Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: W4qh7EN/6OwJX98hDgjVacLUPppmiRjTr+pppGZ9+t4=
Subject key identifier: 59:01:64:A1:CF:95:87:1B:34:9D:05:D9:E2:78:73:CD:89:B2:B1:C9
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 0197B7458D930F2698D7AC25C00F354EA84E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 03B0
Signing time: Sat 28 Jun 2025 16:01:18 +0000
Manifest this update: Sat 28 Jun 2025 16:01:18 +0000
Manifest next update: Sun 29 Jun 2025 16:01:18 +0000
Files and hashes: 1: dzKdTpxKq_7se5lgqFGO0igJYGY.roa (hash: u39TgSEQ2jGGZn4qmwG4cCJAONJvQaBYbbp+0NBr6L0=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: x4DcZJnnA/UVRr8lUVTIS94Sa9iqiAj1xLcd5m3+hEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:8d:93:0f:26:98:d7:ac:25:c0:0f:35:4e:a8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Jun 28 16:01:18 2025 GMT
Not After : Jun 29 16:01:18 2025 GMT
Subject: CN=590164a1cf95871b349d05d9e27873cd89b2b1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9f:46:6c:69:77:7d:6d:bb:9c:35:b0:2e:4e:
d6:0d:27:72:84:ab:d0:3a:f8:3d:d1:2c:3e:21:c9:
8e:85:68:cf:b8:2e:68:49:34:f7:82:60:a8:42:02:
e8:11:32:7b:e6:b6:97:0a:1e:3a:74:cb:f8:bd:e1:
dc:bb:5b:0a:68:70:af:a2:f0:3c:83:cc:5c:69:e2:
b4:a9:40:2f:cd:41:5e:2e:b5:5a:3d:69:0d:9c:74:
b6:53:87:29:25:8e:14:4f:4e:70:9a:8b:d3:24:f8:
55:79:1b:1c:33:29:00:57:7b:6e:1a:0a:a9:26:92:
e5:1b:ab:6f:eb:d6:87:db:7f:a3:f4:6e:f1:3d:38:
78:50:93:82:2b:36:73:34:99:2b:e5:0d:81:46:86:
3c:3a:6b:7c:0c:f4:ee:2b:b6:8e:22:8b:ba:d9:3a:
cf:9d:62:19:76:b5:8e:a9:52:f5:13:ec:5f:35:70:
b9:a8:d0:0e:18:12:61:7e:d1:44:55:6c:12:85:c4:
7c:37:b1:5a:e6:57:62:9c:98:84:ca:6e:07:93:dd:
72:69:a0:9a:7b:6e:07:46:25:88:d1:fc:e5:8d:b0:
c5:a7:20:96:06:74:fb:3a:88:1f:6c:1c:d9:76:ba:
29:db:05:70:8f:fe:09:e1:92:a0:cb:2c:34:f8:3f:
49:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:01:64:A1:CF:95:87:1B:34:9D:05:D9:E2:78:73:CD:89:B2:B1:C9
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fe:df:d5:02:d9:10:be:e9:04:f9:98:ce:5b:67:53:7c:4d:
33:87:f1:76:6b:78:b9:3c:f1:85:09:2d:8e:0b:60:88:78:6f:
bb:bf:54:b6:91:55:aa:68:44:a6:6e:43:11:ce:5c:42:72:d8:
9e:0e:5e:af:87:26:7e:18:55:21:47:16:24:7b:b0:cd:27:1f:
c2:8e:fc:4f:4f:77:0f:4e:6c:d5:d8:c3:dc:b7:3c:89:d6:ec:
9c:dc:2b:08:6b:01:1a:eb:2b:27:9b:a4:00:fd:e7:33:87:4a:
2a:0c:d5:91:a0:6e:e2:d7:38:99:64:89:99:9e:bf:43:af:e5:
d0:c8:f5:25:85:d7:b5:c3:2f:92:d1:ae:89:49:6b:99:fa:09:
55:94:1c:54:f2:ea:5a:1a:64:aa:dd:f8:c0:51:65:fe:29:56:
94:ea:5b:1d:73:1c:9d:e1:3a:cc:82:ee:b8:5f:74:d9:9f:56:
45:c7:50:ec:d7:1e:21:b8:23:66:ed:b5:71:b6:e1:5a:83:3b:
13:4c:9b:4d:b9:f4:b0:08:68:47:4d:10:77:74:ba:d6:3d:3d:
7f:c2:55:ca:77:03:56:08:58:a1:96:72:a4:93:7f:9a:d5:6d:
90:30:eb:51:79:92:5c:4c:11:bf:58:04:9b:70:89:c5:2d:70:
77:7f:4d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:47 2025 by rpki-client