Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: IuIvnaY38zKNJuZ+INZ7A41lZLmvO3BRLs05aC7L+B8=
Subject key identifier: AE:38:34:F6:BB:95:71:BF:EE:F7:B9:B8:DC:61:F8:8D:7F:A0:EE:24
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 0197B8210A783403DE63FD673326A8AF2C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 02D0
Signing time: Sat 28 Jun 2025 20:01:02 +0000
Manifest this update: Sat 28 Jun 2025 20:01:02 +0000
Manifest next update: Sun 29 Jun 2025 20:01:02 +0000
Files and hashes: 1: 8X4RLASwemcpB7sXIrd5tJXKl_c.roa (hash: Ke6+6gCy+3vyH+phFsmwWndNL+U9vVNYKRn14tnYOss=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: hpMNMSV/qowjDHGSq2QUZV+WQmNrQfKWgs2kF/exaP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:0a:78:34:03:de:63:fd:67:33:26:a8:af:2c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: Jun 28 20:01:02 2025 GMT
Not After : Jun 29 20:01:02 2025 GMT
Subject: CN=ae3834f6bb9571bfeef7b9b8dc61f88d7fa0ee24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:c4:06:cc:2a:0f:56:25:42:30:ff:77:a2:
a1:2a:9d:89:6b:ac:5c:7f:05:e7:f1:cc:eb:bd:45:
a5:0c:ab:7c:f9:b4:60:95:65:6f:d7:53:cd:41:62:
c1:be:07:1a:fe:ea:1f:82:bb:e7:d3:e8:53:2c:6b:
4f:6e:20:f5:6a:d6:aa:43:ce:fd:c8:95:4c:04:d4:
68:29:18:6c:12:4f:1b:53:1c:31:1c:30:07:5c:3f:
35:1b:3f:a5:d2:62:8a:8c:bc:7e:1e:a0:f6:e8:29:
c2:f9:0b:12:a3:47:35:32:58:d6:42:e2:c3:c2:18:
12:bc:8d:21:a3:c5:60:2d:c5:cf:cc:67:d7:e0:8a:
e4:10:fd:24:bc:82:85:a5:28:67:88:3b:49:cf:6c:
4b:77:e6:d8:8d:8b:70:e2:9e:b4:ed:bb:35:00:39:
47:aa:df:58:c9:fc:cc:27:20:00:0f:0b:10:32:93:
00:fe:76:13:c3:1c:15:61:cd:3a:71:9a:b0:57:ee:
a6:fa:88:33:12:03:8a:c6:cf:fd:49:a5:ca:02:6f:
48:c9:cd:7c:25:6b:af:fb:eb:ad:81:f7:12:28:c4:
2e:7f:22:ce:bd:bf:3b:3d:34:92:4a:56:69:e3:f6:
05:00:ac:e5:c6:8a:9a:a8:d1:1d:94:52:64:7b:97:
2c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:38:34:F6:BB:95:71:BF:EE:F7:B9:B8:DC:61:F8:8D:7F:A0:EE:24
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ad:a4:7c:05:9d:d2:c9:17:f8:6a:9a:41:74:c2:1f:3f:8f:
d0:96:76:27:54:bc:cf:ea:1c:47:db:97:07:45:ae:00:bb:27:
96:4a:28:63:78:89:aa:4c:18:48:ba:52:90:be:a5:a7:b8:8c:
29:b2:ab:34:3c:7c:43:e3:40:15:82:08:bd:3c:12:b1:cc:c8:
0c:2a:87:d8:ab:da:54:4e:4b:70:79:54:8d:7b:cf:2e:0a:5b:
b8:40:1d:bb:c3:b6:74:af:06:50:4b:95:bc:f6:63:95:d9:20:
00:2a:f6:ca:ae:c7:63:d9:1d:0a:d6:c8:07:18:5f:bb:1a:51:
ba:2a:c8:a5:40:c4:18:5c:74:a5:22:cc:ec:ea:9d:1f:6b:66:
1e:18:72:3d:70:40:0f:c4:91:33:20:2b:b5:89:ad:12:db:3b:
69:a0:3f:db:5b:f8:3f:be:da:10:48:1d:fd:ec:d1:f6:1b:de:
68:95:b0:49:91:3a:16:1e:09:67:3a:6b:39:a3:2a:41:eb:b7:
6e:fd:fe:85:a6:b3:e9:86:85:30:aa:bf:80:4d:0b:17:da:43:
8b:e0:91:55:ce:6b:d8:7e:60:30:30:67:77:bd:a5:ec:95:e1:
5e:60:33:27:41:8a:27:f6:38:67:8a:5d:92:03:45:4c:6b:78:
b4:44:f4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:20 2025 by rpki-client