Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
File: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft (raw, json)
Hash identifier: 5lz48fK0lCkTNOhhUNVhgn24vx5MtvtU99NAKqQCGZY=
Subject key identifier: F7:2A:8E:07:68:9B:4C:36:93:FE:EC:67:0D:F6:A7:E2:E4:54:CD:61
Authority key identifier: 5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
Certificate issuer: /CN=5f2be62be753ba9929355b4ce988bae12af7272a
Certificate serial: 01974A43EF9961311936B11BA35C166D9001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
Manifest number: 04D5
Signing time: Sat 07 Jun 2025 12:00:55 +0000
Manifest this update: Sat 07 Jun 2025 12:00:55 +0000
Manifest next update: Sun 08 Jun 2025 12:00:55 +0000
Files and hashes: 1: ESLl-bZ97LqqEu-5c2cw2-HWsjE.roa (hash: Jxh/Q8xcc0uLDf1/zXrtw9NWQZKR5wMyKpRis33JWsQ=)
2: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl (hash: ELcyyebYAL3guXKZxmkZO6SpheTmzZFZ79TOWW4fITc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:ef:99:61:31:19:36:b1:1b:a3:5c:16:6d:90:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2be62be753ba9929355b4ce988bae12af7272a
Validity
Not Before: Jun 7 12:00:55 2025 GMT
Not After : Jun 8 12:00:55 2025 GMT
Subject: CN=f72a8e07689b4c3693feec670df6a7e2e454cd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:41:04:45:50:e9:fe:11:48:7a:e1:81:9f:c8:
4f:e6:15:9a:44:ee:29:c0:1d:ae:7f:c3:9c:7f:1d:
15:af:0f:68:c4:c9:d2:ee:9d:ad:ab:28:30:c9:2c:
82:37:22:3f:b3:4e:38:42:46:89:eb:91:b1:d8:cb:
a2:b0:46:53:79:d3:25:1b:ed:a7:1c:f1:e1:69:e2:
9f:fa:38:09:f0:12:29:86:11:4d:d1:7c:f9:ee:1a:
41:90:2d:c0:7d:6f:5a:ec:de:62:ae:d7:de:25:82:
2c:95:50:8e:37:2e:27:01:e6:0e:b3:af:78:d4:11:
42:fb:7a:f5:f3:39:5e:cd:f1:d1:c9:b1:2d:2f:13:
20:99:59:52:79:a7:c6:90:df:e1:bf:b4:46:4b:a2:
b6:29:c1:2e:f1:e9:c6:2e:de:c1:d6:00:24:b6:fe:
77:55:89:e2:9d:c5:c8:45:cd:de:a3:75:8b:d8:8f:
a7:64:f6:2b:8c:a0:0f:d8:90:76:ce:19:45:96:61:
65:0f:88:c8:c9:c4:59:f6:07:db:e5:f3:5d:14:55:
92:98:18:bd:59:46:3c:0c:30:82:39:94:98:72:9a:
01:4a:9d:c3:71:9d:1f:c9:4c:19:65:45:29:d3:86:
59:3f:e7:a2:22:f5:0f:51:a8:43:5e:cd:76:fc:ef:
97:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2A:8E:07:68:9B:4C:36:93:FE:EC:67:0D:F6:A7:E2:E4:54:CD:61
X509v3 Authority Key Identifier:
keyid:5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:61:04:e3:37:22:80:25:fc:46:4f:1f:40:fb:c9:16:0a:dc:
d9:68:d2:68:02:0b:30:b8:df:ab:5c:4a:36:90:c0:ed:14:b4:
17:d5:14:1e:c1:75:af:ca:aa:3f:55:9c:58:41:03:ad:76:c6:
b7:9f:a8:b0:cb:2c:00:d2:01:ea:f7:d1:c3:80:a7:56:84:2e:
cc:4d:1d:df:53:2d:2f:9b:b2:f6:43:a5:bd:b2:13:38:64:e2:
f4:9f:5c:66:65:64:1a:79:ce:7e:0e:01:4a:b9:75:df:b2:e2:
62:a7:5f:dd:a4:be:65:8d:11:d8:ad:fa:9d:f8:3e:f0:61:a1:
ad:2a:d5:54:45:22:95:33:dc:94:1d:0f:f0:e4:b3:3d:c6:26:
c0:02:ed:6a:f2:20:fa:f0:fc:f2:37:ec:98:27:63:1b:c6:39:
00:d9:bd:f1:38:1a:a3:1e:fe:0c:cd:18:60:b1:51:fa:11:d1:
e7:66:f6:ea:aa:2d:db:1b:3f:c9:0b:c1:6a:a8:c5:54:0d:01:
78:18:04:01:af:a3:20:b0:d7:69:ec:59:85:16:e8:d6:85:a7:
41:3f:eb:6d:67:e2:c3:dd:bf:13:c0:44:ce:90:35:47:06:06:
e6:30:ac:84:64:6a:c2:da:44:c4:6e:7a:56:c0:fd:08:6d:7e:
45:c7:7c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:52:05 2025 by rpki-client