Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
File: xafD9LFGk1EiAllaik-VsNa3oQE.mft (raw, json)
Hash identifier: ETxZDLFudFhe//CPaeJZLWDT9Zp1b7UOkDCvQmcw9GM=
Subject key identifier: 97:DE:D8:10:4F:C7:A5:8E:DF:3F:71:66:BD:87:29:80:58:04:C7:21
Authority key identifier: C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
Certificate issuer: /CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Certificate serial: 0197B8210757D41E300276B2F50BA09DFDC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
Manifest number: 1549
Signing time: Sat 28 Jun 2025 20:01:01 +0000
Manifest this update: Sat 28 Jun 2025 20:01:01 +0000
Manifest next update: Sun 29 Jun 2025 20:01:01 +0000
Files and hashes: 1: Bbxo5GOkMtBPV4eyDiJBtgGCAvs.roa (hash: gPTOZ/QwaGNzYqcGskaYm0Q9CUgsB/kmTCxE6lNVoV8=)
2: GkWtiMh4Kekgq83feCXLfv_pub8.roa (hash: UboiG7GPy5Vm4OyfuuuEVh7hhcZoHsmQQgbXPLJ/4ug=)
3: ScP8kW7fVZKKIlJqtoPhrGG1uQo.roa (hash: kBK8cN2i6ByxK8RJnTQxES9FzgvOd8FoOcnJVY/e4Bc=)
4: xafD9LFGk1EiAllaik-VsNa3oQE.crl (hash: mEyusj91sLKyZwZaoZRekGYQ4kMG2XPVTRRqERX9deE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:07:57:d4:1e:30:02:76:b2:f5:0b:a0:9d:fd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Validity
Not Before: Jun 28 20:01:01 2025 GMT
Not After : Jun 29 20:01:01 2025 GMT
Subject: CN=97ded8104fc7a58edf3f7166bd8729805804c721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:8d:de:a9:65:63:e1:32:39:d2:ee:36:f2:
1d:c9:53:1b:79:bd:02:88:6d:57:af:dc:b5:5c:b4:
11:71:96:d7:49:20:3c:2b:5f:33:c9:49:df:56:60:
c7:f4:ea:dc:d8:cb:4c:6a:96:2a:51:58:2a:a1:76:
c2:69:37:02:5c:49:b6:3e:c8:3b:ad:e7:97:40:83:
03:dc:03:af:f0:35:a8:08:bf:fb:3d:10:82:4d:55:
95:9c:b6:cb:31:0e:a1:16:ac:84:4e:03:ce:d7:82:
5e:e0:e3:83:ed:22:92:7f:57:33:37:07:99:46:61:
a4:c6:e6:fd:5f:42:6d:9d:a3:92:08:1a:24:80:e4:
ce:c5:1a:c8:0a:f9:50:5b:d6:98:3e:0c:99:4d:cd:
37:79:f2:64:53:aa:07:ff:a9:b5:00:ea:70:76:3d:
67:f4:a9:06:b5:f8:db:19:66:bd:99:9f:d3:a7:14:
33:7f:d6:1c:e9:2a:df:a9:b2:bb:05:ac:26:c7:0d:
07:be:c2:25:8a:21:79:99:bc:8a:1f:60:47:4a:f1:
93:da:32:f6:00:68:4e:50:de:b6:03:dd:5d:40:8b:
61:15:1c:f1:3b:4e:a1:a2:1f:49:3c:2e:03:7f:d6:
90:d0:ea:e2:00:b7:80:6e:cc:57:39:02:df:74:20:
0b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DE:D8:10:4F:C7:A5:8E:DF:3F:71:66:BD:87:29:80:58:04:C7:21
X509v3 Authority Key Identifier:
keyid:C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ee:45:6d:71:5e:2a:4c:32:1d:21:5c:1f:28:8f:fa:6f:2e:
42:e8:43:d3:32:45:9b:97:99:6e:dd:ed:eb:9e:ba:e4:de:c9:
99:19:db:25:7b:23:ec:01:0c:c0:63:6e:8a:b9:de:bd:b0:8e:
4d:41:47:58:73:96:fe:58:38:fc:37:6d:79:12:b1:69:f6:97:
02:22:06:78:7a:e9:77:d0:fd:0b:b5:aa:0a:fd:d7:cc:76:cf:
e8:28:89:3c:4e:21:9a:d4:b6:93:04:1b:32:b0:d1:2e:4a:28:
b9:4c:21:64:3f:56:04:e8:3b:b9:85:63:b7:3d:83:c6:d5:eb:
67:ca:9c:2d:a3:b1:a7:fa:52:e4:b2:c4:50:fe:ce:c9:e8:01:
5a:0c:c1:00:0c:b9:3f:f7:c9:da:98:c9:15:cd:9f:40:79:6c:
15:b3:29:15:4f:1a:2c:b7:e2:49:e8:55:28:27:c1:73:54:83:
07:2c:84:e6:f1:a1:4a:4b:71:2c:4a:31:43:eb:e7:0d:b7:ec:
14:98:37:d0:0c:c6:b9:60:5c:94:1c:fa:36:3e:93:8f:4d:40:
05:5a:c3:54:f4:ee:d3:3b:f6:d8:7d:3a:00:c5:62:1a:6d:07:
2d:85:d1:0e:b4:97:72:e5:55:75:cd:93:10:dc:51:16:7a:83:
6c:0c:86:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:49 2025 by rpki-client