Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
File: XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft (raw, json)
Hash identifier: fVH1TBV16HSU97X9OV+Ie9yslvNNuGb1fyGsfG4ocbo=
Subject key identifier: 62:6B:87:E4:8B:0D:28:9C:39:C5:DC:D4:50:6E:53:17:BE:E5:0B:1A
Authority key identifier: 5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61
Certificate issuer: /CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
Certificate serial: 019748F9FD4D2247E61E3CA9507979B4AC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
Manifest number: 1017
Signing time: Sat 07 Jun 2025 06:00:32 +0000
Manifest this update: Sat 07 Jun 2025 06:00:32 +0000
Manifest next update: Sun 08 Jun 2025 06:00:32 +0000
Files and hashes: 1: Cla5c1NehU4owZxYbWxe5QAstj0.roa (hash: kJV6jFD/Rf8rBVTNLGsW3TqMX9jv4tuD1CIR8TuTHbQ=)
2: XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl (hash: 6w3JYOP6wg+dx+vaV1glFXP9Fe3Xlk5gTSWmuWCu3ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:fd:4d:22:47:e6:1e:3c:a9:50:79:79:b4:ac:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
Validity
Not Before: Jun 7 06:00:32 2025 GMT
Not After : Jun 8 06:00:32 2025 GMT
Subject: CN=626b87e48b0d289c39c5dcd4506e5317bee50b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:16:4f:9e:5c:5c:e4:d2:60:e8:11:5b:85:
56:d2:ff:55:d4:bb:6a:e4:d1:a5:60:1d:bc:64:ce:
0f:49:89:54:64:a5:cf:e9:32:92:61:ea:e5:81:d5:
2b:11:ee:1a:f8:ff:4b:3e:e4:5c:95:89:07:a4:17:
ba:60:7f:45:68:e8:7e:c3:c6:50:57:00:fb:a3:f4:
03:47:f4:25:e5:51:e8:7e:a5:e9:06:6b:7f:37:2c:
e0:48:e3:52:34:8f:fd:8b:2c:a4:ac:8a:84:72:d6:
08:8c:5f:66:a1:ba:b9:78:0c:18:62:53:f9:ad:3f:
cd:91:98:b7:e9:1e:46:09:ed:b1:0a:c9:e4:8f:43:
d7:8f:77:2f:6e:00:b9:3d:6e:70:1f:63:23:43:d1:
da:df:6f:e4:7c:34:7a:68:a8:44:53:7d:17:f1:52:
fa:8c:cb:ee:48:4a:4c:30:19:f2:d9:dd:77:60:0f:
74:02:b3:71:30:f2:cd:01:5e:6e:2b:57:16:56:5c:
86:ef:13:9f:74:38:9d:a2:9d:7e:25:78:32:a7:15:
63:dd:53:ef:66:0e:a2:69:2c:48:ed:2c:04:f6:29:
44:f9:59:58:43:f0:41:02:94:01:24:c0:e5:10:f7:
d0:98:4a:91:4d:8c:b6:04:6a:e2:78:44:31:33:e1:
49:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6B:87:E4:8B:0D:28:9C:39:C5:DC:D4:50:6E:53:17:BE:E5:0B:1A
X509v3 Authority Key Identifier:
keyid:5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e2:5b:96:ad:ad:6e:7f:b0:06:b1:b5:23:ed:fe:a0:6c:25:
22:4d:f5:6c:4b:65:bb:a0:d9:c7:aa:e7:d3:a2:2a:23:d4:39:
80:99:31:2a:3f:e4:48:ce:50:21:1e:85:76:bf:7f:d9:d2:38:
dd:2a:1c:1c:05:cc:ae:bc:35:6e:ef:b7:56:d4:f2:b4:ca:09:
43:db:bb:45:56:ab:bb:c8:de:4a:db:ba:e9:c1:8f:ac:b2:7e:
42:52:80:27:92:e6:58:ef:3e:2c:60:1c:25:b9:92:12:3f:9e:
94:9a:c0:92:0d:30:c0:5c:c5:8c:06:f8:ed:74:dc:15:c8:1c:
2e:86:a8:bd:a4:ab:11:eb:83:e3:b7:81:33:17:9d:06:b2:14:
6d:60:fb:f2:72:bc:d3:ef:94:c2:59:33:fa:1e:ca:63:eb:77:
a9:db:c0:1b:01:5d:70:ee:ab:03:6a:87:48:69:91:5f:10:a4:
13:22:bb:b2:59:a3:1e:00:90:6f:52:a4:0a:26:f9:ca:db:0e:
7e:92:89:c5:4b:9b:0a:ed:14:cd:18:af:ad:73:46:a1:01:06:
b3:a4:44:c1:d0:f2:e7:a6:c6:3f:5d:38:de:3c:e3:84:f2:c6:
9d:f4:1f:cb:c0:1c:55:73:49:55:b3:f4:d0:e9:b2:22:f2:3d:
36:c9:19:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:02:53 2025 by rpki-client