Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
File: Xm6clCz1a-uGksXVYu2OrWlFKO0.mft (raw, json)
Hash identifier: hJiCyG1rr0Ybw4wQzWRAuD1yCjlLptf2URGW1ElXOJc=
Subject key identifier: D2:33:73:AC:1D:FB:AA:32:45:01:5E:9B:2B:7F:0D:51:B5:3C:10:F7
Authority key identifier: 5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
Certificate issuer: /CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Certificate serial: 0197B7B34C8EFA74AA40BA8A82BE9E602CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
Manifest number: 022A
Signing time: Sat 28 Jun 2025 18:01:10 +0000
Manifest this update: Sat 28 Jun 2025 18:01:10 +0000
Manifest next update: Sun 29 Jun 2025 18:01:10 +0000
Files and hashes: 1: Xm6clCz1a-uGksXVYu2OrWlFKO0.crl (hash: Ad+sSckVpXGuJFFvX34OZki0ITTWZoryK6/3+Od8AHw=)
2: vosIopFKuVooFEnT_WoSvrVtBQk.roa (hash: MbdzDkBGjpybqFx3qcRSqHdBprEga+vyojjcpFHnoSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:4c:8e:fa:74:aa:40:ba:8a:82:be:9e:60:2c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Validity
Not Before: Jun 28 18:01:10 2025 GMT
Not After : Jun 29 18:01:10 2025 GMT
Subject: CN=d23373ac1dfbaa3245015e9b2b7f0d51b53c10f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:f9:f2:ee:82:1c:b4:84:b4:9c:5c:bd:cb:
3c:3a:6e:20:67:1d:f5:f8:7e:20:d3:f2:f3:90:b3:
5e:24:49:a8:71:09:a0:86:6a:3c:06:e1:db:d1:45:
62:f6:4c:b8:e3:fe:c5:5f:1d:38:4f:32:da:e8:91:
97:d9:e8:39:37:f4:52:45:c6:e9:e8:f8:60:b0:50:
1f:7c:7c:16:3f:03:86:15:02:81:4a:27:a6:c9:6a:
ab:9c:61:a8:7f:a6:1b:fd:81:f8:6c:7f:3a:2b:b3:
33:c5:e8:fe:f0:f0:79:ca:ac:a7:c8:0f:e7:a0:09:
9d:df:5f:1b:a7:09:09:b1:37:cb:c4:13:01:21:9f:
97:8d:45:1a:89:54:37:47:cd:f5:18:0c:aa:d3:2a:
f4:6b:5c:a8:e7:d3:35:f3:7f:09:04:11:b1:d1:52:
9b:0a:ae:fb:61:48:a5:45:5a:87:bc:eb:eb:50:15:
c1:ee:9d:03:0d:5c:7b:f8:65:10:43:d5:1c:6c:ac:
3e:aa:3a:43:d6:c5:2e:f4:98:7e:10:17:69:43:c3:
27:40:93:4f:26:d9:b8:ba:ba:cf:4c:aa:c6:10:dc:
92:ab:fa:12:87:d9:3a:9a:62:b1:49:97:80:d4:e0:
3c:d1:59:d0:94:96:9a:8f:2d:b1:83:a9:32:b4:c0:
36:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:33:73:AC:1D:FB:AA:32:45:01:5E:9B:2B:7F:0D:51:B5:3C:10:F7
X509v3 Authority Key Identifier:
keyid:5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f2:d9:47:33:37:11:72:5d:b6:d0:b8:0b:36:96:a8:63:6b:
28:8f:c2:3c:12:20:ca:8e:36:3a:36:be:45:a0:12:b5:5a:a0:
37:78:dc:c7:65:80:4d:bd:79:20:58:87:17:29:fd:42:79:2c:
b4:f6:19:2c:7f:f8:ba:e2:fa:13:07:4e:99:af:ba:45:42:8d:
c6:41:88:3a:66:75:cf:b4:07:84:3c:c2:9b:a3:a1:95:e6:70:
06:86:e1:1e:ea:c1:43:4e:36:57:71:45:47:3a:59:11:f5:77:
74:87:27:4c:45:34:6d:d3:f1:13:54:e9:74:90:31:37:37:ac:
30:49:01:ae:6b:48:1f:fe:88:90:7f:c6:94:db:2d:16:36:ef:
f6:68:2a:37:93:b8:5f:c1:6e:db:ed:42:d7:8f:d9:05:0d:91:
40:4b:b0:d0:4b:87:cc:7d:5a:49:82:d1:22:f4:c8:5b:f1:95:
7c:10:fe:4d:a7:0c:cb:e2:7b:b3:f6:de:2d:ec:ba:c1:87:ed:
23:a7:a3:b0:32:5f:c0:63:94:05:a2:1b:18:45:e2:b1:6e:b7:
bb:27:ae:00:75:5d:ff:df:f0:e5:ac:08:86:94:15:8a:b3:71:
40:06:8e:a4:ab:53:a9:b1:be:93:8c:14:96:46:28:55:b9:5a:
ed:86:dc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:15 2025 by rpki-client