Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
File: Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft (raw, json)
Hash identifier: Xicn2A/IQaLPYgwLjvcjdpjnGhZ5/24jW6v7zLAocfg=
Subject key identifier: DB:39:0A:33:CB:59:1F:70:4C:1E:28:67:ED:B4:2D:25:6B:D2:14:15
Authority key identifier: 5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
Certificate issuer: /CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Certificate serial: 0197B7B355702554D6BB0B004FDBD10091FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 18:01:12 +0000
Manifest this update: Sat 28 Jun 2025 18:01:12 +0000
Manifest next update: Sun 29 Jun 2025 18:01:12 +0000
Files and hashes: 1: Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl (hash: nl+cwhw0IueemK6lxpLtRsPp2lxo9ucsA1wBrzg/c2g=)
2: vK5h-o0ZiTjYgr7TtTUx7l9N3_U.roa (hash: GzoVl428O56Z6DSR6RbFH+KhA2k4PkQR1ShOytMGxs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:55:70:25:54:d6:bb:0b:00:4f:db:d1:00:91:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Validity
Not Before: Jun 28 18:01:12 2025 GMT
Not After : Jun 29 18:01:12 2025 GMT
Subject: CN=db390a33cb591f704c1e2867edb42d256bd21415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:e3:56:9c:1d:13:bb:31:fd:4b:16:5a:a1:
59:67:c8:36:93:1e:aa:7e:33:9d:1f:a9:34:42:53:
71:28:b3:a9:0f:d9:1b:68:1b:33:6e:02:ba:40:88:
c6:66:33:26:6b:ef:83:33:66:99:5b:a0:47:60:97:
38:fe:04:1a:71:7b:29:40:ea:9c:09:7a:29:d1:bc:
7b:55:15:bd:ad:60:8d:d2:b9:85:f8:51:2e:2b:21:
d0:3d:d0:51:43:c2:c3:0e:0b:4b:a1:ab:d0:37:fe:
29:c4:3d:71:ca:24:fc:15:c9:ef:b3:6c:f3:87:84:
b5:15:98:7b:fa:54:80:db:cf:e2:fd:1a:8c:3a:d7:
1a:f4:f3:59:1b:aa:ff:05:37:af:a2:7a:42:a2:7a:
2c:e5:6c:f6:fb:c7:70:55:74:7b:e9:4c:ba:57:92:
f2:f5:e0:e8:f3:9c:27:bd:17:5d:c7:cb:79:9e:7a:
3c:2b:cd:93:f3:37:3e:14:5c:19:2f:19:7f:6d:7d:
8e:52:8b:a0:0f:de:19:78:3b:38:8a:62:cf:60:72:
91:23:50:c1:1d:5f:ad:97:2a:5b:d2:0b:30:bf:8d:
e2:9e:07:17:3a:cf:66:9e:1d:8c:41:e3:d9:da:f7:
83:60:52:f3:38:4c:d9:6b:28:e5:d3:61:50:9f:e2:
4d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:39:0A:33:CB:59:1F:70:4C:1E:28:67:ED:B4:2D:25:6B:D2:14:15
X509v3 Authority Key Identifier:
keyid:5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:88:ca:98:f2:95:9d:17:b9:97:2f:76:1c:b4:5f:a6:88:a5:
c3:12:67:4f:6c:35:62:48:fe:de:bb:25:42:55:ed:c2:3e:5b:
36:e0:07:56:8c:de:ca:be:83:cb:a3:9a:8f:de:b0:c8:4b:81:
2c:6e:f8:db:41:06:d2:9c:79:d4:b2:40:e3:ea:69:7d:57:9c:
e0:ce:55:4d:e8:05:34:28:01:8e:78:2e:59:14:15:af:fd:e0:
3e:d9:de:ad:39:6d:ca:87:1c:7c:93:6e:a8:b3:2f:04:47:fc:
89:58:17:74:21:06:2f:00:10:98:35:d8:b9:97:68:d9:3c:2a:
7c:d7:59:35:61:68:c9:26:d7:95:85:bb:2e:53:9a:12:cc:0b:
3c:91:dd:d2:c0:23:af:b9:ef:a7:c2:af:e4:19:ec:f1:31:02:
e5:21:01:41:22:e7:eb:1e:16:66:5c:7a:44:99:07:47:a6:23:
3f:9a:19:33:e0:8a:94:7a:d0:a6:b0:f7:00:1d:23:9e:ba:73:
f3:1e:8a:ea:ca:89:c7:85:1f:e3:67:f6:e7:72:a2:de:b4:fc:
41:4e:aa:7e:2e:61:02:cd:16:b7:32:71:11:b3:ce:76:de:15:
e9:b3:60:82:20:97:8d:cc:56:8c:72:5a:c1:f3:d0:d7:c5:4a:
c3:b9:ce:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:20 2025 by rpki-client