Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: Vxb0dD2ds0kyMkLCcHoobku9hWFhEXQK8Qbujy/iblc=
Subject key identifier: 0D:E4:0D:E4:3B:DB:B5:9C:3E:CA:04:F8:1A:DB:FD:FD:1A:94:FB:7D
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 01974A7AF4021D4EFE81BB91D7B29A0CF3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 0913
Signing time: Sat 07 Jun 2025 13:01:01 +0000
Manifest this update: Sat 07 Jun 2025 13:01:01 +0000
Manifest next update: Sun 08 Jun 2025 13:01:01 +0000
Files and hashes: 1: Jg_jfBjHb0Vu6fkwZ37mMS91qI4.roa (hash: TfhNhqloOoAsI4fDNQ7bFxjaWUIihAJVfn4SJGIonjE=)
2: RAYhGqxG90i3Xl4IbOmBMXLaWWU.roa (hash: PkL3yCHqeCepv6d1R3k2egY2vgT3zl8lcQ+M9WOKBkE=)
3: WhuuzI-giOvU0WJGmRMWrjSlbX0.roa (hash: sWWRUBfHkfBvOOVFSvoXP3yUbe11I9qeTgURb62iypo=)
4: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: ZFGj2LMDGVRqXgcBJfO/UKRzzDHrQUYzUiHYvADH8tg=)
5: cu8YZEomM6yhTT6rKGZD0EswcrA.roa (hash: E+q2Kh42Kr16IAejR3Z8uLwJmIfrudkWS/YgHicEZAY=)
6: shFSKFhffIiUAgxysGmRtXRHjKM.roa (hash: dQvH9QymMjpXXdgyrmMvhjbB83wD/WfhP9dhFWk+qZg=)
7: syw_ZhTYU1w7NStTQl6XEtYJ7iw.roa (hash: vh0bYcr2sbcc1SgjyRRRbNDSidOSKXW4Nng93TqNAKw=)
8: ycVnM1zp10CMEnPemmwHq5Kmb7k.roa (hash: X47wni4QutejMcFMTFg2gNEEKNeesZr+QmIkUicE1Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:f4:02:1d:4e:fe:81:bb:91:d7:b2:9a:0c:f3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Jun 7 13:01:01 2025 GMT
Not After : Jun 8 13:01:01 2025 GMT
Subject: CN=0de40de43bdbb59c3eca04f81adbfdfd1a94fb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:c3:94:0b:b2:8e:22:36:ab:e8:2b:dd:03:
59:48:fa:c3:6c:86:2a:39:fb:ef:ba:46:83:3f:78:
75:e4:ab:ef:48:76:d3:e1:71:e1:41:12:89:b7:35:
98:1a:ec:e3:b1:38:9f:3c:29:df:be:ca:72:50:98:
f5:9e:cd:9c:93:41:a5:6a:40:bf:5d:5e:cf:f9:0c:
13:b5:15:4f:49:38:6d:29:22:8d:65:e3:0f:14:95:
96:1e:a5:a8:8e:d4:0b:cb:17:cc:dd:ec:c3:73:8d:
cd:0d:33:7c:18:ab:6c:a1:88:67:73:9b:e7:5d:7f:
28:79:98:93:bd:14:9a:03:6e:2d:f0:e2:33:eb:d5:
4e:bf:6b:ae:3a:26:62:0c:8e:da:83:81:3b:99:6a:
5f:ae:9d:72:49:a8:b9:84:a3:0d:ff:0a:6f:3a:29:
d8:10:29:a4:d8:5a:a7:5c:62:d5:5c:d6:04:8c:d4:
3e:4b:df:c1:03:ba:6e:56:4a:50:d9:00:aa:9f:62:
56:0f:a5:4f:78:64:ce:43:e5:c9:7a:3b:c2:c3:81:
28:c4:74:cf:d7:e7:59:2c:a5:78:cb:d0:0b:82:7b:
32:e7:ba:7a:f9:ad:45:36:03:1f:94:61:20:b0:3f:
56:f6:71:34:b3:19:8d:66:84:45:3f:a0:27:0d:6a:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E4:0D:E4:3B:DB:B5:9C:3E:CA:04:F8:1A:DB:FD:FD:1A:94:FB:7D
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:cb:e4:58:32:46:d6:0b:4f:69:d5:70:28:0c:3c:10:c0:7d:
4a:97:51:4f:fa:0d:21:13:3c:e2:a5:e2:91:40:84:45:47:f0:
42:d8:21:05:b8:16:2b:eb:71:8e:2e:fe:78:96:de:3c:13:e3:
62:0f:c2:27:b0:dd:6c:1f:37:cf:fa:2f:72:79:48:62:26:bf:
cc:03:84:10:b4:b7:f7:ac:1b:04:70:b3:ef:e1:da:31:a0:a9:
04:7c:b7:47:3d:7e:e1:b9:0e:64:ef:92:0d:11:82:56:51:e4:
89:af:ac:20:f6:f1:54:fb:23:d1:74:29:87:86:6f:c4:b9:8a:
32:ab:5e:61:fa:61:7a:d8:9e:95:be:59:63:c4:08:6b:f5:68:
75:63:09:10:8d:71:ef:d5:29:e1:d0:1c:5f:ef:22:f6:b0:40:
6b:f4:a1:b1:33:7b:6f:02:39:76:ee:9b:48:2b:72:85:00:9b:
86:5f:f5:a0:e3:ff:32:96:98:8b:e2:5f:40:47:61:39:a5:ca:
0d:82:9b:af:d7:87:b2:e5:e1:f9:29:38:00:9c:5d:b2:7a:a3:
96:6b:5b:90:39:47:9b:de:ca:c4:a1:6f:b4:6e:e2:49:47:4d:
0b:ff:6c:97:1e:d8:fd:fd:24:1e:82:4f:13:5c:fc:c9:1f:54:
3b:53:ee:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:27:04 2025 by rpki-client