Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier: kelnXZWToIj6OIfm4lGG4OEGvsmOiScwH9BOVE7d7JI=
Subject key identifier: 06:B9:E3:45:B9:D6:FC:70:D1:74:C2:09:F3:40:F4:9D:1C:49:3C:D7
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 01974742EF14491D4F6B3D902C53D2BF6B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number: 0D48
Signing time: Fri 06 Jun 2025 22:00:58 +0000
Manifest this update: Fri 06 Jun 2025 22:00:58 +0000
Manifest next update: Sat 07 Jun 2025 22:00:58 +0000
Files and hashes: 1: SKLs3SUJ6QhNbVJrjYVyYf81aEc.roa (hash: R9s9J4TIgAF+/QEDyhuyAA67g5wViBKHguVZOslEIHs=)
2: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: 8f2JMKsAIQAm4Yf07iM42/Q5Vb0ZZ/OBlXE9PzJjhSU=)
3: rAM6r2SFYvSQGaseydRgOte_bds.roa (hash: RYGmm+YYhr7YTk+o6zMn3og3hxzFO1fF/P5WPNoHQX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:ef:14:49:1d:4f:6b:3d:90:2c:53:d2:bf:6b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: Jun 6 22:00:58 2025 GMT
Not After : Jun 7 22:00:58 2025 GMT
Subject: CN=06b9e345b9d6fc70d174c209f340f49d1c493cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:f2:42:16:ad:b1:56:54:ef:76:f2:6c:fe:
f8:6a:c4:f6:dd:76:8e:37:98:58:9a:f0:5d:2b:5b:
68:85:59:2d:a9:9a:ed:9b:c4:8a:dd:c7:3c:34:4e:
7e:bf:2d:b4:d2:50:dd:c9:34:6a:b8:a0:70:3c:2a:
bb:2a:67:72:40:9c:88:5a:31:81:aa:d8:8f:5b:a9:
70:51:1a:43:9d:dc:9b:46:0e:de:cf:da:0a:bb:d2:
22:f3:73:d1:29:61:86:ed:f9:7c:f6:cf:ab:b2:73:
75:32:2d:92:b3:fd:20:0b:49:68:18:a8:fd:29:78:
a9:2c:b3:05:2a:2d:ce:00:52:f5:0c:b7:e0:ba:bd:
b8:b8:fa:ca:3b:86:e3:62:73:11:92:f0:1b:e1:ed:
84:c6:1c:41:b8:bc:ba:10:07:9c:2d:94:c1:86:56:
24:2b:ee:b8:09:df:ab:ed:d1:3c:29:b8:8a:e0:3c:
74:59:e8:91:54:91:20:00:52:67:f0:9a:86:c2:99:
18:ce:05:a4:ad:c5:7e:de:a3:1a:6f:59:ed:c8:8e:
02:fe:fb:4e:b7:75:36:10:01:15:40:e1:10:14:00:
d6:2b:6f:23:c5:13:da:dc:a4:8f:a0:35:51:32:bb:
22:01:81:a3:a3:98:d2:e5:ab:bf:dc:30:c6:12:0f:
ae:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B9:E3:45:B9:D6:FC:70:D1:74:C2:09:F3:40:F4:9D:1C:49:3C:D7
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7a:d9:64:57:65:08:0d:95:09:be:23:00:62:f4:ca:63:98:
cb:80:a7:65:3a:b2:34:b2:55:84:d1:f6:81:3b:d3:15:b4:c8:
21:8c:67:e6:70:a4:82:c6:5b:47:e1:47:dc:62:01:5b:50:b9:
92:b5:00:45:fd:fc:f8:44:3e:4e:6a:50:db:fb:7e:9a:fe:c8:
fb:db:ed:56:d8:70:63:de:4a:1a:c7:6c:b0:ac:5a:60:f7:78:
81:44:3c:ab:f5:07:18:0f:8c:4b:4e:90:f3:8d:d4:84:9b:c7:
c5:a7:4b:0c:9c:b9:35:c1:3e:f4:eb:da:f5:32:fe:10:03:6e:
ac:92:77:3c:47:91:99:b4:aa:a2:ed:18:d0:d4:5c:c2:61:0d:
b2:8a:d5:90:9d:11:f0:83:dc:97:9f:72:5d:71:48:56:ce:b0:
6a:b2:ff:16:e9:13:93:95:4f:ec:f1:81:e2:ab:70:75:6f:d8:
30:0f:c7:24:80:3d:11:06:45:a2:e4:b8:04:28:34:f9:31:02:
11:06:ed:e0:b1:8c:db:38:69:55:0e:5c:d1:47:01:da:15:d7:
fb:f2:8d:45:38:9f:24:c8:bb:36:56:9e:80:b3:a6:42:7e:e7:
8e:51:0e:19:ba:09:23:a5:fe:54:c9:d1:63:12:26:bf:b0:a2:
51:67:56:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:22:31 2025 by rpki-client