Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier: 6qql2rUsSp5GXxMhGDlbVDHe89go0K4FqYCZnxQ3Mxc=
Subject key identifier: C8:53:E9:2F:6E:77:D1:B9:FC:04:4B:04:43:96:CA:4C:AA:22:E8:C1
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 019743D3FF6A76212D5226AAF6F6D65EAB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number: 1281
Signing time: Fri 06 Jun 2025 06:00:56 +0000
Manifest this update: Fri 06 Jun 2025 06:00:56 +0000
Manifest next update: Sat 07 Jun 2025 06:00:56 +0000
Files and hashes: 1: 2O7hTeTBTYQlXrHUGjT-esuiTyY.roa (hash: DN3/NgDDrumPZHYXXX/T0l7uMFZxt8+Z9FjDhPflTwg=)
2: EnujZTa_xifqO1ApuBtNO607PMQ.roa (hash: lVv7SmdnXwh0GWr+88AXWNM4yuVtWqv+5v4P4182pMI=)
3: QsHNthgc9L7fJ_2Fo_g-CqUIr74.roa (hash: 9xya8h6lnbe7gVjWBZEopxxvdjqjl2fFO+ULpdjenyw=)
4: kSQmmeExWfprcCDLfHI_OYJk0ms.roa (hash: 4gXw5KLNPGHoJR1QDpTIZ93gsLn9MiktkPpQtwbbYxQ=)
5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: M2yzKS89a5VhoeyoNVHXZL+N3qIfMNHKBfLa/0Y86CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:d3:ff:6a:76:21:2d:52:26:aa:f6:f6:d6:5e:ab:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Jun 6 06:00:56 2025 GMT
Not After : Jun 7 06:00:56 2025 GMT
Subject: CN=c853e92f6e77d1b9fc044b044396ca4caa22e8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:f5:fb:6e:d3:a4:62:38:a8:52:54:3d:86:
93:24:cd:2c:e3:73:87:dc:f3:f4:f6:43:1f:92:24:
28:34:5e:44:fc:89:55:d9:12:52:3d:2a:68:5b:14:
47:fa:6c:bc:ac:43:a7:f6:57:17:51:f1:bd:e1:f8:
a0:30:c6:4a:1e:16:99:86:83:67:54:ac:af:4a:2d:
03:60:76:15:55:9a:a5:8a:e4:c0:4f:71:07:a9:49:
fd:48:13:79:2c:7f:41:29:dd:2a:38:c1:e2:fd:68:
31:10:9c:7d:54:4a:3b:58:e6:99:0d:d0:a5:62:b7:
c7:ed:6e:f7:08:cd:08:a7:8b:7b:f9:60:aa:d6:7c:
cb:b2:bb:56:c9:ca:76:33:fc:46:5c:17:ad:56:73:
ba:cd:ac:48:d2:23:19:6a:78:b0:41:9c:b7:6b:7c:
0a:05:45:e1:f0:ab:a5:67:45:1e:58:4a:45:04:f1:
9c:57:42:05:d0:d5:65:00:99:ea:8c:8f:5a:4b:bb:
28:64:d4:1c:ec:8e:ff:33:8e:11:ee:e1:7e:93:be:
e8:66:25:67:ac:a2:d7:38:ed:ea:a8:ef:33:05:33:
cb:b9:cb:99:7d:c7:16:3e:d9:e5:65:db:9b:79:d2:
21:18:b4:42:bb:b8:07:ec:f0:55:56:18:21:4b:d6:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:53:E9:2F:6E:77:D1:B9:FC:04:4B:04:43:96:CA:4C:AA:22:E8:C1
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8b:0a:32:d7:46:b8:23:56:ea:78:1c:82:91:67:af:50:f6:
cb:25:9e:27:da:d5:d7:97:fc:54:23:c7:2e:a4:b2:c7:ff:97:
56:ac:a7:22:f4:0e:4f:28:d0:ac:14:3d:6e:07:34:03:7f:3b:
92:f0:bb:ea:29:74:96:8b:6f:19:29:4b:8c:e3:63:c6:6e:80:
e2:d6:d6:f1:ff:c1:2d:82:39:75:57:9e:ab:f1:6b:80:9c:13:
99:ee:90:a9:2a:28:e3:38:68:4c:73:e8:12:40:f6:67:ee:a2:
5e:d3:04:8a:ef:5b:5d:41:81:09:02:80:b9:7d:39:b2:3a:aa:
3e:df:fd:25:42:7d:f9:b0:56:d5:fb:ee:d6:b1:3c:6e:a0:ec:
42:90:3e:2d:9a:a2:64:02:79:3a:94:ec:96:a5:39:cc:6f:56:
dd:bd:db:10:91:6c:e2:3a:08:6f:34:fd:a2:e2:ef:ab:1c:30:
c4:a4:a5:6d:32:4a:4b:58:75:a1:ac:c8:71:c1:d2:10:aa:7f:
8e:79:3c:53:53:4d:aa:a4:7d:52:a5:69:a2:67:a3:b3:05:e9:
55:14:7c:22:a4:2a:ce:ea:65:4d:d5:98:21:42:6c:81:88:f3:
9f:f9:97:ca:90:9a:7e:ed:21:3e:e9:d3:87:9d:35:d4:f9:70:
c5:84:34:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:01:42 2025 by rpki-client