Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
File: XLeTntcMiuoxvkk-eOiPSGH1MSE.mft (raw, json)
Hash identifier: LiV6yal95MQF5Eb53ToMuZM+oJECuqzHhzgXp1CxbOE=
Subject key identifier: 91:37:18:70:BB:42:11:1F:7A:DD:DC:72:CE:FE:F8:D4:EB:2F:74:85
Authority key identifier: 5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
Certificate issuer: /CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Certificate serial: 0197B7452BF05C7D5AA568AC1E9AD40AF40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
Manifest number: 0C9A
Signing time: Sat 28 Jun 2025 16:00:53 +0000
Manifest this update: Sat 28 Jun 2025 16:00:53 +0000
Manifest next update: Sun 29 Jun 2025 16:00:53 +0000
Files and hashes: 1: MNNUG7s-7ylAPjfRFELlWbvHxbM.roa (hash: kXXZW/oTF8aLgFWhuw6Ll3MRGWDGpMBRJDUoq94IuRQ=)
2: XLeTntcMiuoxvkk-eOiPSGH1MSE.crl (hash: nBXC6Fec0kbQEzgGuG31CZ7ww3W5YUC0VnctwLZbG2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2b:f0:5c:7d:5a:a5:68:ac:1e:9a:d4:0a:f4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Validity
Not Before: Jun 28 16:00:53 2025 GMT
Not After : Jun 29 16:00:53 2025 GMT
Subject: CN=91371870bb42111f7adddc72cefef8d4eb2f7485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:17:60:82:e6:32:d5:64:b4:48:ee:f2:41:
0d:9c:3e:1f:a1:b0:4c:7e:ba:df:da:be:1a:74:a0:
0f:58:8b:d9:d9:2e:45:1c:02:1b:f3:0d:db:2a:28:
65:12:31:24:2f:f4:3a:83:72:82:83:b7:d8:b3:31:
f8:35:f8:28:6c:5b:4a:96:e9:52:e3:b3:f4:c6:5c:
27:02:ce:69:ad:34:84:9d:aa:ec:31:6f:65:39:9a:
ff:b9:31:c6:11:b4:9f:c0:e9:8e:54:41:7f:01:40:
ba:40:8a:a9:4e:12:cc:31:4d:a5:00:e5:d8:8a:24:
8a:1f:fb:30:03:7b:c8:df:c8:96:7a:3e:f2:b3:42:
df:2c:ed:8c:d6:21:4e:e7:90:91:b4:6e:da:cc:d0:
b8:ab:56:81:b5:13:50:55:9e:04:4a:b4:a4:5d:fd:
f7:77:fe:60:4c:e7:85:e9:6f:1c:a1:cd:31:49:56:
ad:63:84:6e:f2:ef:3a:46:1a:6a:3e:f2:b2:42:f5:
33:12:a3:8f:e4:b3:54:1d:fa:81:4a:a0:9f:a7:33:
49:ca:24:f2:50:1c:a7:d3:7a:d0:b9:a3:f3:3a:17:
f0:65:b3:95:4a:c3:14:d1:7f:a7:61:77:83:59:a3:
74:51:d3:bd:65:74:24:68:8b:4c:c9:60:36:52:f6:
0d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:37:18:70:BB:42:11:1F:7A:DD:DC:72:CE:FE:F8:D4:EB:2F:74:85
X509v3 Authority Key Identifier:
keyid:5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ba:db:12:15:bb:f6:2f:9f:24:f8:bd:d9:d2:a2:83:a9:df:
72:20:8c:dc:6a:36:d3:9a:85:44:5b:f0:d4:8e:2f:38:18:9d:
6e:8d:01:85:ae:a9:16:75:a2:6c:b3:49:9c:43:b9:78:a9:f7:
55:39:60:7b:ed:38:1a:16:08:53:64:73:98:5c:f0:3f:7e:e8:
db:f6:18:1f:dd:d1:dc:ef:63:0a:ce:39:bb:b7:24:97:28:80:
7a:dc:24:21:65:98:8d:50:42:a9:13:ce:af:18:05:6a:eb:7f:
15:9e:29:d1:b4:4c:c4:ba:7a:d6:4f:ac:1b:7c:f3:7a:40:90:
cb:a7:14:f7:b2:68:cb:7c:25:f7:49:73:ef:10:22:bc:a3:6a:
20:0f:96:55:1d:a9:b8:30:d2:00:10:f1:60:33:7e:ec:53:a2:
bd:2c:59:c6:7b:ac:6f:5c:0d:58:2d:9c:54:96:98:c1:ca:7d:
5c:89:af:ea:17:df:1d:ee:15:ff:ab:0b:68:7f:dc:30:82:ff:
a4:7c:27:10:c5:d9:24:4b:03:09:a9:7b:c5:83:6a:c7:e8:48:
13:04:7d:4e:3c:0f:00:ab:80:23:d6:8c:36:79:e3:45:29:b5:
50:fd:07:93:6e:33:c2:ee:eb:79:32:41:33:f0:31:af:4c:fc:
28:1a:16:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:37 2025 by rpki-client