Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
File: X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft (raw, json)
Hash identifier: dCBM2hxGSiE8Ol5VP0eu3wCyUavwJ+m2gsKk8MnkBng=
Subject key identifier: 6F:48:CF:96:BB:EE:51:6A:D8:CF:97:37:E0:CA:69:35:99:A6:60:5E
Authority key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
Certificate issuer: /CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Certificate serial: 0197B77C6161137CBC25935290B0E1F32D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
Manifest number: 04B6
Signing time: Sat 28 Jun 2025 17:01:11 +0000
Manifest this update: Sat 28 Jun 2025 17:01:11 +0000
Manifest next update: Sun 29 Jun 2025 17:01:11 +0000
Files and hashes: 1: Ngryz_JDCTWxsZghCdDW2bggtbY.roa (hash: OLqWc5pDqp3VYp84vSGxFeZ1JPG4ouAU9S0kjVUHjeY=)
2: X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl (hash: JlbGSPouzk1X3Y3fT8wBjj8qqaKKfm66bFCUqqwqTmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:61:61:13:7c:bc:25:93:52:90:b0:e1:f3:2d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Validity
Not Before: Jun 28 17:01:11 2025 GMT
Not After : Jun 29 17:01:11 2025 GMT
Subject: CN=6f48cf96bbee516ad8cf9737e0ca693599a6605e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b5:04:38:d3:44:e4:b1:00:d7:d6:50:c2:37:
43:84:55:eb:cc:74:39:47:cc:09:ac:3b:7c:03:07:
75:77:9d:a8:4c:81:0b:83:c7:99:e3:e3:b8:62:2d:
47:17:84:b5:b1:7f:0e:6e:bd:c8:94:30:77:f2:95:
fb:fe:cd:f2:38:17:a8:3e:e7:3c:4c:f9:13:be:d6:
02:87:94:b3:8a:56:8d:be:9d:55:81:1b:fc:f7:7d:
bb:88:07:68:49:2b:c5:7b:f8:ad:4c:ce:de:03:60:
47:7e:16:d9:12:21:15:07:8a:3c:04:93:3c:0c:2f:
7a:cc:4a:e0:46:38:b7:8f:09:a3:c4:80:0b:37:b9:
7a:4e:73:fd:ad:5f:e2:02:36:92:50:2e:0f:4b:51:
24:e8:1a:2e:53:db:8b:74:37:2b:be:09:cf:d3:9d:
fa:0f:a1:ae:62:fe:39:e0:83:25:15:f3:c8:9e:83:
1e:f6:d8:c6:d6:32:ce:8d:2f:67:df:c0:13:ae:53:
62:97:ee:8e:36:e7:d9:95:c7:21:b5:6b:88:e1:0b:
38:ee:d0:42:8f:64:c0:c1:82:f4:91:b2:66:92:c9:
7a:00:47:6c:5b:08:99:1d:7d:1b:60:93:fd:1c:56:
df:e0:77:b9:00:02:80:68:c0:ac:bf:38:7b:96:43:
42:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:48:CF:96:BB:EE:51:6A:D8:CF:97:37:E0:CA:69:35:99:A6:60:5E
X509v3 Authority Key Identifier:
keyid:5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8e:11:46:ec:1b:45:40:2c:1e:f0:30:70:ad:80:10:69:59:
4f:bf:dc:dd:ed:f3:33:fb:77:13:6a:10:62:ed:52:2d:17:43:
f4:ba:e9:1f:30:e6:55:42:de:b5:f2:11:94:20:a3:13:cf:78:
1c:95:c8:29:bd:e3:4a:65:2c:13:87:6b:3d:6e:2c:84:45:a5:
76:c3:30:51:9d:81:5f:fa:9f:9d:06:d9:ba:e6:b8:8e:09:dd:
8e:e8:28:87:9f:ee:c2:43:a2:d7:db:03:17:8d:2a:b4:aa:38:
54:a7:d7:44:ca:b0:d6:1b:9f:1e:1b:a6:60:59:c8:2e:35:a5:
80:99:a9:b6:2a:39:e8:43:17:30:ff:4a:f4:ed:8e:62:17:ab:
cf:06:79:2b:8c:11:60:40:83:10:f6:46:2f:7a:cd:2d:99:a4:
ba:56:88:b5:8a:0e:87:ba:bb:d3:59:3d:97:7e:33:32:06:a0:
75:64:22:ac:77:27:c0:1b:39:96:6a:6a:70:55:a9:93:7b:80:
68:f3:f8:25:35:0d:70:c6:80:84:8a:e3:d8:77:f7:4d:69:24:
84:80:7e:6c:f2:64:46:db:4d:72:94:80:e5:d7:41:92:1a:a5:
05:dd:fd:a6:e9:04:3a:ee:0c:06:bb:ab:96:24:55:0f:6d:af:
38:fe:aa:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:18 2025 by rpki-client