Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
File: XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft (raw, json)
Hash identifier: ubQCsld7DGi7AhfbnRmec+E/ff5qusl+3RvPaR39hdA=
Subject key identifier: F0:F9:49:DA:7A:92:43:D6:53:0E:66:8B:8B:47:56:A0:CE:66:72:FC
Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Certificate serial: 0197B5FC7033CA3199AA37AE27DC6F682B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
Manifest number: 12EF
Signing time: Sat 28 Jun 2025 10:01:49 +0000
Manifest this update: Sat 28 Jun 2025 10:01:49 +0000
Manifest next update: Sun 29 Jun 2025 10:01:49 +0000
Files and hashes: 1: K_AT4bSuNVVRHY1_UQf9p3oUmaU.roa (hash: UUfyHhYh06/+OIKNXsCgKD2Y5o+FiTgolZxplZXidG4=)
2: XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl (hash: CuNOxt2nw07BajPO/FsE+nucWs82G9+M9zdA+NWRivw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:70:33:ca:31:99:aa:37:ae:27:dc:6f:68:2b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Validity
Not Before: Jun 28 10:01:49 2025 GMT
Not After : Jun 29 10:01:49 2025 GMT
Subject: CN=f0f949da7a9243d6530e668b8b4756a0ce6672fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:04:c1:06:89:29:c4:43:d7:ca:a3:cf:13:
ff:8d:7e:db:ae:a5:1a:7d:d7:8a:39:b4:69:49:df:
fc:89:be:9a:67:db:60:06:19:61:18:3b:0b:3b:8a:
45:30:aa:5a:f4:c0:17:87:8f:0e:84:ba:6d:13:67:
11:f0:cb:b1:60:9c:0e:0f:bb:4b:35:5c:65:80:87:
9e:22:1e:4f:bc:e7:22:01:6c:63:f8:b5:a1:2c:f5:
d7:d7:81:28:a8:ab:39:5e:76:d9:67:47:44:d0:f5:
4e:28:e5:d4:9c:79:11:b6:e9:0a:57:b4:c7:1a:36:
4a:de:87:50:05:6a:57:51:eb:9d:23:2c:e4:53:b9:
36:a5:87:b3:aa:ef:04:78:c8:d4:05:ef:70:4f:ec:
07:e4:70:36:8a:d0:ec:17:f3:75:60:c9:f9:da:7a:
24:a5:fb:67:3d:7d:26:33:3f:28:64:22:41:54:98:
9a:bc:55:9e:67:bc:07:6e:32:bc:5f:b3:98:39:24:
95:b7:ff:35:fd:5e:fe:9b:da:58:0b:cf:9c:04:8f:
90:4c:7d:d7:9a:d4:44:fe:e5:a2:c3:0b:1b:71:ce:
78:8a:11:df:77:5a:5e:84:97:de:aa:3a:b2:b2:0e:
b6:bf:dd:4b:7f:52:49:e0:7f:93:42:28:b5:06:6b:
d3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F9:49:DA:7A:92:43:D6:53:0E:66:8B:8B:47:56:A0:CE:66:72:FC
X509v3 Authority Key Identifier:
keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b6:77:b6:92:34:d1:57:6d:32:94:be:88:1f:4f:8d:7b:7c:
d2:9f:10:2e:f4:7c:43:2e:46:d0:58:f5:34:02:86:ac:ae:14:
d7:99:9b:f1:2a:a1:85:08:43:fd:4f:3c:5a:22:9c:d8:7f:0f:
63:8a:03:0a:6d:07:c2:ef:06:5b:83:27:02:33:f9:f6:6c:cc:
9a:68:d3:bf:41:91:84:ec:0d:a0:93:97:de:69:9f:cb:db:fa:
d3:bc:92:c1:82:5a:09:6a:34:1e:30:e3:6a:66:d5:f2:f9:ba:
93:79:7d:11:69:4e:59:dc:3e:9d:37:2a:4b:45:a3:e5:51:cd:
fe:f6:c6:2c:b9:45:8a:7c:35:37:ea:84:70:06:70:13:ca:80:
80:62:33:09:72:3e:7a:e6:c4:2b:08:d7:a4:74:e0:6f:70:60:
95:71:1d:0d:7d:1f:52:9d:37:b7:15:cc:9f:7b:84:b1:f0:6b:
02:6a:66:83:48:4d:31:00:50:56:50:5c:82:e8:c8:a7:4f:02:
ce:e8:28:60:27:01:7f:20:d3:c4:c9:e8:f2:84:68:2b:29:61:
38:97:55:63:a4:22:95:1e:27:e8:4d:09:9a:13:af:95:43:94:
43:e5:2f:51:f5:a6:d1:98:59:0c:6b:a2:57:40:7f:59:8d:8d:
5a:28:b6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:12 2025 by rpki-client