Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json)
Hash identifier: Hk+H3HMJZnFVEcun8Z5puwfkZEfQtwz4WRkQBM5Ku74=
Subject key identifier: D0:1C:5F:42:A4:A2:FD:E1:64:21:E2:9E:B7:C7:8C:AD:DE:57:D9:3A
Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Certificate serial: 019742F81670498147A402E6A0E32156B4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
Manifest number: 0B91
Signing time: Fri 06 Jun 2025 02:00:44 +0000
Manifest this update: Fri 06 Jun 2025 02:00:44 +0000
Manifest next update: Sat 07 Jun 2025 02:00:44 +0000
Files and hashes: 1: x9osegNwUKFrT1H1VZTt-kaY4bg.roa (hash: ZX93NU3lUgtZDAGcH0Q1U8yUfw/JO3m/vmWuhpphGKg=)
2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: leobNKEheY/itdbnQyHoUJanzf2cCG7mP+dU1//wUKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:f8:16:70:49:81:47:a4:02:e6:a0:e3:21:56:b4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Validity
Not Before: Jun 6 02:00:44 2025 GMT
Not After : Jun 7 02:00:44 2025 GMT
Subject: CN=d01c5f42a4a2fde16421e29eb7c78cadde57d93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:55:36:f2:bb:12:be:a8:66:98:60:e7:96:
97:ee:77:41:ef:ef:32:dc:1b:d1:ea:a4:98:69:76:
1b:ab:f2:06:83:d1:b0:07:f8:d6:b0:90:f4:2a:f2:
50:a8:c3:06:e0:83:1b:32:8e:55:82:99:60:dc:c9:
5c:6b:9f:4d:e8:61:7d:e1:59:2e:fd:66:21:31:95:
e0:b6:6c:fa:30:bb:f6:91:cb:1f:c6:22:f1:8e:1c:
04:7c:f0:d7:62:87:86:fc:ab:e4:89:fb:be:e9:6a:
99:0c:46:f4:1b:80:31:0f:fb:ac:ea:0b:a2:aa:fa:
8d:c3:77:1f:46:26:39:10:d3:f1:dc:93:27:3c:7c:
59:ab:e8:f5:cb:a3:97:63:a0:5e:41:eb:b8:16:6f:
71:82:c5:90:94:da:a1:0e:b2:14:75:bf:be:ea:13:
65:11:6c:c6:06:41:9e:0a:42:7c:69:3b:27:8c:ff:
f6:aa:88:4c:51:a4:b5:3f:63:f5:2b:1b:b8:9a:de:
79:f9:ad:05:d7:ed:80:85:45:57:0b:be:5c:2a:dd:
88:f3:a8:77:dd:51:ac:c0:d2:2a:68:1a:44:c5:6e:
22:84:45:ca:8c:89:05:09:c5:71:4b:a9:b3:7b:77:
12:be:8f:90:12:e3:50:b8:25:e2:60:76:77:1b:47:
31:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1C:5F:42:A4:A2:FD:E1:64:21:E2:9E:B7:C7:8C:AD:DE:57:D9:3A
X509v3 Authority Key Identifier:
keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:77:1c:5b:b6:7d:08:5d:16:0f:74:80:7f:0e:41:ee:6b:0c:
30:38:30:ec:70:28:f4:4f:75:4c:2f:70:62:45:15:0a:8d:3b:
a8:1b:41:d2:6f:a1:37:3d:ac:30:3b:be:7c:da:42:62:70:50:
ab:01:d5:df:82:9b:6e:d9:f5:2a:a2:22:9b:1e:fb:2c:f4:73:
dd:a6:de:25:6b:7f:f8:0b:56:66:30:18:0a:5f:00:9a:03:5e:
d8:0d:51:62:42:a3:f7:b7:63:24:f2:c1:4f:1e:85:43:6f:ff:
a4:18:5c:e7:a3:0e:75:a6:f5:29:57:4b:de:b0:78:c2:37:81:
40:78:21:ff:32:35:5d:29:3e:f3:dd:65:ba:df:27:af:7e:5b:
1e:a0:91:28:54:03:bd:8d:bc:14:72:54:22:12:c3:bf:71:4a:
7e:14:ff:91:dc:d3:2d:c6:4e:ab:40:a0:8f:0e:b5:1b:ff:32:
48:32:ca:41:16:54:25:36:be:93:10:c4:fe:59:e0:80:c4:40:
83:4f:21:da:60:1e:96:cc:2b:56:96:49:b2:41:78:14:ba:b7:
e2:7b:b5:14:e3:11:6f:b8:0b:9c:c4:37:45:6b:36:89:ba:2a:
a6:0c:4b:60:58:9d:a8:d5:1f:53:0b:28:b4:18:5e:a5:fc:39:
cf:16:be:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:24:40 2025 by rpki-client