Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
File: XZrYiZ1byFSe7dPlny0NYhNczxQ.mft (raw, json)
Hash identifier: sY8AX6RMgWRQcFw01adFm1e7kVb0896V6U7+WQLQZTY=
Subject key identifier: 87:9B:70:C5:C2:63:9C:74:0F:9D:CD:90:CF:DA:C1:12:4E:2A:97:C0
Authority key identifier: 5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14
Certificate issuer: /CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
Certificate serial: 0197CC4C923063780E747AEE8BE0E61293B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
Manifest number: 0130
Signing time: Wed 02 Jul 2025 18:00:59 +0000
Manifest this update: Wed 02 Jul 2025 18:00:59 +0000
Manifest next update: Thu 03 Jul 2025 18:00:59 +0000
Files and hashes: 1: XZrYiZ1byFSe7dPlny0NYhNczxQ.crl (hash: QJEx90JB8d7isfFoWQXovZKa4q/leZtQzNcBMyOEIMw=)
2: m5GOwP2RAjr9d7tTC7l8N6PV3Js.roa (hash: 1yLaEhuOSXYxSo5HpHGS5B2c9njKUwnBpqElWVTZ0t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:92:30:63:78:0e:74:7a:ee:8b:e0:e6:12:93:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
Validity
Not Before: Jul 2 18:00:59 2025 GMT
Not After : Jul 3 18:00:59 2025 GMT
Subject: CN=879b70c5c2639c740f9dcd90cfdac1124e2a97c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:0d:98:b1:2c:5e:64:2e:af:a9:be:2c:8e:
eb:d6:95:82:74:76:4c:ff:c4:97:17:78:a8:f7:57:
64:0b:e6:39:0e:20:9f:4b:2f:36:8c:38:ca:1f:cf:
e8:44:d8:f5:60:c1:fc:51:b3:ad:3e:51:cd:bd:99:
88:e0:a2:db:87:8d:84:b8:66:dd:18:89:c8:f1:46:
b4:af:eb:ee:04:93:06:02:1f:e4:4b:07:c6:f8:29:
a6:04:ad:ff:34:59:ad:c1:4c:c8:f9:fc:0d:96:9a:
a7:1c:2d:72:a1:38:cf:76:56:92:db:d0:29:a9:08:
9e:2a:6e:36:7c:8d:28:a0:a1:bb:63:65:64:95:07:
e8:a4:21:4e:c5:12:75:61:a6:b4:d6:3d:41:bf:9a:
fa:76:4c:95:0d:73:95:73:1d:00:f1:c0:12:02:f7:
ad:f5:6c:d7:98:70:72:0e:c9:cb:74:ed:21:8a:ee:
18:a5:65:3e:d5:65:04:84:70:c7:9a:ee:86:1c:2c:
f1:e9:93:9d:a2:d7:c5:f9:3a:b9:05:f5:8b:bf:e7:
85:56:e4:1a:f4:d3:e5:cc:dc:26:e2:1a:36:8f:a8:
78:a3:48:d8:83:70:53:1f:c6:fb:f9:92:c7:1c:bc:
b8:d2:79:58:21:31:70:4f:eb:bb:34:fc:b5:9a:6c:
49:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9B:70:C5:C2:63:9C:74:0F:9D:CD:90:CF:DA:C1:12:4E:2A:97:C0
X509v3 Authority Key Identifier:
keyid:5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5f:3b:68:26:fa:72:43:6e:64:23:4c:bf:a5:d7:37:6d:1f:
9a:cb:2c:99:5f:6c:9d:fa:20:22:da:5a:87:2b:43:f4:79:65:
6d:1b:90:50:4f:8b:58:41:19:61:9e:39:2f:5c:e9:f9:09:a5:
82:55:5e:af:e0:24:06:9b:56:3f:5f:8d:4f:0d:ee:bd:a6:99:
32:bd:79:f9:0a:d6:b1:35:92:20:9f:14:b5:7a:1e:ad:7c:b3:
cf:a9:ba:96:d5:eb:75:6b:e3:e1:ac:5a:dc:e1:de:80:33:cc:
12:e8:f0:a8:b0:6b:9c:2f:5c:b3:fa:28:e5:25:d8:b6:37:44:
87:f6:6b:28:07:2d:8d:18:77:1a:4a:19:f9:3b:82:24:4d:f0:
48:25:68:2f:52:65:31:22:26:28:df:5f:bc:b6:b5:f4:ff:70:
c7:ab:43:a9:44:08:5c:37:e2:b0:5a:24:de:10:bc:ed:eb:26:
a7:54:9f:e8:21:d2:2a:54:08:d8:5e:15:f4:c4:54:61:3b:ca:
c3:fa:cd:95:21:a5:71:ed:23:6d:58:5f:63:f1:03:fa:67:87:
8c:0d:f3:7c:9c:d7:a9:44:48:f7:f5:2e:42:a1:28:b3:ec:8b:
b6:8a:1f:a1:1e:c3:b2:89:6f:a2:bd:00:42:40:09:73:7e:dc:
d7:d0:3a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:11:19 2025 by rpki-client