed:ba:d5:9b:5b:95:a6:4c:95:ba:1a:b4:8e:ba:5f:
82:58:83:e3:6f:78:a3:2f:43:f3:74:61:01:e0:e6:
47:15:08:c3:61:a8:18:8e:16:26:57:b6:66:d5:0f:
f2:bc:7e:2d:b8:11:44:04:fb:24:2f:15:85:53:6d:
d9:61:c0:e8:a2:d1:6c:71:51:93:61:35:fd:3a:eb:
63:5b:07:7c:be:30:74:60:81:5c:43:15:e2:a2:90:
78:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A2:AD:37:D3:1F:A5:FA:00:E8:CF:B9:8D:5C:F8:4D:4A:D5:BC:88
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d9:d8:19:0a:d7:37:11:8d:8e:12:54:5d:7b:ab:ed:e7:58:
a9:fb:94:fa:eb:70:02:9f:e4:6d:4f:40:97:8f:d5:82:c1:a5:
f1:08:85:9a:a4:33:8b:03:54:b0:22:2e:19:3c:eb:09:b2:f7:
f2:6d:ed:32:c8:76:19:cb:10:59:df:09:fe:2a:67:34:4c:8b:
ce:81:5a:de:32:2b:e9:a8:59:39:b3:06:43:05:a8:37:1a:33:
65:6a:bb:fd:95:d5:b3:96:cb:ec:ae:e0:2d:53:92:50:cf:74:
c7:db:2d:57:3b:fa:55:b6:50:b5:b3:a9:95:2c:ad:c6:05:8c:
31:f5:fa:c0:07:ec:38:ef:aa:83:46:05:8a:be:dd:6d:23:f6:
41:0f:c6:ca:ea:22:db:a1:8f:1a:33:bc:51:94:75:ed:62:0f:
bc:73:b5:21:74:35:53:de:c6:79:72:d2:68:2e:da:94:cb:0a:
00:b5:06:cc:e8:38:d3:30:58:9d:e5:fb:5c:23:09:7d:96:a3:
78:12:35:b0:8d:32:68:1d:e1:d8:1e:04:43:95:1a:1f:2f:02:
d8:9c:56:06:b4:da:10:81:01:83:b0:ff:a1:2f:b5:1a:82:b0:
41:35:50:69:78:76:20:b0:84:b9:69:dc:12:e6:77:5b:fc:d6:
fd:b0:d9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:39:45 2025 by rpki-client