Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
File: rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft (raw, json)
Hash identifier: y7FNJZRBRe9kqtyRP6AG/+H2tK0YGNEFgEAhY6RsodM=
Subject key identifier: 09:B6:CC:E7:6F:14:B7:33:A3:F8:3C:18:0C:3D:58:F4:82:95:35:C4
Authority key identifier: AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
Certificate issuer: /CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Certificate serial: 019745C24714EA56604FDFDC9AE0D14ED2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
Manifest number: 1171
Signing time: Fri 06 Jun 2025 15:00:49 +0000
Manifest this update: Fri 06 Jun 2025 15:00:49 +0000
Manifest next update: Sat 07 Jun 2025 15:00:49 +0000
Files and hashes: 1: 0_n0dJGdGPC54n6Su3XhjRpEGaE.roa (hash: ecsdCD7tgZtKRsUvKu336lhnysfVM1v2m6QNHH0P3gg=)
2: rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl (hash: e9OOgnk1VtmyITyb2z6Nf4Kt4aif2aW/Tr0mcNgcios=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:47:14:ea:56:60:4f:df:dc:9a:e0:d1:4e:d2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Validity
Not Before: Jun 6 15:00:49 2025 GMT
Not After : Jun 7 15:00:49 2025 GMT
Subject: CN=09b6cce76f14b733a3f83c180c3d58f4829535c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b9:33:1b:92:dd:a2:69:d5:6c:62:d4:bd:66:
82:c0:74:e1:36:25:01:e1:cc:56:dd:2f:d7:bb:12:
8b:aa:a1:38:b2:d4:ce:1d:5f:53:9b:fb:8e:f0:c0:
de:99:c5:27:96:b7:c5:63:a9:60:95:6b:4b:dc:d2:
c7:86:b2:3d:54:5d:cc:8d:bc:c6:80:e5:50:ec:d0:
bb:34:77:d1:b0:bf:b2:a0:2f:53:2d:50:c0:8f:3c:
2b:25:f8:0f:d0:74:64:29:fa:5c:58:ed:cd:58:83:
9f:9c:83:d0:6c:28:33:7e:3b:e8:dc:9e:e3:0c:d8:
fd:24:37:41:e5:1e:44:74:f7:dc:21:df:b6:64:f1:
89:69:7e:ba:82:e4:b1:cc:48:e9:7b:73:91:ce:e6:
be:ec:77:37:bb:1f:49:57:c3:5e:76:84:49:69:ad:
02:40:85:5d:a3:6c:ad:91:49:77:0d:3b:8b:6b:19:
b9:19:2e:1f:46:ab:2a:5e:e8:7d:19:a3:4f:c7:5d:
f9:3b:b2:47:84:4c:9d:55:8b:7b:99:50:aa:30:8c:
e5:02:27:2d:a7:25:f4:5f:6c:4b:be:92:d1:65:45:
71:f1:3b:82:3c:aa:e5:9d:02:f0:60:a0:18:43:2a:
7f:c5:e1:a1:83:e2:59:b4:b9:14:1a:9c:72:b7:1c:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B6:CC:E7:6F:14:B7:33:A3:F8:3C:18:0C:3D:58:F4:82:95:35:C4
X509v3 Authority Key Identifier:
keyid:AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a3:53:74:01:b6:41:26:90:d3:4e:6e:43:c7:e7:6e:49:8d:
4f:98:3b:92:6b:36:82:9d:bd:59:9f:0f:37:7f:72:f7:07:80:
91:14:f9:56:c4:9b:c5:bb:bf:9a:c6:e6:9d:a5:c8:b2:73:e7:
d3:66:e4:db:fb:d3:2f:b5:3f:5b:90:91:86:80:93:e3:a4:7b:
3e:a9:7b:5a:3a:84:b9:6c:1c:ad:06:80:0b:d6:46:30:1b:9e:
d2:6c:97:48:b8:54:22:c0:28:77:5a:4c:3b:26:60:4f:7c:04:
b9:a6:13:89:60:b0:1d:33:39:6a:2e:d0:67:ff:6b:42:e1:4e:
b0:a7:31:86:e0:11:67:d4:99:74:c5:0d:4a:b8:2f:13:46:78:
54:79:c0:b8:4d:02:6b:ed:95:d2:48:3a:20:42:b2:90:c8:cd:
a9:ba:24:42:fc:51:35:f4:7d:b6:14:8f:05:e5:f7:e1:22:09:
58:8f:78:78:23:3c:02:c8:ca:1e:a8:d1:d8:82:b8:31:c0:3c:
46:46:ce:3d:44:c6:84:ae:3a:78:d6:cc:a5:f1:a6:ca:94:ef:
68:43:ef:c4:d8:9b:88:e6:33:16:b0:91:5a:aa:0b:e2:26:e0:
83:fd:7d:59:79:18:75:9b:c5:73:45:17:a0:92:eb:26:95:f5:
cd:68:05:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:02 2025 by rpki-client