Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
File: xmJhwznF7fjYxIPwjka4SAqAXvE.mft (raw, json)
Hash identifier: wzDf3z7TqBS/tF3Wr/lezVo37b4c2rqvGtrYoGzefOA=
Subject key identifier: AE:9C:35:D9:AC:8C:1D:6F:30:CF:EE:6A:29:58:60:6B:56:1A:01:1C
Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
Certificate issuer: /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Certificate serial: 0197488D03AC96FEA1C44D21EF7D4646A283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
Manifest number: 14B8
Signing time: Sat 07 Jun 2025 04:01:30 +0000
Manifest this update: Sat 07 Jun 2025 04:01:30 +0000
Manifest next update: Sun 08 Jun 2025 04:01:30 +0000
Files and hashes: 1: n0PQVaq6lp0buyh71HmvCGJy3cY.roa (hash: QL9cb+VrnWZDKfgvQ3BKYLRd9xHYcd+B/V/qEKLIfgU=)
2: xmJhwznF7fjYxIPwjka4SAqAXvE.crl (hash: YP9pd/z1F5wunzOoMgH0dm5bQCyaGZFvQ4qGsEQfCzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:03:ac:96:fe:a1:c4:4d:21:ef:7d:46:46:a2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Validity
Not Before: Jun 7 04:01:30 2025 GMT
Not After : Jun 8 04:01:30 2025 GMT
Subject: CN=ae9c35d9ac8c1d6f30cfee6a2958606b561a011c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:11:3f:88:85:bd:d9:b0:0b:1a:f9:c9:86:ef:
d1:b0:14:de:fd:38:5a:46:b5:7a:a6:14:a1:c9:d6:
af:ec:b6:a3:6c:b9:ad:5b:81:d5:b3:2c:0e:a3:96:
58:1d:6c:9a:5f:ef:3c:ee:88:5f:98:24:e5:0a:6b:
9b:c9:8d:14:44:05:f5:82:80:94:b8:ab:68:89:c5:
aa:d8:4e:68:9d:a1:fc:bf:99:cb:5e:f0:3b:56:2a:
45:7a:15:f0:c2:bd:fa:3a:05:c3:ff:62:8a:00:4c:
e0:d9:e2:1d:a2:2e:19:0e:ca:be:4e:5f:96:12:aa:
91:7a:3f:92:d9:ca:9f:ee:94:d1:bf:de:f3:a9:3d:
c7:c4:e7:4f:56:b6:18:ab:cd:af:f2:86:91:c9:59:
51:c0:69:3f:b6:cc:8f:a3:9d:8a:8e:ba:6b:48:70:
29:3f:63:70:19:29:d0:21:54:50:99:6f:71:db:09:
47:4f:84:af:29:0a:4b:78:8d:2d:b3:1b:3f:3e:ad:
5a:a5:ed:98:31:20:f9:9a:21:42:f1:e4:9a:f7:08:
92:65:5f:39:6e:6d:21:8c:a0:bf:43:30:65:ae:cc:
b7:61:8c:4a:34:c5:a0:0a:d9:05:39:7e:e0:7b:c6:
7f:fd:02:09:aa:1b:1e:4b:9f:14:fc:5e:8e:68:e7:
43:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9C:35:D9:AC:8C:1D:6F:30:CF:EE:6A:29:58:60:6B:56:1A:01:1C
X509v3 Authority Key Identifier:
keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bb:ad:8c:b0:be:91:dd:0f:26:1b:98:ea:64:47:2b:5f:bc:
06:17:c7:55:2a:6b:19:c6:64:59:74:ec:91:a1:ed:fb:f5:68:
a4:6e:68:b6:15:5b:21:6d:ec:a4:99:2c:7f:69:4a:d9:1c:08:
55:1a:fe:bf:5e:71:86:36:ce:81:47:19:71:01:c9:14:a6:61:
c0:83:f7:19:ca:3e:3d:be:e7:55:10:38:eb:1c:eb:b4:bc:74:
88:2e:e7:f9:ad:7c:8b:e5:04:26:24:e3:8c:d6:da:a9:eb:3e:
f7:2e:80:dc:94:63:9f:a5:2f:07:c7:8d:b6:71:41:61:b1:3b:
1c:52:c2:72:ea:96:fb:db:5f:ef:a6:80:ff:e0:96:92:18:ef:
7e:f1:0c:d9:43:45:9a:e7:78:1f:bc:97:9a:3c:fc:cf:6c:18:
fa:8b:eb:60:c9:a6:a5:4f:60:d8:4b:ff:3a:3a:17:8c:2e:1a:
f8:ab:19:c3:ea:fd:b3:79:38:dd:28:fd:41:0f:51:df:b0:89:
e1:f2:4e:72:9e:c5:ae:9e:0c:a7:de:b8:df:73:78:74:f1:cf:
ec:07:c3:6c:9a:2d:d9:84:42:f5:af:e2:a6:cb:14:34:13:d5:
56:f8:5a:e4:57:4e:33:62:c8:e6:0e:f2:f8:f8:6b:ea:34:37:
38:a7:46:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:55:52 2025 by rpki-client