Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: 48p86LIuSBRnd9CkMr3g6jFaID3evNCnx0gKbPS4P3k=
Subject key identifier: E3:F3:0B:5C:8E:D9:03:0E:CE:1F:45:DD:A0:5D:C2:6C:82:7A:11:71
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 01974EC55B025E75EB3FE8A94B6FECA62936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 09:00:46 +0000
Manifest this update: Sun 08 Jun 2025 09:00:46 +0000
Manifest next update: Mon 09 Jun 2025 09:00:46 +0000
Files and hashes: 1: 0vF0gFHCKbav6GbEKyJcrztoM70.roa (hash: 3GJJhs9MQpGvWXk1FqNRB7SXiQvuJwcBJyHinoV355o=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: NNzn5WaaLVj6p+WVksWwmExUeAHzmCZ+urxDOMUt//s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:5b:02:5e:75:eb:3f:e8:a9:4b:6f:ec:a6:29:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Jun 8 09:00:46 2025 GMT
Not After : Jun 9 09:00:46 2025 GMT
Subject: CN=e3f30b5c8ed9030ece1f45dda05dc26c827a1171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:8f:44:4d:71:51:bc:d5:ab:ab:c6:0f:cf:
89:10:0f:29:4f:41:46:c7:29:1a:85:c9:c3:8e:5d:
fd:7b:51:0b:1f:d6:c2:38:ac:eb:3c:93:95:59:e4:
45:38:04:21:f3:ce:f8:3b:00:10:fa:2e:44:38:d4:
3a:c0:a7:d6:ee:d2:36:9b:86:17:3d:3d:39:f3:ca:
a3:fd:dd:fc:b1:ff:1f:cf:42:29:e4:23:96:a4:cd:
6e:86:ea:80:9d:9c:d9:10:a4:f9:a8:f0:b8:18:9a:
aa:c8:fb:69:8d:70:1d:95:c2:c6:aa:e3:c3:0c:6a:
7e:dd:1d:09:f5:b1:61:01:03:90:5b:5c:91:6b:aa:
9c:f0:69:a1:f5:72:f9:25:1e:90:91:c4:4b:10:79:
ae:22:b6:df:4c:df:92:15:f2:c1:15:6b:3c:bb:5c:
5b:3e:fc:ba:ff:87:42:de:ff:3e:b7:b9:9b:2c:5b:
34:c9:9f:44:af:45:8f:1e:41:bb:cb:16:14:fb:b0:
c0:62:7d:cd:8e:47:8a:31:55:b0:a3:d4:26:47:41:
8e:5b:0a:da:bf:74:50:ab:2f:32:27:d9:14:96:97:
6b:56:84:bf:42:e7:96:2e:f8:ce:0c:53:6c:62:d0:
c8:4e:5d:fd:eb:68:4d:74:f4:60:43:68:a1:62:0e:
a4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F3:0B:5C:8E:D9:03:0E:CE:1F:45:DD:A0:5D:C2:6C:82:7A:11:71
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:84:66:51:c6:5f:55:c4:b9:ff:51:6d:83:1f:a2:74:28:d4:
5f:8b:10:94:b8:73:93:03:bd:bf:76:84:e3:f2:f0:83:10:25:
60:b2:14:35:11:2d:c5:e4:49:e1:7f:63:1b:45:46:8b:86:35:
a3:e4:f3:11:ba:76:c6:38:1d:22:59:3d:68:31:90:19:bb:63:
87:82:1c:a0:e6:0b:20:d1:17:ef:84:68:84:a9:03:17:48:56:
3e:18:91:08:e2:18:be:15:02:b0:cb:95:77:6e:30:e4:db:88:
bf:d4:4b:be:39:b0:18:3a:30:28:a8:9d:25:9e:66:37:67:36:
16:ef:e9:79:7d:b8:72:09:05:70:45:99:78:b0:b8:5c:c9:3f:
09:42:f1:55:f4:f4:6a:10:56:0f:58:6a:e0:fa:55:7d:c6:e8:
1f:76:64:2d:66:37:5c:0d:d7:c8:44:6f:9c:e8:8d:11:9c:ba:
da:54:0f:01:e8:ff:c8:e1:6c:0b:51:e2:ec:ad:26:7a:fd:c5:
9e:a1:1c:5e:95:54:bd:70:38:ca:42:b2:0d:07:61:48:d2:72:
91:cb:fe:ba:b5:35:24:96:41:05:15:9e:0b:22:3c:18:c4:d1:
50:31:4f:b5:4f:69:b6:51:e7:ec:50:95:91:b6:95:85:87:68:
aa:4d:23:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:06:05 2025 by rpki-client