Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
File: XiZI8SkNRHG821C4K-TtkyADCU0.mft (raw, json)
Hash identifier: sWT6klPnBcuhWoPzMWZmKrUGbTm5/HIImEXlN3y/HOQ=
Subject key identifier: BC:EF:74:7D:AF:86:BF:BD:9A:F5:07:D0:D1:50:C4:DE:6F:E6:09:B9
Authority key identifier: 5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
Certificate issuer: /CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Certificate serial: 0197B77BF5AF0E5739C29A0930662CC1DFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 17:00:43 +0000
Manifest this update: Sat 28 Jun 2025 17:00:43 +0000
Manifest next update: Sun 29 Jun 2025 17:00:43 +0000
Files and hashes: 1: BECHjRO1sNTrECspSOXRaHeMWRM.roa (hash: CUP2bSCGR2R7pQJIeBFSspVhJwtI4r06AoqaZ9LnrhQ=)
2: XiZI8SkNRHG821C4K-TtkyADCU0.crl (hash: +iIsVPq1w8+5IqzbZo6+LzCt2CdEqiQNSTJFR9pByno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:f5:af:0e:57:39:c2:9a:09:30:66:2c:c1:df:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Validity
Not Before: Jun 28 17:00:43 2025 GMT
Not After : Jun 29 17:00:43 2025 GMT
Subject: CN=bcef747daf86bfbd9af507d0d150c4de6fe609b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a3:ec:ca:8d:67:1e:29:81:00:0b:c3:89:83:
a7:36:4a:98:3f:58:eb:9d:58:9a:4d:1a:45:36:2c:
ef:2e:ed:fb:cc:12:39:af:82:7c:e8:c1:3f:86:2f:
86:7b:f7:83:0d:c0:81:bf:31:b7:1b:ec:39:7a:19:
0a:26:0a:f0:69:bd:a2:a0:20:5a:58:2f:7f:39:81:
3b:00:db:2a:ea:75:c8:ba:ba:bf:14:9b:48:3b:30:
3e:e3:21:2e:18:05:0c:d9:4c:9d:67:ea:af:50:fc:
24:79:d1:4c:68:0b:81:a6:40:3f:04:ca:0a:fc:c7:
e8:bf:7b:a3:78:0c:f3:bb:e1:37:ef:fc:da:0f:75:
ef:b3:bd:2d:63:19:54:57:21:0f:86:d2:4c:e8:a4:
2d:22:f7:79:df:6d:d0:a7:88:32:95:b1:19:b8:25:
79:15:51:c4:0b:e0:ea:89:a6:c2:6b:8e:30:44:cd:
25:9d:9f:a1:d3:ce:59:b1:ed:33:3c:62:6b:1d:b8:
3f:cb:a3:46:48:3a:3c:75:fa:80:bc:cf:81:c1:d8:
23:45:15:e4:21:66:bd:ff:f7:90:14:d7:4d:27:f3:
88:01:ef:0d:7c:2c:fe:8b:91:da:60:38:8e:9a:ce:
dc:aa:7f:cf:59:5a:09:c3:24:1c:49:42:77:fa:2a:
45:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EF:74:7D:AF:86:BF:BD:9A:F5:07:D0:D1:50:C4:DE:6F:E6:09:B9
X509v3 Authority Key Identifier:
keyid:5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3d:e7:06:11:a0:6c:44:b0:a3:3e:a8:aa:a3:22:45:e9:60:
e9:d2:a2:9d:e9:0f:bb:b9:04:68:c0:7a:75:82:45:fa:37:a1:
b7:da:58:b7:dd:f0:7a:12:a4:7a:dc:ca:71:4c:46:4c:e6:3d:
b9:a7:ab:66:c3:56:bb:0a:5c:4f:41:ec:f2:a3:81:e3:15:d1:
b6:73:da:f6:0e:08:15:a7:7b:44:da:cd:a2:7c:e7:79:01:eb:
24:58:c3:dc:0c:cd:3e:7e:55:37:80:1d:fd:6c:c2:70:83:92:
1e:7a:20:fc:40:42:07:23:b9:12:da:e2:07:26:e7:ff:2e:c9:
d2:1d:35:01:e3:71:14:55:0b:09:82:54:bc:9b:2a:55:bb:0f:
4b:e4:8a:b0:50:09:e8:88:d4:82:a4:27:36:83:ce:60:73:61:
bd:70:74:06:8f:af:b0:c3:65:ab:d6:c9:4c:55:13:3d:5c:9e:
d4:89:43:8c:c2:71:22:45:15:cc:de:c7:80:76:bd:cb:29:14:
1c:e3:1f:3d:de:40:5a:60:84:10:61:17:81:0f:82:db:6c:ed:
c1:d8:eb:d6:95:3c:c5:80:c4:b4:0f:05:28:2d:ff:f6:c1:cd:
bf:a5:b9:a5:16:1c:ff:a9:cd:39:b9:93:ab:ba:20:fa:cb:92:
bf:e7:d0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:38 2025 by rpki-client