Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
File: X3UgMVHTsj7My2T1IPtCVJhgz_A.mft (raw, json)
Hash identifier: L79qD+GTN2a4gGmg4mZZo3uzs3vsPMs9ncAbd374aVQ=
Subject key identifier: B7:2A:E2:97:7B:6F:8F:CF:CC:FF:92:39:6D:43:A7:17:DC:C0:AC:22
Authority key identifier: 5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
Certificate issuer: /CN=5f75203151d3b23ecccb64f520fb42549860cff0
Certificate serial: 0197B77CD196F097AA5F541754FECF7C6118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
Manifest number: 1062
Signing time: Sat 28 Jun 2025 17:01:39 +0000
Manifest this update: Sat 28 Jun 2025 17:01:39 +0000
Manifest next update: Sun 29 Jun 2025 17:01:39 +0000
Files and hashes: 1: X3UgMVHTsj7My2T1IPtCVJhgz_A.crl (hash: 4fSlihOwddcOA27gc9yEk6PFynlBZ8RTHYeS0PAmJMg=)
2: jCidCoQkb9m_tYCwbsjakuBhgIs.roa (hash: jOA4Ka8w8nTlTA322uZQYTOcTgRSM76k9RTxieaFemI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d1:96:f0:97:aa:5f:54:17:54:fe:cf:7c:61:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f75203151d3b23ecccb64f520fb42549860cff0
Validity
Not Before: Jun 28 17:01:39 2025 GMT
Not After : Jun 29 17:01:39 2025 GMT
Subject: CN=b72ae2977b6f8fcfccff92396d43a717dcc0ac22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:90:64:cd:f5:24:4b:62:53:e5:e3:01:b1:
42:a4:46:f3:35:6f:ef:23:84:18:f6:ec:0a:f1:62:
8a:78:af:20:e2:0e:ce:ee:49:91:43:f4:e0:39:34:
74:10:23:bd:ff:52:b0:c6:e9:98:ac:2f:26:47:48:
13:fd:5d:75:34:6f:45:b3:4d:d0:74:25:db:73:c0:
fa:8f:1e:75:15:06:a2:ad:4e:e2:87:6b:e6:cb:84:
32:71:8d:3a:3b:b7:85:0e:d1:b5:2b:7b:7c:aa:d4:
b2:0b:2c:ee:20:62:25:86:d0:b5:a0:52:8b:3e:0d:
62:c9:26:05:22:a9:24:c1:4f:66:66:e2:20:a4:15:
b3:42:87:1f:45:68:32:84:49:01:5c:69:c6:25:02:
fe:a4:3d:5c:11:6b:d4:52:c1:d3:52:28:a5:7d:29:
7c:15:96:0c:c6:fe:cc:bc:f9:4a:3e:68:d2:0f:07:
14:b2:b2:32:80:28:ed:c7:4b:82:70:56:b4:f3:17:
11:80:3d:b1:b8:9b:52:e1:11:35:19:5b:5c:ea:c1:
d8:c8:13:41:b7:d7:2c:56:e1:d1:66:b3:7d:17:19:
fe:cd:a9:18:d7:fa:e2:6d:ba:21:4f:66:f5:7e:59:
e9:71:ae:24:18:74:85:ee:3a:ec:c7:18:cc:dc:82:
b8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2A:E2:97:7B:6F:8F:CF:CC:FF:92:39:6D:43:A7:17:DC:C0:AC:22
X509v3 Authority Key Identifier:
keyid:5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f6:ec:70:6f:83:c6:7f:94:e5:9c:46:ff:8a:23:35:ea:86:
ac:9f:ff:52:81:a8:6c:dc:45:87:21:98:52:6b:b7:30:b3:4d:
e3:5b:45:53:d4:51:eb:b1:e0:df:85:46:4e:33:11:1d:81:a9:
18:f7:ec:cb:de:6a:07:58:94:b9:b5:69:6b:69:e6:cf:49:f4:
49:a5:73:54:6d:cc:55:1e:2c:3d:dc:6f:03:3c:a8:42:bc:e1:
23:d4:c9:78:05:b4:93:db:65:a0:25:d1:55:35:19:6f:90:a3:
52:ca:c6:43:6e:64:4c:41:ba:4b:8e:76:ac:ba:70:6f:56:20:
6f:59:df:2e:06:4d:c8:77:22:be:9d:c4:bd:b9:35:db:7d:10:
ba:34:6d:5c:5f:d2:85:3c:c0:06:9b:5a:58:4b:8e:15:40:1d:
d6:df:46:63:f5:dc:2a:44:3e:98:10:20:f3:41:56:99:59:86:
4a:60:14:1a:31:a0:f7:bc:77:26:22:82:b0:3c:ef:cb:41:62:
8c:42:29:5b:0a:16:a7:d8:23:47:4c:03:7b:2b:69:f0:13:a1:
ec:16:a9:9e:da:b3:58:57:3c:f8:92:d1:3f:12:c4:f8:09:70:
b9:dc:8a:ed:73:74:86:40:57:38:d4:5d:c2:bb:8c:98:2a:7c:
a1:24:d5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:00:11 2025 by rpki-client