Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
File: XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json)
Hash identifier: NOsin4/HH6V20VkYJEWnZvI8J1CgnGbo4Sk5bmIIgNc=
Subject key identifier: 2A:DF:6B:A0:E5:89:4F:98:CC:C7:73:33:97:B7:C7:09:C0:EA:EC:BF
Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Certificate serial: 01976026D39565FD161DDDF3CB08B2850C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
Manifest number: 1592
Signing time: Wed 11 Jun 2025 18:00:46 +0000
Manifest this update: Wed 11 Jun 2025 18:00:46 +0000
Manifest next update: Thu 12 Jun 2025 18:00:46 +0000
Files and hashes: 1: B4B8AwhPN8nqkqsJIWnt25RI8P4.roa (hash: tKZvSD+J2/9HuzhNNVSD82woMs4APG13o6f6vUOg094=)
2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: MqY0fSqJHXtcScdc/Z51v9klJGZiaSt4bRypAVl06hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:26:d3:95:65:fd:16:1d:dd:f3:cb:08:b2:85:0c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Validity
Not Before: Jun 11 18:00:46 2025 GMT
Not After : Jun 12 18:00:46 2025 GMT
Subject: CN=2adf6ba0e5894f98ccc7733397b7c709c0eaecbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:f9:f3:6a:51:e1:da:29:53:f0:07:79:0d:
4b:e2:d0:5a:49:db:f7:1b:e4:50:23:6f:aa:78:bd:
57:02:02:70:51:c4:f7:69:f4:2a:33:4c:7b:2f:1e:
38:05:47:eb:fc:1d:bc:5b:8d:31:a8:eb:c3:1d:73:
c2:31:21:74:70:35:7d:fc:36:4a:92:7b:1c:30:d5:
37:d5:a8:07:85:43:39:a3:92:3e:a4:6d:e0:6b:c2:
35:0d:5e:4b:99:55:0f:b1:f1:1d:af:11:89:32:a8:
d7:bc:37:6b:c2:95:d9:0a:3b:5e:89:e0:49:b0:29:
6b:94:8d:81:53:97:c7:2e:38:17:c3:35:86:f4:01:
33:9f:1c:b7:54:d2:68:25:6d:f5:4a:63:ac:b5:90:
de:fe:63:59:d4:1d:85:b2:e0:5c:4a:37:24:82:ec:
b3:e8:fc:d3:30:24:5c:85:96:7b:a2:b3:ae:e0:e5:
0a:5e:58:10:46:3a:37:49:db:29:29:db:8e:74:03:
66:68:4c:32:8f:9e:a2:13:f3:c4:d4:31:e4:af:85:
6e:31:1b:b7:18:cd:0a:b6:20:8e:9c:75:33:21:d4:
cd:6c:02:05:cd:17:02:73:47:fd:a6:1f:18:34:51:
1c:72:f8:51:fa:f0:8e:54:30:e2:56:fa:b1:c3:15:
f8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DF:6B:A0:E5:89:4F:98:CC:C7:73:33:97:B7:C7:09:C0:EA:EC:BF
X509v3 Authority Key Identifier:
keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:56:4a:68:36:a1:9e:17:b7:52:ab:05:95:ec:3b:10:db:19:
d9:42:a9:d0:9d:c0:dc:f9:00:f1:68:ff:c5:8a:45:20:69:61:
da:79:c4:fc:99:83:72:d9:40:68:db:be:11:27:34:9c:a5:7c:
fc:9d:30:09:9a:0e:38:49:25:97:3f:5e:ab:e4:77:cc:4d:49:
51:d9:6c:df:77:8e:1d:28:c5:1b:48:aa:26:9e:a5:ed:8a:ae:
b1:33:dd:36:1a:ac:39:2a:dc:dd:af:02:84:ac:42:c2:f4:6e:
48:e6:11:cb:71:f1:0f:7b:27:20:7a:05:1d:a7:ac:c3:4b:8e:
27:3a:39:e0:79:e5:56:7b:77:24:ec:50:6f:87:6b:ee:65:40:
fa:68:f2:47:4c:80:60:63:ea:0e:d5:c7:c8:d4:d6:2a:4a:f0:
27:cb:cf:51:0b:21:e2:8d:9a:14:84:9e:e0:dc:ef:aa:3a:85:
0a:e9:f4:d5:c2:c0:14:2f:3d:1d:25:d3:5e:c5:cc:82:3c:89:
88:a0:48:4e:40:3a:f9:0e:81:8e:d5:c5:ca:f0:b7:78:da:1b:
58:21:d8:41:66:88:47:97:6f:b2:53:e1:f8:f7:66:86:78:c3:
d6:bc:f3:af:b2:1b:d5:f3:dd:14:cc:de:52:93:0e:d5:d7:78:
f6:b6:7c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:43:44 2025 by rpki-client