Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
File: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft (raw, json)
Hash identifier: JpM+MedGqTje2MvmL7rmUmgtgtOJTZNsckOheQDtVIo=
Subject key identifier: 26:6F:EE:D9:75:52:48:DC:1D:6D:63:47:FD:A4:00:3A:71:FF:58:BD
Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
Certificate issuer: /CN=5ece10f13c46806926a67946cc6a1102aa09031a
Certificate serial: 01974AE9147550AEB8D1049ED03C4597B7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 15:01:18 +0000
Manifest this update: Sat 07 Jun 2025 15:01:18 +0000
Manifest next update: Sun 08 Jun 2025 15:01:18 +0000
Files and hashes: 1: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl (hash: R5jUcBTiEY1Svfhz3F7U929YuzzqIbRibHdmydT2I4w=)
2: da7wWDdQpE5i6DJox7FoD-QEnrA.roa (hash: 93ok4fdBSnjw6qTtlazVRgZjQmCRM/yDSLFq6NFZNeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:14:75:50:ae:b8:d1:04:9e:d0:3c:45:97:b7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a
Validity
Not Before: Jun 7 15:01:18 2025 GMT
Not After : Jun 8 15:01:18 2025 GMT
Subject: CN=266feed9755248dc1d6d6347fda4003a71ff58bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:43:a9:31:c7:8d:12:b7:08:59:a5:06:f7:
b5:a0:36:0b:10:1e:b0:b4:68:be:bc:2e:60:92:40:
fc:80:2d:a3:5f:e2:0d:3d:1b:46:69:3e:03:c4:3a:
5f:f5:19:18:6a:ac:7d:37:63:86:f5:c3:db:98:4b:
a2:f2:c6:93:2a:1e:af:fc:96:b6:dc:d3:7f:ff:de:
3c:59:0c:7a:f6:c9:fd:a6:52:a4:af:3b:5b:c7:b0:
32:2d:c2:9f:54:77:68:eb:b3:e6:b7:90:c8:92:b7:
1d:cd:16:54:d2:e9:8a:a9:3a:47:9b:7b:8c:e4:75:
17:62:45:c1:ac:3b:da:7a:37:df:af:8c:05:fe:eb:
50:f6:48:78:6f:4d:98:6a:67:d9:0b:0a:28:7d:2c:
1f:7f:38:e2:f0:7d:f3:84:4c:17:06:57:1d:8c:36:
25:fa:ea:8a:22:4f:69:4e:5b:11:3b:36:3e:08:f4:
9d:da:ce:62:cc:d3:5e:a1:dc:0e:55:65:2c:2a:48:
a4:5d:4f:3e:dd:b5:b6:bb:ee:89:ae:8f:38:ba:f5:
e0:32:b1:f5:5e:d7:20:8d:37:d1:04:e4:c5:f1:a4:
a0:16:29:eb:d3:74:e5:dc:af:4b:d7:f1:00:66:0b:
c3:58:0e:f0:16:7b:4f:97:cb:31:72:9b:29:14:5f:
98:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6F:EE:D9:75:52:48:DC:1D:6D:63:47:FD:A4:00:3A:71:FF:58:BD
X509v3 Authority Key Identifier:
keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ee:65:10:dd:ed:36:ca:8e:75:42:04:8b:19:2d:58:bd:6b:
5d:b2:1e:6f:93:f6:50:aa:c3:f3:c9:2d:a9:94:d6:ad:18:29:
67:15:b7:09:72:a1:23:f4:a9:70:60:07:4f:6b:19:c8:4f:94:
f9:05:bd:10:c4:1e:3b:bc:9f:c0:6d:a1:33:57:c4:88:4b:da:
4c:c1:3f:2c:0e:91:b5:92:d0:23:f0:11:76:da:3b:9b:81:f7:
03:cb:5f:86:3c:e9:26:e7:6b:7e:7e:ad:2a:62:bf:ac:df:d3:
44:7d:0f:15:5e:30:c4:20:63:6d:21:7b:d9:13:40:99:90:7c:
55:40:54:c5:fe:5d:d1:c1:03:48:75:10:9d:16:90:8f:9a:90:
d9:c1:63:2b:6e:6b:ee:ab:79:4f:17:23:a4:ba:3d:bf:0f:69:
8e:53:2d:a2:1e:2d:e6:99:3e:e2:ec:36:60:8f:61:99:e1:9b:
0e:34:ca:2f:e7:e1:d5:84:c8:9c:0e:1b:2e:f6:a2:52:32:98:
a2:3d:0e:d9:0a:50:90:ac:1d:0d:f9:45:fe:3a:a0:de:eb:d0:
b9:9e:d7:8c:f0:83:cf:2a:9f:44:76:67:f1:ee:8d:37:8d:34:
70:43:7e:61:17:8d:cb:af:49:f3:a4:40:5e:72:4b:91:c3:f5:
61:3f:33:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:24:59 2025 by rpki-client