Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
File: X5PadXwX_jig5s1wJ1xzyMaciW4.mft (raw, json)
Hash identifier: 3OBLQq8nNPcYlR89udUcDTdQG2GsWv7t8y4fx5ea7Eo=
Subject key identifier: 7A:26:30:3E:0F:5D:D8:41:A0:45:A4:58:9A:59:E8:3D:BA:AB:06:63
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Certificate issuer: /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial: 01974BC41BAE92B692B601BCF0C52D744E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
Manifest number: 0949
Signing time: Sat 07 Jun 2025 19:00:32 +0000
Manifest this update: Sat 07 Jun 2025 19:00:32 +0000
Manifest next update: Sun 08 Jun 2025 19:00:32 +0000
Files and hashes: 1: FFbUWYwdC98UV9f9LgiYYBOYjz4.roa (hash: qHQMRtEIE6PEk6OgWACfwNz50T8j2hZuZAIlDNeAQBs=)
2: X5PadXwX_jig5s1wJ1xzyMaciW4.crl (hash: QETIkJhDKRJP8/xlnUGwy52mK9IEK2PPFJf2LJqx9jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:1b:ae:92:b6:92:b6:01:bc:f0:c5:2d:74:4e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Validity
Not Before: Jun 7 19:00:32 2025 GMT
Not After : Jun 8 19:00:32 2025 GMT
Subject: CN=7a26303e0f5dd841a045a4589a59e83dbaab0663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:3f:52:34:c0:2e:03:5e:46:8a:9b:6c:02:
8f:86:b2:77:de:89:b8:eb:83:fe:7c:84:21:9b:12:
03:31:c0:93:0b:5d:68:5a:e0:d3:1f:2b:2e:e9:0f:
55:ef:b8:b9:23:75:f5:a7:53:9c:53:26:ee:f1:c1:
8f:32:90:4d:ed:42:65:d0:c7:40:14:df:a8:8b:1f:
dc:35:4f:b8:5f:80:e6:d4:06:94:7d:20:d0:81:f7:
ab:bf:4d:fc:34:a4:e2:5f:b8:f2:e3:84:10:f6:3a:
2a:08:35:f1:79:6d:75:45:0a:37:40:2c:e6:78:e8:
df:81:06:21:36:93:7a:a0:7a:09:6e:59:35:84:9a:
2e:cf:bc:7a:99:a2:f2:2d:e8:c0:30:64:d0:93:8b:
86:f9:64:37:3a:33:c0:b6:82:19:34:4b:8c:eb:d9:
4a:bf:25:63:e3:a6:95:7a:43:a5:06:89:e4:1f:75:
b8:ab:3a:45:e9:16:27:78:08:d3:79:ee:26:2a:1c:
2a:04:1c:b7:fb:a2:6d:35:27:67:2f:a0:4a:6f:62:
5a:e9:94:58:86:c8:98:ae:71:c1:1f:a7:59:4d:c1:
06:04:33:5d:db:d5:b7:71:4c:3a:51:54:7f:ee:9b:
02:e1:bf:5b:c4:d8:0f:6e:f2:12:86:6b:6b:a0:4d:
90:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:26:30:3E:0F:5D:D8:41:A0:45:A4:58:9A:59:E8:3D:BA:AB:06:63
X509v3 Authority Key Identifier:
keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d1:d7:11:1e:66:49:bd:9c:ca:80:a8:1a:46:79:4f:5c:59:
66:67:a3:dc:b6:e5:e8:d8:70:5f:b5:b4:c4:87:23:80:ae:91:
2c:6f:4e:6b:45:07:33:8a:aa:23:6e:6f:e7:cc:62:da:ec:79:
9e:79:2f:7d:78:69:0f:a0:49:2d:b5:ae:18:be:ff:f9:48:64:
d1:19:84:42:07:08:e7:d5:71:f9:90:ca:4f:86:57:a1:cb:0c:
5b:66:a4:7d:60:80:f8:d5:c0:54:c6:15:3a:b1:fb:09:ef:f7:
87:b7:d4:1c:66:bf:ab:05:c8:75:f3:3c:66:77:ec:7a:b7:c7:
4f:cf:bf:01:56:8b:02:8f:a7:91:9b:04:8e:97:18:2e:55:ee:
a6:7d:46:50:9f:35:92:0a:48:21:e7:f2:c2:8a:9f:f6:90:a2:
f1:27:d3:bc:3b:60:f3:87:a4:41:2a:0f:09:71:02:55:a6:70:
39:54:12:c4:c0:d3:aa:83:b8:d6:3c:f2:18:d3:c9:7b:14:e9:
ef:60:be:be:c9:f9:f4:50:55:19:aa:1a:ae:5c:44:41:2b:9e:
6b:5b:e3:96:f9:be:18:09:72:63:aa:fa:6b:9c:a7:b5:92:ca:
50:53:71:5c:42:df:8e:2f:19:e1:c1:44:14:95:a9:2f:dd:e1:
42:5f:fd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:30:35 2025 by rpki-client