Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: WJ89/YAm7559WIKAmw+N7q0x1+O1py7SkpafaSCzsXE=
Subject key identifier: 85:19:F5:A9:32:98:9E:29:22:BA:07:83:F0:D8:F6:18:63:9E:EA:27
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 019748FA63F4AA7D35E53D38EA0BFE298265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 06:00:58 +0000
Manifest this update: Sat 07 Jun 2025 06:00:58 +0000
Manifest next update: Sun 08 Jun 2025 06:00:58 +0000
Files and hashes: 1: AwF9Po4WusYXHbCN28Vi4N0vdXM.roa (hash: BrxeSv8ZT8qhQ9aNAuI1FMulPWTfztWj80JkUewf8Ps=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: TfmwpiD4p+PdW1aj2HTE3US6EqGns63jxXnL9MO0jS4=)
3: jsLjY2Dc2S2O7jwfLML6nOsBS0o.roa (hash: /a3bkiLEbNmaSUeq8MEDshih5vZMuYoOiChrBF9mx2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:63:f4:aa:7d:35:e5:3d:38:ea:0b:fe:29:82:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Jun 7 06:00:58 2025 GMT
Not After : Jun 8 06:00:58 2025 GMT
Subject: CN=8519f5a932989e2922ba0783f0d8f618639eea27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4e:95:61:43:dd:b0:22:e5:5f:2f:4c:06:78:
b1:77:91:71:68:a2:03:4c:7c:df:fc:17:33:d0:4e:
ef:3a:4a:3e:cc:aa:ef:ee:c4:a2:8b:8f:82:a3:ab:
42:ae:cb:65:9f:49:4f:86:45:78:61:be:d6:65:e3:
8b:f5:c3:f0:0c:82:f5:b2:9e:39:e1:9f:94:35:92:
7c:2c:36:86:97:2f:5a:4b:9f:69:f3:23:b3:b4:07:
04:7d:b3:11:51:96:84:c3:a0:36:22:b0:39:7c:b8:
44:c4:54:d9:56:17:21:ca:2a:0d:d6:0c:d5:0b:82:
61:ac:6f:bb:d4:9b:eb:c3:59:4c:d0:8e:41:ed:23:
73:10:1c:9a:e7:82:ea:5f:46:22:aa:46:6a:9d:c5:
de:8f:a8:c6:22:ae:da:ea:37:08:57:e4:88:71:a0:
ae:f9:9b:9b:11:89:78:62:76:d7:a2:60:82:fe:ad:
34:d1:0c:d6:10:45:0c:1f:8b:27:e2:64:4a:07:db:
69:10:44:c9:d6:a6:5e:7b:12:1e:f7:88:bf:58:a4:
1e:97:0d:39:03:ab:d5:23:1d:0d:04:83:f8:01:d6:
fd:90:38:b9:3c:23:86:39:e2:d3:33:7f:64:8a:c5:
02:dc:ae:d4:5b:76:cf:d6:b6:62:99:22:d1:71:9a:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:19:F5:A9:32:98:9E:29:22:BA:07:83:F0:D8:F6:18:63:9E:EA:27
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:fc:c6:3e:e0:f4:d2:98:ed:8a:4b:b8:73:79:a0:e1:ef:70:
55:c2:4c:fe:ca:31:5d:f1:73:0a:66:5f:0b:8b:3b:38:13:ad:
cf:90:b3:c1:80:80:81:30:29:f6:dc:f0:8b:f5:94:0b:bd:c5:
bb:09:3e:63:d3:21:c7:1c:57:5f:b5:0c:9c:de:49:d4:64:c9:
3d:d1:78:ba:65:d6:2d:47:e3:c4:9d:59:ee:a7:02:3b:e1:9e:
b4:f7:72:d0:36:8f:42:65:9b:b0:68:43:79:da:f7:87:07:d6:
98:91:59:d7:50:47:d1:3a:dd:f5:5a:90:dd:18:89:4c:7c:11:
86:c1:b1:23:97:0d:2c:21:f6:43:01:4f:50:1e:b0:fd:9b:49:
1e:2d:d7:05:1c:60:94:72:b3:79:60:44:2a:5d:6b:cc:bd:fc:
da:72:0b:7f:d8:da:16:00:95:4c:ed:91:52:7d:3b:02:29:90:
ab:29:32:03:5a:28:eb:79:37:13:a1:5c:d0:13:09:b7:bb:83:
f9:b4:39:ee:af:48:2e:be:c7:a9:80:d3:7f:8f:29:a7:ac:9e:
77:bc:fc:b6:66:93:e7:24:89:5d:79:b6:43:ad:c7:ce:6a:39:
26:ff:58:2b:98:f3:75:6b:fa:d6:33:3a:f5:71:64:d0:83:53:
0f:e2:9d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:39 2025 by rpki-client