Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: mjG/JGo8WqcwDUkuOAEi8tpVI0rU1XW+hxB27P8gj30=
Subject key identifier: EF:EA:65:92:87:A5:41:57:E4:E7:99:F4:63:9B:8C:AD:BC:66:C9:26
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 0197B5FBAEBE44894D4364F327764F74613A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 10:00:59 +0000
Manifest this update: Sat 28 Jun 2025 10:00:59 +0000
Manifest next update: Sun 29 Jun 2025 10:00:59 +0000
Files and hashes: 1: R0Y_8680398wT7CzR2ae2QTPR2w.roa (hash: T+VBi4m8dsst25C1j7+k5KuFCU7EfyAt7PpnICFW3s0=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: /75OKVdDA6fhPxDMOuHPR9xl+qzX80WrFbQw1ySDG4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:ae:be:44:89:4d:43:64:f3:27:76:4f:74:61:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Jun 28 10:00:59 2025 GMT
Not After : Jun 29 10:00:59 2025 GMT
Subject: CN=efea659287a54157e4e799f4639b8cadbc66c926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:e5:54:7e:d5:01:79:39:f3:7e:bc:69:2b:
d4:08:c0:70:59:9d:8d:98:1e:de:46:e0:0c:de:64:
3b:c1:0b:f9:be:c1:55:34:f3:2f:35:84:f5:15:d3:
66:b8:e9:1e:57:bf:ac:8f:8d:ec:18:fa:a7:68:79:
71:60:af:70:27:3f:d4:97:22:00:f4:ca:30:37:19:
24:54:54:88:7b:4d:92:67:59:49:17:1f:24:f3:6c:
26:71:ec:c2:f0:48:19:91:15:bf:20:83:70:c2:2b:
1b:13:87:c7:4e:78:a7:46:d4:bc:00:8f:35:ec:8f:
19:78:92:e6:d7:5b:06:5a:00:49:e4:e2:2e:00:aa:
67:ea:4d:b5:56:98:92:ff:ec:50:b9:6b:53:ba:bd:
3a:fd:ec:b4:53:37:29:9b:cf:1e:de:34:10:2b:7c:
eb:c6:81:8d:a2:e5:26:9d:c3:2d:14:91:a4:07:ba:
fd:d1:a4:48:9f:e5:70:e2:76:e2:a8:02:ec:bc:90:
40:66:8f:b0:0d:13:d1:98:f9:96:b9:66:eb:9c:c8:
6c:9a:80:ff:17:bb:50:b3:5b:8d:79:c2:e8:00:b0:
e1:0a:aa:8f:98:f3:d7:e2:e6:0d:d6:28:0d:ca:52:
df:15:35:fb:a8:ad:15:d6:a7:25:78:e8:d6:a4:7e:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EA:65:92:87:A5:41:57:E4:E7:99:F4:63:9B:8C:AD:BC:66:C9:26
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3c:0d:d6:ef:cc:3c:fd:61:35:c9:e9:8b:a8:97:5d:57:85:
93:02:9e:26:7a:31:fc:4f:86:9f:15:f3:1a:c1:de:12:74:f5:
bf:a7:39:9f:08:8d:8b:e9:84:df:78:2e:c9:e9:95:44:b4:ad:
c9:ce:33:9c:9a:63:e3:77:e3:d7:51:14:bf:1f:d5:de:8b:8c:
c2:99:aa:85:cf:74:2d:f5:fb:2a:f3:8c:34:93:30:20:17:3c:
e1:e4:87:47:90:b2:38:68:2a:2c:f0:f5:3e:b4:1f:0a:b3:5a:
71:a8:82:08:23:47:11:e1:e3:a3:ea:64:30:27:8d:1b:6b:fd:
5b:84:15:77:a5:23:54:7e:10:e0:1a:46:b3:4e:cd:47:dc:25:
02:92:db:df:78:e4:96:de:d2:95:f9:25:88:a7:36:05:42:95:
cf:e0:e7:ef:15:0c:de:8f:be:37:6b:98:1c:7e:39:2d:aa:0e:
f3:1a:c1:c6:b4:81:6d:90:35:6a:be:c5:62:30:d6:80:85:e1:
d6:7f:a5:53:02:fa:17:10:61:32:ca:3e:63:8b:1d:89:d8:3e:
c3:d3:14:7c:60:a9:ed:68:ca:89:23:52:12:a7:34:4e:f9:a5:
58:7b:a3:91:20:a5:d3:58:03:ab:4d:8d:11:7a:a4:05:90:38:
cf:39:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:15 2025 by rpki-client