Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
File: XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft (raw, json)
Hash identifier: ZexcXytzWfXXnCkDZAaUhEOdpPGXOaHPh6KQAQuNV5E=
Subject key identifier: 0A:60:FD:F0:84:11:0C:A7:67:A8:3A:59:DA:C2:7F:B4:EF:2F:2D:48
Authority key identifier: 5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
Certificate issuer: /CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Certificate serial: 0197B7457542E43731EE3669B26124C2C32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
Manifest number: F8
Signing time: Sat 28 Jun 2025 16:01:11 +0000
Manifest this update: Sat 28 Jun 2025 16:01:11 +0000
Manifest next update: Sun 29 Jun 2025 16:01:11 +0000
Files and hashes: 1: XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl (hash: 5rwwhuOZpr2l3Bu1SQkaRSWNQCIaCvUyhIN4xM/vKPs=)
2: sHWJgB25eZ5MsxkzvHCaC9Q9eBU.roa (hash: tfZrpnb6Dc4xLEKe9XCNdEh3R+ehL6A7wZM06Ogyh8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:75:42:e4:37:31:ee:36:69:b2:61:24:c2:c3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Validity
Not Before: Jun 28 16:01:11 2025 GMT
Not After : Jun 29 16:01:11 2025 GMT
Subject: CN=0a60fdf084110ca767a83a59dac27fb4ef2f2d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:cc:e2:69:0a:eb:e5:68:8e:bd:ae:a9:be:
15:9e:bc:b5:68:f3:f0:9d:2f:5c:da:d4:dd:a9:12:
7d:73:62:3d:74:03:55:ed:4d:6a:75:77:e3:c9:19:
97:5f:71:2b:1b:7b:50:d5:00:82:1b:62:38:cd:b0:
b2:53:42:62:70:1a:17:56:aa:b8:88:60:7c:c2:f4:
9f:9a:bb:30:2e:6d:e9:a5:10:13:37:74:8e:b1:d8:
3c:ff:7b:e7:6c:29:3c:f9:20:ff:c0:12:93:5c:7d:
11:52:5e:25:3f:69:21:61:6a:26:72:61:10:88:3b:
ad:de:2e:d7:29:e0:c3:bb:47:69:39:a4:cf:75:70:
a7:8a:92:c7:cc:d3:a6:d7:d5:15:6b:c6:d7:6b:b7:
a1:77:26:10:1a:6b:bd:3f:e1:45:8b:60:ae:65:cd:
67:35:bf:19:ea:de:bc:64:db:61:dc:ee:64:86:27:
61:cb:40:5f:aa:1c:26:f5:48:8c:19:ad:5c:36:27:
14:bf:2d:a7:df:2d:5d:f9:ab:09:98:16:95:5c:86:
4e:ac:e4:b2:1b:19:93:6b:85:96:62:39:12:0c:b9:
01:65:da:a8:8d:21:49:ac:d1:49:37:77:63:8e:4b:
8b:90:bf:4b:90:8e:ec:39:13:86:32:6e:0d:8e:28:
41:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:60:FD:F0:84:11:0C:A7:67:A8:3A:59:DA:C2:7F:B4:EF:2F:2D:48
X509v3 Authority Key Identifier:
keyid:5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:92:ce:d7:8b:5b:64:c0:57:84:fa:07:c3:2e:75:06:f0:88:
4a:55:7a:35:fd:b6:e6:c7:91:5a:1c:cd:e8:05:cd:2e:39:bc:
3a:2f:e8:52:bd:95:a2:40:83:99:9f:a1:97:51:6f:62:1c:b6:
f6:71:42:79:14:98:d3:00:31:3b:0d:66:55:40:7e:a7:76:77:
2d:2e:35:ed:b3:3b:04:9b:83:59:7a:4b:c7:fc:0d:e0:74:f8:
61:73:ae:76:52:60:1e:65:5c:f0:37:51:af:5f:71:b6:e6:17:
83:79:9a:7e:ec:d6:8b:ea:91:7d:1e:c6:45:44:5b:c1:36:f4:
ee:6f:d9:52:7c:97:fc:71:a3:53:99:06:85:c7:0a:52:71:9f:
25:24:35:c3:39:84:37:fe:83:23:32:ab:4e:33:58:9e:85:fb:
d3:2a:c9:01:ca:e7:5e:c7:0e:10:3f:9d:59:16:83:ed:07:1a:
1a:db:e8:60:07:70:51:51:68:45:50:93:75:f7:16:a2:04:e0:
c1:29:f6:fd:4c:79:22:2f:86:2c:50:dc:b4:e9:36:c0:ec:66:
4c:f3:3b:29:3f:dc:bd:a6:0f:c0:d2:ee:ee:a1:ed:b1:c3:c5:
f7:84:0e:1f:15:ae:e2:9d:0f:95:f8:a6:df:71:e2:49:87:77:
75:3d:62:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:00:22 2025 by rpki-client