Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
File: XpNr6hsMOiCKuifYsQsnXkdN3iw.mft (raw, json)
Hash identifier: XNlyaoyS/W1T6BH05ZDWLfKxWixBthxhzoe2/GnFjzQ=
Subject key identifier: 7B:29:E2:EC:51:51:30:D6:2C:72:B2:32:ED:4E:3E:BE:2F:8C:A0:38
Authority key identifier: 5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
Certificate issuer: /CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Certificate serial: 0197542327557F55CB14ECCCDCAC7EA1D03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 10:01:19 +0000
Manifest this update: Mon 09 Jun 2025 10:01:19 +0000
Manifest next update: Tue 10 Jun 2025 10:01:19 +0000
Files and hashes: 1: XpNr6hsMOiCKuifYsQsnXkdN3iw.crl (hash: PfGM0yAj9f35n49+hRMRTVloVQVMF+0Ww+rI8DanTxc=)
2: stcblJCloKrq21i-3tGdy209Cks.roa (hash: sV8E479KWjrK8MD/w/N9wPnQZDPeZCzIYkOl03vwH+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:23:27:55:7f:55:cb:14:ec:cc:dc:ac:7e:a1:d0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Validity
Not Before: Jun 9 10:01:19 2025 GMT
Not After : Jun 10 10:01:19 2025 GMT
Subject: CN=7b29e2ec515130d62c72b232ed4e3ebe2f8ca038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e3:88:b4:bb:c0:69:d7:48:d8:77:82:c5:fd:
e0:89:ff:29:fa:ce:30:89:84:8b:e5:7b:27:61:74:
a3:6a:3f:e3:ba:2a:b0:6a:26:36:d2:ff:79:d9:86:
35:0d:3c:ae:9e:ea:3b:d0:24:65:5d:e7:86:a4:64:
5f:08:f5:c4:b6:5f:63:01:ce:e1:fb:c4:d1:56:90:
a0:7a:e0:2b:21:e8:b1:e1:3a:94:e2:27:83:e1:3e:
27:29:95:b7:0a:a2:6f:2f:09:b5:4c:3b:02:cf:d1:
5b:5d:b7:d3:d1:4b:a0:0c:ce:a7:de:81:18:76:6c:
2f:5d:8f:3e:46:45:4e:02:9d:5a:a2:a7:f1:3d:3a:
1a:65:0d:e3:d0:54:ad:62:04:2e:06:e4:12:f9:08:
88:32:6c:51:e7:07:0f:6d:95:c5:c3:fc:f4:3b:84:
69:f6:9f:f0:07:e2:11:56:d9:18:26:d2:94:aa:3b:
ee:d8:85:d4:77:4c:20:de:50:b8:0f:5d:00:24:41:
d9:ac:c9:97:25:a2:a1:38:eb:c0:e7:5f:e6:41:bb:
e1:53:2f:5e:1c:0c:4b:51:ee:74:84:c0:99:63:db:
53:1c:d6:ef:90:6b:50:df:8c:03:6f:87:02:e8:e3:
d3:4d:e5:dd:fc:92:8b:dc:90:06:5c:49:b4:0a:6c:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:29:E2:EC:51:51:30:D6:2C:72:B2:32:ED:4E:3E:BE:2F:8C:A0:38
X509v3 Authority Key Identifier:
keyid:5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9c:47:01:63:1a:f7:b7:ee:0d:d5:c7:0c:1c:39:f6:49:12:
12:20:6b:79:da:2e:89:b7:db:e1:6a:7c:a1:77:54:b2:f4:a5:
ef:20:2b:12:2c:0a:a9:b6:a4:99:a5:dd:9a:52:54:3c:f9:0d:
96:84:62:00:73:1c:62:47:de:86:90:89:df:2f:1a:ba:68:08:
22:89:0c:f0:17:ea:cb:ff:90:57:7b:97:fb:cc:8b:12:9a:46:
7d:95:ec:8f:71:50:de:01:c5:d2:92:12:14:a3:a4:bf:01:5e:
ec:b5:07:f6:ff:f6:f1:fa:90:51:3a:3d:de:36:92:ee:ce:da:
e7:cf:6f:33:9f:f4:82:86:08:b3:9b:5a:90:0d:f0:a1:df:7e:
9d:b3:99:31:ee:b7:29:f0:cb:45:c6:42:9d:86:f6:e6:fd:30:
1f:04:af:c4:61:23:62:83:55:b3:61:de:a5:7e:20:34:ba:82:
1b:0e:a7:d2:31:04:6e:bb:bd:b8:16:e5:de:01:61:ef:cb:5a:
f4:94:43:5c:f6:aa:07:bc:ad:51:42:e9:25:77:4f:17:dc:d9:
ec:bf:d7:46:87:8b:8e:ce:7a:f7:75:65:8e:77:63:93:54:a8:
3f:98:0d:48:ea:8b:d8:9e:3e:46:22:7e:e6:27:d9:fe:f0:b8:
b9:47:a4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:49:07 2025 by rpki-client