Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
File: xypST5sbOAHb18iaFgrsB2tX5yk.mft (raw, json)
Hash identifier: 83c11zcpGRZDK2BRdNid6mhGSHzuBtyiLKjVKFtmS+I=
Subject key identifier: 14:30:11:A1:9E:C9:FF:32:C4:7E:C0:07:91:24:BE:BE:CF:95:5E:B0
Authority key identifier: C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
Certificate issuer: /CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Certificate serial: 0197C5A604877881FC09837CE959346D2BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
Manifest number: 0E23
Signing time: Tue 01 Jul 2025 11:01:20 +0000
Manifest this update: Tue 01 Jul 2025 11:01:20 +0000
Manifest next update: Wed 02 Jul 2025 11:01:20 +0000
Files and hashes: 1: B5IPw2to02EUzOiZAkDMZAMJU40.roa (hash: SqPGfdHaKQmJHjb0Md5WPKQZqfqDkbS8MZiJDiQQgE0=)
2: QhPm8U1brOIqGs2lZ2LGdcxBiLA.roa (hash: b6IzZ0v53J6OJOZBPLixdFrIPoMrdc5UH4inFHWFRvM=)
3: kYBNVlP4IkeOs0bTiFV8wc5LMQs.roa (hash: g3QlMNFCFIgPt5yC/cat7+5gVwDPl1ap/dvIpROnsyw=)
4: xypST5sbOAHb18iaFgrsB2tX5yk.crl (hash: dLoke80piMjFrbg3Atitzg3bM8s/ev6FkKSzIKyQbGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:a6:04:87:78:81:fc:09:83:7c:e9:59:34:6d:2b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Validity
Not Before: Jul 1 11:01:20 2025 GMT
Not After : Jul 2 11:01:20 2025 GMT
Subject: CN=143011a19ec9ff32c47ec0079124bebecf955eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e4:c9:a5:fe:d4:ff:27:36:13:c6:d4:8c:29:
d9:0e:76:e0:f8:54:93:77:0b:ce:29:dc:71:b4:b7:
b7:85:d9:f5:d4:19:e0:bb:f7:e0:0c:13:cc:c1:d0:
29:e9:62:cc:3e:88:75:2c:af:14:f1:af:cc:bd:ac:
3b:f7:a2:b7:9f:3c:af:7a:20:1c:4b:96:b4:e8:90:
b6:cb:be:15:ee:06:af:f9:e5:79:8b:e7:f7:fc:48:
12:65:ad:57:45:87:12:9f:fd:be:59:a0:f2:76:39:
b5:a6:26:95:51:50:c6:3f:04:b3:4a:af:16:6f:4c:
01:96:1e:5f:86:ec:e9:bb:09:80:81:5c:e9:e4:4b:
d6:a8:54:7f:3e:c7:42:7e:bd:59:6f:6a:47:8e:8e:
0f:e2:5c:7c:cd:8e:2e:13:a6:7d:08:75:e1:54:80:
9e:f1:d6:87:f0:1f:84:45:53:30:07:c5:60:6c:4d:
95:44:46:84:a0:45:d9:4e:26:0c:76:13:25:f8:48:
1e:e9:c5:9f:9d:21:f5:d3:f2:5b:7a:b9:99:4f:eb:
d0:eb:7a:2f:25:8b:62:a7:06:d1:03:a7:26:97:bb:
f6:37:8d:6f:c7:91:9a:46:ae:ac:d0:32:0d:b9:59:
17:55:0f:6c:c3:b7:47:3c:f9:8b:87:37:7b:25:42:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:30:11:A1:9E:C9:FF:32:C4:7E:C0:07:91:24:BE:BE:CF:95:5E:B0
X509v3 Authority Key Identifier:
keyid:C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a7:bc:1a:5d:27:30:1c:67:43:00:c4:26:50:b0:b7:72:73:
5a:1e:fe:a2:f0:27:28:fa:06:59:e8:e0:a3:c4:ff:3a:a7:65:
83:53:8f:67:97:57:ff:44:ff:d9:34:94:61:8b:24:72:7c:cd:
83:4a:b1:73:b9:07:07:cb:c0:74:b0:c1:80:27:c3:e2:22:af:
6c:98:0e:48:af:9e:f7:c3:1b:2d:30:fd:a3:86:74:7b:1b:fc:
87:fe:c5:87:8a:e8:9e:72:29:79:ed:c7:3d:84:0f:c8:29:70:
1b:7a:ec:93:b4:0c:13:dc:f3:f0:00:f1:1b:42:45:ec:f6:57:
69:2f:60:62:00:81:5d:5b:04:b6:99:54:08:71:30:24:42:08:
68:00:54:98:33:dd:6f:34:50:c4:55:64:c5:7a:86:f0:fa:1c:
ef:e9:67:4f:ef:7f:04:2f:85:1b:01:fd:af:b5:5e:25:4c:f3:
69:79:5a:50:c4:37:c0:92:e5:7a:c3:ad:17:0b:0a:f7:95:ae:
98:26:37:60:e2:a8:1e:52:ec:0e:85:c4:35:0b:7b:83:e1:ee:
45:b0:42:f9:6b:e9:81:72:ed:d4:70:3d:2c:4b:e9:cf:70:41:
87:b3:65:62:bc:f6:cb:8c:9a:46:d9:a4:88:b2:18:97:8f:82:
29:1e:7f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:22:06 2025 by rpki-client