Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
File: xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json)
Hash identifier: TaCHEMT7iOqy58flUe15nE5ekREWbcepvZyXuPZJJBU=
Subject key identifier: D6:F7:11:52:EB:09:7D:70:59:A8:20:80:E6:46:29:B1:81:2D:76:9D
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial: 0197496842E3EAF5A17CD16C53AF30D20B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 08:00:58 +0000
Manifest this update: Sat 07 Jun 2025 08:00:58 +0000
Manifest next update: Sun 08 Jun 2025 08:00:58 +0000
Files and hashes: 1: O4OjioqtdLSc9vBVs2H8waPnIgU.roa (hash: NSGxfFoC9xrE9ZgK+kDfAmJ0Yg5M2rh+aZQuRq8sgYc=)
2: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: 7XjCzdHIbmXqMWD33CoTYkyOaVpgj0RRHA62QkYpc6I=)
3: znlmvW2DpaFnQW1nyRCgCW8WLGw.roa (hash: YJSRBnkvLzhRF6OldluTcKQjvHWbbSsxO+vBSGh4+Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:42:e3:ea:f5:a1:7c:d1:6c:53:af:30:d2:0b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Validity
Not Before: Jun 7 08:00:58 2025 GMT
Not After : Jun 8 08:00:58 2025 GMT
Subject: CN=d6f71152eb097d7059a82080e64629b1812d769d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:08:21:d4:7c:b0:6f:c9:1a:8b:ae:9d:9c:88:
fb:e4:e0:d3:f2:fb:2c:a1:16:08:12:b0:57:16:1f:
08:b2:8b:e0:78:ba:a6:92:b6:5f:be:7b:7c:a8:45:
f4:bc:3a:45:1e:d6:c3:ca:59:d6:80:bc:98:15:c7:
69:05:a9:73:dd:84:c0:49:23:9e:5e:16:b1:bb:3f:
a3:04:14:31:43:a4:e7:a3:b7:56:c7:fc:e3:81:b3:
07:f7:7b:33:77:99:91:a7:e2:60:59:6c:fb:dc:ab:
e8:79:1b:cc:20:ab:f3:87:44:2a:f7:18:77:25:68:
bf:63:a6:74:2e:00:9a:c0:99:a6:b2:f5:d4:07:d8:
c7:50:29:db:99:b5:69:f5:f0:f2:d9:59:72:88:d5:
71:40:8f:bf:52:3b:12:0d:ce:7d:9c:2e:60:e0:21:
99:fe:09:3e:52:f5:c7:5a:53:6c:1a:57:a3:0f:d7:
bb:a0:49:47:7b:86:52:15:01:bd:ff:ad:b9:a0:19:
72:b6:37:91:d8:3b:28:b5:b1:18:ab:31:27:b6:74:
c7:de:66:32:40:6c:29:70:71:ef:81:4e:2b:9a:83:
f2:5d:39:f8:93:c9:68:8b:89:17:fe:cf:91:e3:ed:
14:33:5b:eb:f9:56:a3:ea:ac:19:b1:7b:1a:2a:69:
87:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F7:11:52:EB:09:7D:70:59:A8:20:80:E6:46:29:B1:81:2D:76:9D
X509v3 Authority Key Identifier:
keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c2:b3:9e:de:9c:cc:82:da:8b:db:02:23:01:bb:bd:76:ac:
73:3e:e1:50:f1:1f:7a:44:a4:c4:58:07:f4:35:6e:07:69:9a:
3e:b2:7d:69:ab:bc:86:d9:f9:21:9d:48:b2:81:4b:c9:62:91:
66:c2:de:f7:98:f9:1f:81:66:3a:83:5c:ee:30:5b:f6:5b:85:
bb:dc:bb:08:65:72:fc:17:69:5a:cc:f0:fc:3b:7b:86:b8:68:
fe:4c:3e:e5:6e:7d:05:7a:2c:61:35:df:fe:7f:85:14:6e:59:
98:09:67:c6:e2:9e:a2:d3:a1:d9:44:76:43:08:f5:56:f0:ff:
67:9a:ac:af:8d:89:9d:a8:f7:a9:a6:09:14:09:93:eb:dc:38:
13:9f:44:2c:ca:86:be:62:61:18:d5:fb:af:91:7a:0c:20:2c:
c7:d4:01:ef:0d:bf:61:61:6d:b2:09:0c:6e:35:29:be:d2:89:
09:d0:22:a1:34:8b:67:0b:3a:14:f5:f2:f8:de:d9:37:d7:8e:
47:c2:6a:be:82:59:60:6e:61:5a:da:35:60:0f:b2:34:92:5a:
ff:ed:9c:27:6d:fc:56:f4:45:ed:12:c2:b6:74:b2:01:69:ee:
d6:8f:4f:dd:8d:6b:83:3a:ff:83:8b:9b:05:3f:9c:de:f1:07:
16:10:44:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:38 2025 by rpki-client