Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
File: XqFlPhd6opVUAIBcjHW9DWhYOvw.mft (raw, json)
Hash identifier: 2D5I0lfcHDpbaIOVKDGjejKHE22uU9M+FENUcR3aiZg=
Subject key identifier: 77:24:6D:27:BB:DC:5F:C7:40:38:EE:26:17:92:6A:19:3D:ED:2F:C2
Authority key identifier: 5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
Certificate issuer: /CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Certificate serial: 0197B6D763A4769221A459B1AF39DD262EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
Manifest number: 0A45
Signing time: Sat 28 Jun 2025 14:00:58 +0000
Manifest this update: Sat 28 Jun 2025 14:00:58 +0000
Manifest next update: Sun 29 Jun 2025 14:00:58 +0000
Files and hashes: 1: XqFlPhd6opVUAIBcjHW9DWhYOvw.crl (hash: V3KFIhqSm1ANADqYNQ7+SbvLVDyZSgR2eqHYEAbhH1g=)
2: pG0gZB0nkw3GnTji0o-IVbuNrD4.roa (hash: viA8g+053tZ6I/BKlBgt30tnVs0+WwkriBcMwHPLKm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:63:a4:76:92:21:a4:59:b1:af:39:dd:26:2e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Validity
Not Before: Jun 28 14:00:58 2025 GMT
Not After : Jun 29 14:00:58 2025 GMT
Subject: CN=77246d27bbdc5fc74038ee2617926a193ded2fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:a9:39:fb:9d:4a:5c:7e:8e:40:50:15:32:
37:4e:8d:97:be:3f:de:20:bf:68:46:fd:7f:c9:80:
4a:a7:fa:3d:d8:18:af:ae:29:98:dc:0e:c5:be:f3:
5c:6b:29:b0:fd:4c:96:b0:28:be:68:23:ed:19:16:
c3:bf:b2:ac:12:07:6e:b1:e5:43:5e:ba:3a:db:a3:
f4:a8:fe:2a:d6:9c:00:f0:ca:8e:c9:30:de:ff:e1:
c2:11:7e:45:3b:f1:c0:c2:82:f9:1c:06:d0:08:eb:
4a:76:1a:4e:32:8e:c9:99:4d:99:dd:2f:85:2c:99:
ec:c4:1c:cc:5c:eb:cb:a3:c5:0f:47:b0:4b:e6:7e:
72:a8:c1:9e:c6:05:1e:aa:91:a5:2b:98:73:30:ce:
2d:1d:83:94:4d:41:6a:17:12:ca:96:d4:da:6c:ea:
8d:9b:f1:ce:b4:b8:25:0b:18:18:49:15:c7:e7:f6:
2f:e7:ee:54:ba:4a:ad:db:59:f3:bd:48:86:5e:14:
32:56:1b:5a:8b:ca:e7:ca:bb:fe:4b:16:ef:d0:ca:
08:84:9b:7e:4e:28:a8:82:4c:4d:f8:a1:4a:c0:ba:
47:33:cc:70:69:e2:d5:90:c0:7b:07:65:23:07:3b:
dd:0b:c6:77:df:cf:db:0b:07:62:92:db:5a:67:78:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:24:6D:27:BB:DC:5F:C7:40:38:EE:26:17:92:6A:19:3D:ED:2F:C2
X509v3 Authority Key Identifier:
keyid:5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:85:92:8b:5b:f6:55:66:27:d8:e0:f6:d8:df:80:ea:71:78:
58:b4:61:bb:ba:04:1e:43:3d:bc:cf:0e:43:5d:9a:0a:16:4e:
aa:de:69:41:4b:20:3c:a1:44:e2:da:f0:08:92:e8:84:b0:fd:
41:41:5b:e5:e8:61:d1:e1:f2:7a:87:5c:ca:94:6a:eb:f1:ac:
6e:2a:91:e8:85:51:ba:9a:39:cd:75:17:0f:6a:06:fc:20:91:
08:30:28:8a:9b:6a:4e:2e:f2:c6:d1:42:70:d4:f2:36:ad:9c:
b0:f3:29:80:fa:78:2c:a5:05:cf:9c:bf:19:47:d5:26:1e:40:
e0:08:ee:a3:5d:c0:4b:2d:7e:f3:5e:b0:f7:0a:f5:e2:60:78:
32:be:18:8f:0b:27:09:b0:68:1d:28:70:f9:a6:85:13:7f:31:
d4:8a:18:17:e0:35:47:a6:39:1e:31:70:d3:c5:62:00:68:76:
d6:6b:18:ab:98:63:ab:31:77:fa:43:bd:b8:d0:60:ac:8c:ed:
80:92:aa:e4:f2:e6:27:da:2c:7f:7e:d9:2d:93:20:67:f9:82:
ce:2a:2c:dd:b4:78:65:18:ae:2f:a3:5f:4e:c6:c3:3e:5d:f6:
ff:29:5e:24:53:3c:62:7b:5e:94:91:4f:99:cc:38:72:1e:ed:
98:e6:22:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:39 2025 by rpki-client