Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
File: XnzrnJMcsXleInriyGR1UTrkkVw.mft (raw, json)
Hash identifier: rN0IleqLetT3aldHQfGngQL7Zl8xPdVx30KLiRff4OY=
Subject key identifier: 41:2E:50:6D:61:70:8B:E4:FF:4F:E2:64:30:44:01:B0:14:DB:63:B2
Authority key identifier: 5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
Certificate issuer: /CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Certificate serial: 01974DB28FF1DA39D6E098969364844E77AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 04:00:37 +0000
Manifest this update: Sun 08 Jun 2025 04:00:37 +0000
Manifest next update: Mon 09 Jun 2025 04:00:37 +0000
Files and hashes: 1: 8HbLvR_ICovY3JkhN3nLEF6TTpU.roa (hash: yBKFoCIX0xdcJSGT3f5HB8GzFB5vs3wuFhH6HKyoacg=)
2: XnzrnJMcsXleInriyGR1UTrkkVw.crl (hash: NchuuS3wdvfUGsajluO5xY0P1H0TcMUsqQgl7CbC3Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:8f:f1:da:39:d6:e0:98:96:93:64:84:4e:77:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Validity
Not Before: Jun 8 04:00:37 2025 GMT
Not After : Jun 9 04:00:37 2025 GMT
Subject: CN=412e506d61708be4ff4fe264304401b014db63b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:e8:7d:44:f9:8c:1a:29:ac:9c:37:01:50:
f8:7d:50:2e:1d:e4:4a:98:6d:27:34:d9:4a:a6:65:
d1:22:e7:d8:6d:53:e4:36:9f:47:b5:7a:a6:db:77:
cf:f2:cb:5a:8a:53:85:28:8d:e4:f4:b2:29:b7:8b:
91:51:33:df:39:5e:f7:c0:72:9b:24:5d:ca:d1:8a:
e5:ad:c6:ad:a9:b7:b7:fd:57:c3:ed:34:80:bd:b2:
41:44:48:41:90:19:27:78:92:b8:33:be:b6:e8:74:
41:42:4b:48:91:a1:45:5e:55:eb:d7:5d:20:53:3c:
0a:7a:44:83:01:2e:19:27:32:12:4b:02:22:02:f6:
c5:ed:80:32:a1:de:af:9e:e6:fd:e5:33:59:fa:99:
c3:df:5b:50:df:74:a6:2a:97:3a:6b:55:64:1a:98:
4d:a9:51:a3:78:e7:6e:bf:18:22:0f:da:31:0b:0e:
81:ec:1d:8f:66:24:ff:31:44:2a:ff:fb:bb:4e:a5:
a6:ce:d8:a7:42:41:d7:80:bd:3b:db:f2:ea:01:ad:
a5:8e:d0:64:a9:8d:e4:5e:8e:b7:41:75:62:9c:5e:
7d:bc:f6:e5:2c:37:f7:1a:93:03:a2:18:fc:d7:b1:
7b:71:98:19:b5:98:bd:29:dc:f0:3f:08:07:5e:2e:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2E:50:6D:61:70:8B:E4:FF:4F:E2:64:30:44:01:B0:14:DB:63:B2
X509v3 Authority Key Identifier:
keyid:5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e6:10:97:18:d1:91:3d:53:4c:bc:13:5b:54:ed:e5:f7:43:
5f:99:ce:5a:f9:34:88:4f:53:c1:56:14:01:02:57:48:21:bf:
4b:1c:34:d4:07:b2:0c:40:a4:44:28:f8:60:7a:d5:47:96:e7:
ea:d3:4f:ae:2e:68:9f:a3:4f:86:09:bf:7a:cf:3c:16:df:46:
e6:27:9c:d3:b7:ff:27:d7:81:92:95:89:7a:05:e9:ea:dc:62:
47:47:35:38:c0:c9:a7:f2:fd:8a:d3:79:0a:32:2f:54:f2:ad:
8f:6b:c2:34:85:f8:c5:87:9d:a0:00:de:25:e4:c7:61:71:3d:
bc:7a:2f:44:32:a6:47:10:15:9c:25:4d:44:a6:53:07:13:6e:
3b:28:8d:c6:9e:7f:69:6d:f3:cc:25:ad:44:cd:19:c7:8f:ec:
ed:8b:bc:5f:55:50:4a:24:47:fb:d1:6f:36:38:6d:a0:e8:58:
14:d0:84:3f:ed:51:48:7b:56:c7:aa:a0:c8:eb:05:ae:d1:1f:
8b:52:c7:79:19:04:3a:28:f7:de:56:ca:22:6e:a2:d4:b3:65:
48:07:33:d2:67:da:0e:a8:3e:89:da:a5:19:35:70:75:75:7e:
34:a3:f6:eb:41:67:96:73:29:b0:45:cb:53:f6:a8:a4:1c:47:
80:4d:1a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:38:23 2025 by rpki-client