Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json)
Hash identifier: 0inKFMKTOAVXXuKNa0igd9+HfOQ4nmMWUdwKYxSwySg=
Subject key identifier: 51:E0:00:55:87:A5:5C:89:DC:1C:5F:F3:6F:EA:33:5D:7A:20:A5:44
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial: 019748C3391D88E3F4085C9A5C4A4758C9CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
Manifest number: 0967
Signing time: Sat 07 Jun 2025 05:00:43 +0000
Manifest this update: Sat 07 Jun 2025 05:00:43 +0000
Manifest next update: Sun 08 Jun 2025 05:00:43 +0000
Files and hashes: 1: Rzw-FEYLvNzmn8z8pXMnNIdiuzY.roa (hash: 73aotFl5RqbhDVi5JA90kJT8GvN6s6DMcTXSbB1f0hU=)
2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: tSOaweBkg5mEpvUxhA80R3hb+WIwDqfGy+IO3Q3Wv84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:39:1d:88:e3:f4:08:5c:9a:5c:4a:47:58:c9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Validity
Not Before: Jun 7 05:00:43 2025 GMT
Not After : Jun 8 05:00:43 2025 GMT
Subject: CN=51e0005587a55c89dc1c5ff36fea335d7a20a544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:0b:34:c8:32:10:48:00:20:38:3b:c5:22:
d7:e6:f5:81:d1:a5:4b:7f:4b:34:47:61:dd:70:53:
5c:57:4e:4e:4d:9d:a4:47:e9:97:20:8b:5a:4e:a4:
b8:21:15:60:31:ea:29:a9:13:ff:51:35:11:da:5d:
b7:31:62:6b:3f:14:de:2a:e1:2b:53:d4:9c:f4:e1:
28:12:13:d9:3f:8e:ab:80:2b:82:fd:5d:4b:ef:28:
74:08:15:2a:ac:19:15:33:61:ff:01:6b:19:9e:14:
e1:e1:aa:ca:ff:d7:e6:51:98:7b:65:4d:6c:ca:2f:
11:d6:54:90:2a:bb:8f:2c:1c:76:a6:dc:c4:64:61:
9e:bc:84:07:18:be:d9:0d:f1:e4:d7:5f:d5:02:76:
dd:48:90:0d:34:1d:7d:53:41:d3:a1:29:f6:7a:91:
43:20:45:7e:25:d0:df:c4:d1:d4:1c:b2:00:28:c5:
6c:6b:17:e0:f6:90:1d:20:26:90:f1:ce:a5:48:ae:
f9:d2:d4:e3:e4:95:8d:88:95:a3:b7:23:88:ff:7d:
98:d3:8f:49:9e:da:6d:11:bb:4c:24:a9:88:35:c2:
fe:b8:1c:20:2f:e1:ef:ac:bb:46:59:f3:a9:2c:3c:
27:b5:a7:6a:bf:be:dd:f0:4d:bd:2f:f3:ff:a1:83:
fa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E0:00:55:87:A5:5C:89:DC:1C:5F:F3:6F:EA:33:5D:7A:20:A5:44
X509v3 Authority Key Identifier:
keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f1:29:0f:f8:d5:f0:f6:12:b7:4b:a2:07:da:84:44:c0:2b:
66:17:d4:00:f7:41:d5:cb:b4:5b:19:9e:9c:d9:90:b5:a9:7f:
57:bc:d3:14:4a:95:d0:ee:3e:dd:9c:a4:0b:f4:0e:65:2f:a7:
df:b3:3a:df:8e:a1:83:4b:e3:97:d9:c6:b6:ec:62:60:b8:68:
55:ca:b8:6d:50:29:87:70:23:03:65:bc:07:8a:fa:55:0e:31:
9e:e7:aa:ab:d4:f8:bf:41:4e:fb:e3:fd:aa:10:5b:22:d8:aa:
2e:70:00:10:58:c5:bb:9d:79:6b:e7:cf:0a:ae:55:ae:09:dd:
4d:d4:56:4e:62:f6:00:d8:54:f7:a9:c7:7c:a0:42:c6:ee:d3:
51:e0:1a:3d:2e:b4:bc:3b:b5:c0:c7:9b:9d:59:f3:35:2c:53:
37:8f:a4:ec:82:18:cd:4e:4d:94:43:04:89:dc:cb:80:9e:fc:
96:2c:3e:92:88:49:d7:d1:e9:d9:ea:3a:d7:20:96:e2:d1:1a:
11:3e:92:15:19:02:45:86:30:47:27:5b:a8:d0:80:f5:b4:11:
3a:e5:d7:7a:b9:f1:bd:ca:fa:fc:a6:54:5b:82:6d:d4:b5:61:
7b:c5:df:e9:e0:90:c9:59:57:7e:aa:ac:c0:9e:1a:35:3a:5f:
19:3d:8e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:25:25 2025 by rpki-client