Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
File: xMAyk16WM9-LGZJd8L0luBxoY7c.mft (raw, json)
Hash identifier: 0mLc7A/ejlBsVzADAhr7enWQXH/Owe9O6UgmfdJ/63I=
Subject key identifier: 4D:AA:E6:C3:E1:3B:76:D5:E9:B3:A0:F5:5A:1A:1A:8E:9E:9F:C8:85
Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Certificate serial: 01974779C49F2445E6EAA036C465A8099730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 23:00:51 +0000
Manifest this update: Fri 06 Jun 2025 23:00:51 +0000
Manifest next update: Sat 07 Jun 2025 23:00:51 +0000
Files and hashes: 1: ghEtezlgRxtM8_A6BWhHBoi7MAA.roa (hash: XbPqTVhQ0C1rkf6WQ+W7x28ipcXojyuCGKdg2k0Xwvo=)
2: xMAyk16WM9-LGZJd8L0luBxoY7c.crl (hash: Y0s43kRXrtW57KacZcZKOIaV2X3cV5g2d08v7GueV1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:c4:9f:24:45:e6:ea:a0:36:c4:65:a8:09:97:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Validity
Not Before: Jun 6 23:00:51 2025 GMT
Not After : Jun 7 23:00:51 2025 GMT
Subject: CN=4daae6c3e13b76d5e9b3a0f55a1a1a8e9e9fc885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:f1:05:df:98:4e:5d:37:4f:b2:8e:26:9b:
93:cf:63:a4:83:f7:bd:23:c8:c2:6a:7f:60:d0:c8:
5f:3d:92:2f:81:fe:cf:d6:64:3a:0e:97:57:e8:4c:
6f:34:d6:f1:1d:45:fc:e3:ef:2e:cf:b8:41:0e:f8:
67:e9:c5:dd:aa:b4:e9:8b:9a:6c:ff:c3:57:a8:48:
cc:ab:4f:b1:6c:5d:12:d0:2f:80:c9:58:5b:6b:e0:
56:9e:13:95:01:6b:57:2a:2a:25:31:e1:29:ae:44:
4a:42:5e:cf:08:c7:a3:fc:5d:79:3d:24:45:83:f6:
af:6e:56:d8:56:6a:bb:7b:63:28:ff:4a:f2:46:de:
ff:a4:7d:17:16:73:63:84:c4:0f:b2:ae:a5:85:e3:
9d:c5:f3:73:12:d9:2e:ed:3f:da:b6:84:52:36:3b:
a1:9e:48:7e:6e:2d:7c:2c:98:d6:ab:57:30:44:16:
f1:55:c4:6b:95:35:81:1f:cf:20:82:4b:ae:19:a4:
5a:57:8a:c9:b1:80:5a:54:20:14:93:10:1a:5d:91:
93:47:02:a9:df:ac:fc:6b:17:64:82:c5:00:74:0f:
ea:c0:3c:5a:0b:b5:35:33:28:39:d6:1e:59:1a:d5:
b6:2b:7d:4a:91:1a:e3:eb:f9:5a:cd:2d:f9:20:c2:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AA:E6:C3:E1:3B:76:D5:E9:B3:A0:F5:5A:1A:1A:8E:9E:9F:C8:85
X509v3 Authority Key Identifier:
keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0a:17:0a:4f:ec:c5:c3:26:d5:34:7d:1b:84:33:08:17:a3:
86:0a:c9:b4:bd:03:2f:02:b3:46:ad:bc:5f:ad:ee:20:24:0e:
28:c5:c4:d9:97:8d:1c:b5:14:f4:11:34:f9:9a:41:23:e8:97:
b2:41:ea:a6:b4:7a:bb:50:a7:77:d6:20:6d:74:0c:07:5c:23:
80:30:d6:a1:2a:4d:54:11:6a:92:ef:98:a5:c1:fc:d8:d4:a9:
c7:ad:06:85:71:f2:df:1a:a2:32:e4:11:67:bd:85:bf:68:7e:
08:bf:d8:59:6f:fd:a8:30:3a:3e:e6:b8:4f:6c:b0:7c:7c:57:
84:96:f2:23:34:33:a7:06:85:31:9b:85:b8:9b:44:bd:ff:64:
8f:79:42:d8:5a:f3:ca:7e:09:a8:62:8f:40:8b:da:88:8a:dc:
68:c3:ba:57:4d:c7:c8:d5:5c:d6:4f:76:26:9d:c6:32:8c:15:
12:f6:ca:e2:b7:60:1b:a2:cb:0a:f2:01:b2:58:02:80:c4:58:
1e:d6:be:f5:a2:ab:b3:ac:13:d3:ce:90:11:47:53:e8:19:43:
0a:c1:d3:7a:b1:e9:8b:e7:2c:56:ca:7a:5d:85:ef:c9:84:e7:
66:7a:87:dd:51:75:ca:83:31:c7:e7:32:b6:67:cd:60:c0:c1:
0a:9f:24:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:50:07 2025 by rpki-client