Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
File: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft (raw, json)
Hash identifier: OULefkRXlwbqIC7F3k/JEe5zGtlXocHC29ZV6eTfg7c=
Subject key identifier: 04:B2:83:E8:B3:8F:F7:C1:4F:2A:72:5E:79:2C:22:E7:EE:B8:24:20
Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
Certificate issuer: /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Certificate serial: 019749D644004AB700E2C958259EF5BCD84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
Manifest number: 0B7C
Signing time: Sat 07 Jun 2025 10:01:08 +0000
Manifest this update: Sat 07 Jun 2025 10:01:08 +0000
Manifest next update: Sun 08 Jun 2025 10:01:08 +0000
Files and hashes: 1: oEWWV1wTRtv4TPDh8KnSbxqUMOo.roa (hash: dy83XA1VuxS8pj9IoqOTnoyqLeOEntH2NHWNFfMk+x4=)
2: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl (hash: mY07IXBybHydR1lu5bdlgsgdY84MFDP4b/jZ6LNfKl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:44:00:4a:b7:00:e2:c9:58:25:9e:f5:bc:d8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Validity
Not Before: Jun 7 10:01:08 2025 GMT
Not After : Jun 8 10:01:08 2025 GMT
Subject: CN=04b283e8b38ff7c14f2a725e792c22e7eeb82420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:75:fc:59:9f:ed:90:0f:77:d5:65:de:32:e4:
d6:77:f2:f2:78:e3:da:69:a5:f7:f2:03:ec:1b:6e:
03:1b:e3:c5:95:57:f6:9a:26:30:30:34:ac:97:f1:
8e:bd:6c:54:55:d2:66:0b:00:99:c9:3a:55:f7:bb:
d6:f6:8d:62:85:dc:64:7f:17:77:2e:5e:96:fe:23:
ac:3e:fb:16:fe:3c:72:ec:12:2e:88:96:a0:14:c4:
ac:89:67:b7:3f:f4:36:15:a9:8a:2a:a5:46:71:41:
88:5c:5b:34:c1:bc:c4:6c:34:13:fa:17:d4:90:22:
c6:a1:94:47:a5:2b:55:1f:c4:4b:e4:ee:58:d8:07:
c6:50:a1:cb:64:a4:02:7b:0a:83:6f:76:96:59:ab:
23:68:91:33:d5:8e:92:4a:61:2d:ed:f2:5e:73:8f:
70:48:64:c8:d2:8a:99:62:ce:f3:29:77:28:fc:bc:
72:7f:e4:b6:3e:e3:64:56:0d:49:0c:e5:aa:ef:49:
a5:13:79:2f:d6:7e:26:f8:37:53:eb:11:ee:4a:b1:
de:ce:73:d7:5f:d0:4c:b7:9b:9b:42:fc:45:20:7b:
5f:75:74:7a:40:66:25:2d:07:1c:16:39:1e:c1:0a:
8b:bf:d3:4d:9b:3a:73:e8:ab:50:45:87:04:0b:16:
98:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B2:83:E8:B3:8F:F7:C1:4F:2A:72:5E:79:2C:22:E7:EE:B8:24:20
X509v3 Authority Key Identifier:
keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8e:f4:1d:04:de:cd:98:c7:26:14:18:25:13:55:8e:9c:f9:
1a:af:76:57:ac:17:46:b3:ae:9e:c2:4d:2d:2f:29:b9:e3:8b:
1e:24:00:cd:0f:d0:0c:d8:b0:36:a8:ab:fc:cd:a6:b9:c2:4c:
06:2e:fc:94:bb:b2:56:c9:53:51:9b:54:24:b9:55:ce:f3:46:
da:89:73:d3:a9:d9:f9:e7:f4:f8:46:16:a8:01:ec:29:31:00:
1d:7f:49:3c:2f:3b:26:4b:ca:ca:da:4e:82:47:2f:8d:64:bb:
dd:e2:fa:6f:36:8d:ae:37:eb:c3:32:32:99:b0:4e:0d:43:52:
e5:92:56:08:14:8a:56:0c:e8:2e:25:26:91:00:7a:d5:3c:9a:
da:8a:9a:e8:89:88:5b:f2:4a:6f:87:9d:ed:99:81:d5:81:cb:
ba:d7:8b:55:0f:70:a3:41:98:5d:70:7f:07:3c:71:29:08:27:
51:93:7a:56:17:c2:2d:6d:d6:1e:20:04:58:6a:b0:e0:4b:eb:
8e:c3:2e:81:27:d8:ce:f2:bb:e5:0d:d1:ce:ad:84:4a:75:70:
56:03:ac:f7:85:1f:a8:c5:5a:19:ea:a9:ec:50:b9:da:21:27:
56:60:a0:c1:ba:bf:7b:d2:9e:b2:a0:47:ba:ac:97:13:55:21:
fe:cd:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:57:30 2025 by rpki-client