Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
File: xcSzrlnZgfJQzIfatZeFSr7XowA.mft (raw, json)
Hash identifier: cl7ZLwGaR4GEVP3dVYzPPmxCYWpEFe6vvBOa+AvEvpA=
Subject key identifier: B5:09:1F:8E:4E:99:F2:18:A5:11:B4:65:FE:5E:7F:90:C9:60:94:E4
Authority key identifier: C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
Certificate issuer: /CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Certificate serial: 0197BAEB5DA0B8D0C18E8A71766E9F6AC357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
Manifest number: 04D0
Signing time: Sun 29 Jun 2025 09:01:16 +0000
Manifest this update: Sun 29 Jun 2025 09:01:16 +0000
Manifest next update: Mon 30 Jun 2025 09:01:16 +0000
Files and hashes: 1: tSYSYm63yj3qobuZYMSr1LAsH4E.roa (hash: e9vbUkUz5x9f5ya8J4QgHE0l9ibgPIgGHQ86whMQdU8=)
2: xcSzrlnZgfJQzIfatZeFSr7XowA.crl (hash: JLB5EtjERklkUQQRo9OIRCSRhJBCDYCkj9d86X7OVuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:5d:a0:b8:d0:c1:8e:8a:71:76:6e:9f:6a:c3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Validity
Not Before: Jun 29 09:01:16 2025 GMT
Not After : Jun 30 09:01:16 2025 GMT
Subject: CN=b5091f8e4e99f218a511b465fe5e7f90c96094e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:93:ef:a1:c3:ae:46:46:95:a3:c0:88:7f:
60:87:0f:bc:d8:13:0a:26:52:17:ab:8a:e2:ff:13:
e5:42:eb:c1:aa:dc:8d:c1:f1:fb:47:8d:d1:c5:d5:
04:eb:72:56:5a:2b:2e:75:7a:05:b9:1b:5f:46:91:
8f:d7:d8:d1:67:4a:33:dd:a3:c1:07:d0:3c:45:e6:
53:e6:25:34:62:68:7f:29:f4:0a:99:f5:70:93:72:
3e:00:3c:78:8c:63:cb:31:ae:a7:ed:0c:6e:55:45:
19:e0:2a:f4:57:93:b3:e5:6e:2d:63:8f:51:4b:be:
9b:43:fd:cc:1c:dc:b3:9a:62:f8:d9:5b:16:4b:ed:
3c:8c:0d:e7:ab:0d:06:0b:f2:92:04:d5:69:a2:38:
28:a3:a8:90:26:39:da:69:5b:3c:f6:dc:5c:87:a9:
51:7a:16:17:7d:fc:6a:13:a5:c6:72:5e:63:01:4a:
5f:ec:6a:88:48:a9:21:7e:0c:c6:9c:1c:ee:83:d3:
43:81:d1:d0:5d:24:e1:82:05:23:e1:1e:dc:79:6c:
17:76:7a:84:ae:22:76:24:b9:d4:32:0e:85:5a:b2:
06:f6:07:17:3f:f5:23:41:94:a8:90:43:00:c3:a6:
ad:05:d6:89:58:59:e8:cf:e6:86:21:4d:10:37:1e:
92:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:09:1F:8E:4E:99:F2:18:A5:11:B4:65:FE:5E:7F:90:C9:60:94:E4
X509v3 Authority Key Identifier:
keyid:C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:71:3c:a2:d3:dc:4e:4c:73:d0:4f:f0:6c:3f:9a:b5:dd:57:
63:6c:fd:01:c4:61:48:fe:5a:f4:ef:a1:db:16:2b:ec:5c:0b:
7f:ce:dc:88:81:1c:99:a3:06:0a:d9:93:ad:17:9b:6b:52:5d:
7b:f6:9d:2a:94:2b:13:b5:4c:fb:2e:ad:12:0b:2c:0e:a9:54:
0e:72:5c:bc:14:c4:63:59:51:48:84:e5:8c:ae:26:18:91:a7:
b2:0b:ff:30:7f:ed:94:d6:90:25:00:42:17:2e:b4:56:9d:6c:
fc:44:44:18:fd:5b:3f:09:53:45:16:c4:4f:15:b1:83:dc:4d:
8b:ad:f7:f2:7d:9b:1f:93:d9:76:86:fb:77:f4:b8:43:1c:1f:
54:1e:f0:b2:62:c8:e2:eb:5b:5a:ee:d4:b6:fd:e8:bb:18:14:
3b:e3:da:96:c8:75:98:26:d0:50:e2:cb:19:f1:e6:11:8e:d5:
66:ab:e8:46:db:c3:1f:02:34:fb:55:7c:80:f8:27:34:ad:88:
5e:9f:67:4f:31:94:83:f0:8c:8f:1e:3a:a7:a6:3c:e4:b6:e6:
ce:18:ed:74:d5:e3:3d:65:08:78:a7:06:8a:b6:6c:5a:e8:b9:
8b:9e:84:0e:0d:18:f5:35:fb:67:a6:6c:71:c2:c8:6e:16:6d:
5e:e8:f4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:16:38 2025 by rpki-client