Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier: PWUoP2QQg/XOkZaGN3WgkyKPCd6/KHif27+yG9VZjjU=
Subject key identifier: 69:06:31:7C:C2:95:0E:A7:11:B2:E3:CE:9C:81:20:61:B3:8E:78:56
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 0197C9826DF83186E5B9C3F7CD6EE4B449B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number: 0473
Signing time: Wed 02 Jul 2025 05:00:57 +0000
Manifest this update: Wed 02 Jul 2025 05:00:57 +0000
Manifest next update: Thu 03 Jul 2025 05:00:57 +0000
Files and hashes: 1: ZoFV4x2tyXT6J_JK-aC-19W61aE.roa (hash: yCSIbKlCnPHK7NkVGp5Sz1FBU5Gf4cXxoSVyvZfoNAM=)
2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: UHxieg0k0fm4oVTPS8leSlOAFYCaEScfdM44HqCfmLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:82:6d:f8:31:86:e5:b9:c3:f7:cd:6e:e4:b4:49:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: Jul 2 05:00:57 2025 GMT
Not After : Jul 3 05:00:57 2025 GMT
Subject: CN=6906317cc2950ea711b2e3ce9c812061b38e7856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:a6:ea:e0:61:a6:f6:05:95:43:22:95:05:
49:0d:15:e7:32:ea:f3:73:26:99:54:5d:2c:30:96:
06:0b:44:8c:81:75:b4:e9:5b:1a:f0:06:d9:f3:00:
2b:8b:56:cf:b9:e7:4d:d0:c8:1d:f9:ce:28:b5:0d:
28:ad:23:dc:e3:46:5c:0a:08:4a:d4:b2:be:ea:f8:
05:93:b8:17:67:44:f3:94:7b:04:ae:de:1f:f1:6a:
d9:b2:dd:c5:80:cf:1a:ea:a8:f4:08:1d:a4:4a:fb:
f7:e3:a8:c1:0f:65:a3:ba:e1:c4:ec:9b:43:f8:bf:
59:ff:3f:90:34:eb:a1:b0:0a:cd:ad:27:99:a3:2c:
03:b2:3b:e5:ad:ca:bb:31:a1:24:7e:2f:21:ce:17:
33:8f:12:7a:7b:fe:e1:02:db:65:81:90:b1:79:34:
0e:d8:4f:91:15:f1:96:44:43:6d:e3:1e:71:30:87:
97:13:a1:a2:bd:e0:37:1e:b0:01:4c:da:cc:b0:dd:
d2:57:cb:85:79:30:07:70:d2:98:de:8c:dd:fb:23:
23:b1:b7:ec:4f:42:45:c8:bc:61:25:fa:e5:97:f9:
2e:a1:7c:ce:e2:39:56:07:06:e6:34:1e:9d:67:6b:
ad:94:5e:4e:f9:0c:ae:ec:a4:52:d0:4a:b7:9b:a6:
bf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:06:31:7C:C2:95:0E:A7:11:B2:E3:CE:9C:81:20:61:B3:8E:78:56
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:91:ab:07:ac:f5:d6:15:9e:6f:b0:59:9c:86:26:07:50:75:
bf:9f:b9:00:c4:00:30:bf:74:1a:b7:68:80:9a:eb:75:97:8f:
eb:64:ad:3e:c2:f5:c8:9d:ca:d4:cb:a8:8c:b4:c0:6c:32:ca:
cc:8b:c4:cb:d0:9d:74:f6:71:ef:9d:1e:bd:73:af:c6:dc:e3:
d6:55:3d:8c:cd:d3:53:3d:67:29:12:ce:18:81:26:fb:42:9c:
b3:6c:d0:4c:f3:ab:b6:94:e9:15:b8:c5:0a:6d:17:b5:8f:f9:
45:fc:9c:94:83:63:cf:ed:42:69:08:b1:87:94:af:93:06:4c:
59:2e:1f:1f:94:34:1d:ee:47:87:d6:6a:6a:66:ad:62:cd:15:
af:e7:e0:04:18:77:61:08:94:7f:dd:82:4d:63:f1:b5:be:39:
c8:43:8c:42:bc:26:ff:34:5d:4d:37:b9:fe:a7:56:8f:0f:28:
15:89:5a:2c:bf:17:b7:25:f7:10:bc:31:54:62:9f:06:90:ed:
04:04:6e:98:87:fb:05:68:c9:90:8f:7d:85:f4:6a:d7:e1:28:
8c:d6:71:32:e3:fc:24:d9:b1:22:03:d4:65:86:08:51:1d:a1:
37:48:53:c9:58:55:77:e5:34:46:65:87:23:3b:7b:83:c6:e4:
f0:a9:c3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:44:49 2025 by rpki-client