Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
File: XM97P9h86bzpn5ALZBmdYGvxYGk.mft (raw, json)
Hash identifier: cGEStvUEPbvuG+zgZ7IA0LkPXmSKtD5M8RPssMrS8uo=
Subject key identifier: AE:A2:99:0F:20:6A:FA:A2:66:46:27:C6:1E:31:69:D4:05:5B:2E:F2
Authority key identifier: 5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
Certificate issuer: /CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Certificate serial: 0197B5C517D0CCBD60B457EE738C60B9C91F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 09:01:22 +0000
Manifest this update: Sat 28 Jun 2025 09:01:22 +0000
Manifest next update: Sun 29 Jun 2025 09:01:22 +0000
Files and hashes: 1: KOB0vwmJ7cfgZ_1WOb_Xx7LqG6U.roa (hash: a7bo8HXeX2LyPkuCveHxDVKdqnbGHzPDqS6LymzXHUs=)
2: XM97P9h86bzpn5ALZBmdYGvxYGk.crl (hash: lNsAPIurDB2kNlVn92QbC9/JPmdqBs3W6ezgP0h5lB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:17:d0:cc:bd:60:b4:57:ee:73:8c:60:b9:c9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Validity
Not Before: Jun 28 09:01:22 2025 GMT
Not After : Jun 29 09:01:22 2025 GMT
Subject: CN=aea2990f206afaa2664627c61e3169d4055b2ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:48:48:d3:a2:bd:bd:3a:f6:34:9e:28:46:43:
60:76:7e:c3:a8:17:94:4b:98:9e:62:43:51:8e:b6:
27:02:91:bd:c4:9b:13:c5:01:3c:2c:bb:ec:39:cb:
3d:1d:33:7b:b9:5d:5f:20:4d:e5:8c:61:20:89:76:
86:b7:8b:2b:4b:39:08:ca:f5:81:3b:28:d1:8f:cc:
9f:ce:68:50:3a:b0:f5:69:dc:73:80:40:55:8e:c2:
66:ba:bf:ff:ed:01:87:26:f8:0c:dd:9b:7f:5c:44:
54:23:07:97:a8:04:bd:28:43:9c:1c:20:cd:cc:2a:
76:c8:a8:8f:cb:d1:8e:68:e1:a7:18:d7:15:0b:b8:
f7:b1:21:42:00:ee:a9:75:0c:25:c3:23:7d:78:91:
06:9d:70:2f:36:19:76:16:d7:f0:7b:3b:51:b9:cc:
4d:fc:b9:a4:93:75:07:8b:9a:74:b5:00:9e:60:45:
86:db:5a:26:1f:33:54:b1:26:40:ac:6c:71:d4:8c:
e6:82:8b:cc:f9:8e:0b:52:35:82:63:cc:4d:c1:f8:
15:b6:b7:6e:72:77:63:ed:87:31:a1:41:d8:de:d3:
dd:7d:94:50:f9:c5:b9:cc:60:5f:f5:4a:a7:f1:47:
0d:37:ac:62:83:b6:d7:d9:d3:65:64:fe:7b:32:a3:
c4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A2:99:0F:20:6A:FA:A2:66:46:27:C6:1E:31:69:D4:05:5B:2E:F2
X509v3 Authority Key Identifier:
keyid:5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c2:eb:e2:37:46:2a:e1:55:98:3b:e8:29:27:da:04:71:bb:
17:82:3a:17:2a:fd:5e:65:1c:af:54:81:d4:dd:c0:1d:ff:52:
61:2c:89:38:58:eb:dc:eb:b3:0a:c4:3d:c1:64:99:eb:41:4f:
89:5b:ec:eb:8a:7e:f3:1e:db:de:b5:2d:6f:c5:d2:07:47:6b:
4c:9a:53:d6:44:8e:29:22:f5:d0:ea:46:1f:84:6d:97:1a:3e:
7f:6b:60:e7:b0:ee:60:20:5a:d2:1a:63:fe:2d:1c:6f:04:3b:
85:d1:6b:06:3b:5f:f7:01:db:b9:c1:a3:52:32:6a:6f:bb:ea:
8b:72:a1:8f:33:c2:20:73:eb:0c:6e:9f:c2:23:7c:49:b1:55:
a4:7c:f5:36:42:a0:6d:b6:56:a7:f3:ce:54:07:0e:3b:7c:b5:
87:2d:d4:6e:3e:cb:26:bc:f3:ec:21:32:ea:bf:b2:b0:e5:4c:
9b:4b:e9:12:ba:48:54:20:e6:2c:3d:5f:22:17:fd:a7:db:21:
09:c5:ca:c4:6a:bd:9d:21:06:b8:97:8f:55:58:c2:2f:7a:2c:
31:8d:bc:ec:e5:bc:cd:ed:56:71:bf:67:96:1d:74:97:4f:d7:
22:f1:56:28:3e:a3:55:f3:8f:93:08:26:a0:97:87:69:88:a0:
3f:67:d5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:21 2025 by rpki-client