Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
File: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft (raw, json)
Hash identifier: kaBIsx/btAzMfP+QyFD0P6bdMeGouqIuHRKPjmYyRZQ=
Subject key identifier: 64:F9:57:A4:2D:E5:D3:6C:87:AC:B2:8A:97:52:7D:90:1B:50:65:B4
Authority key identifier: 5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
Certificate issuer: /CN=5c40454a1b176795f021575347794bd9f04427ac
Certificate serial: 0197B5C49C7D01CFFD315FB59E57DC032E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
Manifest number: 03F7
Signing time: Sat 28 Jun 2025 09:00:50 +0000
Manifest this update: Sat 28 Jun 2025 09:00:50 +0000
Manifest next update: Sun 29 Jun 2025 09:00:50 +0000
Files and hashes: 1: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl (hash: pBrXpklPnJ2ZWL1RbSaUNPAoGO9H1n/XQksVRzOvljc=)
2: c_JE84x-V2cV3KZFySyzgUu68wY.roa (hash: mJ5axd73qhrQA8e697fkmyMkcOmN3YmgqnGx7qbzQIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:9c:7d:01:cf:fd:31:5f:b5:9e:57:dc:03:2e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c40454a1b176795f021575347794bd9f04427ac
Validity
Not Before: Jun 28 09:00:50 2025 GMT
Not After : Jun 29 09:00:50 2025 GMT
Subject: CN=64f957a42de5d36c87acb28a97527d901b5065b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e9:58:10:4f:01:59:10:e0:8f:02:ca:5c:ce:
95:6a:fe:47:5c:ba:a4:ff:d3:35:d6:d8:51:36:50:
96:46:2a:98:ad:6d:1d:b2:1a:17:fb:d9:be:ff:c2:
0d:fb:9d:ac:56:34:e0:6d:a6:08:4e:e4:22:b3:d9:
5a:14:93:0a:6d:aa:23:62:d4:eb:68:38:8e:86:c8:
02:20:bf:85:be:16:db:11:47:fc:55:42:45:05:08:
44:b5:08:af:6a:98:46:9b:17:40:9d:ef:7e:8f:cc:
54:9d:93:4d:de:a2:21:94:a5:99:48:19:20:0f:07:
16:07:51:05:8b:26:22:8b:2f:0f:74:08:7f:ea:69:
39:b0:63:38:d5:18:ce:f8:b5:fc:8e:37:dc:38:cc:
eb:74:01:da:a2:6f:2b:e1:08:4e:9b:b2:dc:bc:5c:
be:8d:93:f2:df:48:97:c8:48:c9:46:61:db:5b:c6:
c1:68:a1:b8:e3:ef:ad:04:4c:41:46:5e:7d:59:af:
62:cd:13:dd:ba:66:c1:71:cb:fe:a9:ca:51:f2:63:
d1:81:66:22:78:ea:06:25:ba:c4:5e:f0:0b:e8:2d:
45:ad:75:48:d2:24:23:18:18:59:6c:72:49:32:34:
6d:43:4c:66:be:23:f0:79:c8:d9:44:0f:a2:45:01:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F9:57:A4:2D:E5:D3:6C:87:AC:B2:8A:97:52:7D:90:1B:50:65:B4
X509v3 Authority Key Identifier:
keyid:5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:de:5b:c5:b8:68:33:c4:67:25:40:b3:2e:43:52:7f:9b:91:
3a:b4:3e:a2:ac:1a:16:8c:a2:f4:fe:a7:48:dc:f3:99:c9:df:
a3:11:26:cf:7a:ca:05:de:18:20:86:9b:49:28:6a:2d:c6:b6:
25:11:ef:f0:ac:e8:69:96:18:9e:33:49:55:2b:b2:1e:8b:8c:
21:04:28:0d:48:2c:53:96:b2:28:a9:36:9e:cf:5b:d0:36:74:
06:0e:16:db:09:50:58:8f:5f:08:0a:e7:bf:59:ff:09:99:57:
f9:d4:a1:43:72:75:83:84:65:a2:02:8e:36:00:6f:88:cd:4c:
94:6e:b5:2d:4e:a5:9c:e8:13:14:3a:cb:d2:29:c9:9f:3d:49:
d6:e8:6c:a0:3f:0a:42:e0:98:de:a0:a6:28:4a:5e:3a:60:4a:
56:a5:50:ed:92:4d:a8:ed:82:34:22:a7:77:d7:ef:04:26:16:
02:7b:c9:e0:5d:f6:13:cb:36:88:cb:59:a6:a1:d2:e7:46:3a:
33:4f:81:66:30:29:0b:33:8d:f6:40:2d:f0:62:05:24:c8:bf:
61:2f:08:1a:54:e0:b8:56:33:d5:0b:0e:e1:50:c9:1c:9d:0c:
1a:cf:f6:ee:ea:87:3f:d7:51:85:87:65:0e:cc:4f:e9:29:79:
9b:4f:85:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:03 2025 by rpki-client