Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
File: xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json)
Hash identifier: trlxsgDKgdXS41zMk4WEF+c00yCHvtxn2TBjZl9V6ek=
Subject key identifier: 6A:CC:C4:3D:5F:E0:29:8F:C4:D9:7B:E5:9A:18:6F:AD:02:1A:D3:AB
Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Certificate serial: 0197C838EF67624A2EC45AA33974658851C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
Manifest number: 02A4
Signing time: Tue 01 Jul 2025 23:01:03 +0000
Manifest this update: Tue 01 Jul 2025 23:01:03 +0000
Manifest next update: Wed 02 Jul 2025 23:01:03 +0000
Files and hashes: 1: NBJiMu1brPzEal7P3N6cPAqoIL0.roa (hash: tL077Ces2LMV0DaeWX0Tayl4bRSqsUGH1e79Mg1asv0=)
2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: Edj9maqA3A6HgcTOAmDkwYZzK2q3kY+KtgX6NQmKaKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:38:ef:67:62:4a:2e:c4:5a:a3:39:74:65:88:51:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Validity
Not Before: Jul 1 23:01:03 2025 GMT
Not After : Jul 2 23:01:03 2025 GMT
Subject: CN=6accc43d5fe0298fc4d97be59a186fad021ad3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:d2:8f:6c:0e:5f:6f:c1:c3:1f:ed:a6:aa:
fb:ad:2d:c9:05:8a:98:ad:94:a5:57:09:55:46:65:
f6:e4:4d:b6:d1:66:c3:83:ea:c0:c4:04:66:1e:29:
8d:0f:5b:da:f3:85:b4:73:9d:01:be:99:88:fe:b5:
4f:ec:3e:37:9e:41:e8:6c:fe:cf:85:62:26:80:c5:
b9:af:c6:76:34:f7:eb:fc:21:78:50:8f:30:bf:ab:
06:9f:23:a3:83:34:24:c8:cd:b2:e3:9e:6b:15:39:
e1:3e:eb:4c:b0:d3:4d:90:19:4a:79:60:df:6d:cc:
9e:fe:6f:da:f9:4a:80:09:32:41:1f:90:3c:cc:3f:
ee:25:21:ab:58:ea:1b:01:bf:6b:ac:0b:59:0a:9a:
3c:59:b1:7d:c7:23:55:c3:9d:39:10:42:21:d8:88:
65:4c:d0:7b:17:85:59:a0:d6:c8:71:8a:a6:76:e1:
db:26:80:f6:48:54:ef:67:2b:80:d5:de:d4:b6:2c:
99:6c:09:6a:a1:20:83:bd:57:fa:e0:a5:da:c9:99:
68:d6:86:8b:8c:ab:d1:29:18:9b:3f:7b:e5:f1:20:
92:f9:88:14:79:4e:3e:01:eb:c3:58:e8:a3:93:30:
fb:50:46:c8:e8:1b:3f:43:fd:61:18:4b:51:dc:8f:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CC:C4:3D:5F:E0:29:8F:C4:D9:7B:E5:9A:18:6F:AD:02:1A:D3:AB
X509v3 Authority Key Identifier:
keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:3d:bd:81:9b:06:c0:d4:12:6a:aa:fc:f9:4e:05:bb:09:5a:
07:7f:6b:59:a2:67:ab:f4:06:4c:b6:06:f6:1d:db:c5:e1:63:
3b:3f:ab:52:f8:6b:14:42:27:cc:65:7e:a5:c5:8c:a7:fa:4d:
8e:1a:84:cd:fc:b8:ea:be:9f:39:5f:64:90:5c:f6:a9:31:f5:
6b:05:24:f3:04:76:8d:9e:36:43:54:d5:3f:b7:9f:e1:25:f5:
d9:2e:dd:e8:a3:5b:56:b2:fb:97:e2:80:2b:5b:13:b1:0d:31:
70:3f:82:e4:8f:b1:ef:6b:9c:dd:93:42:e2:c3:51:cc:1f:34:
db:75:98:ce:da:97:89:a8:ce:d5:bd:45:78:a3:76:c8:ee:03:
04:d0:62:b5:b3:2a:e1:75:48:9a:63:d7:51:1f:fd:13:57:95:
ec:4f:92:55:6c:b7:c0:86:14:5a:bc:e1:73:1c:3d:08:a6:69:
4e:e2:d0:33:1d:1a:86:ae:ab:a2:47:54:a0:d2:ce:e6:a7:dc:
82:48:25:d6:f6:65:3f:dc:d9:67:48:be:86:d4:12:3f:af:d4:
3c:0e:42:6b:ce:7e:d0:d4:c4:65:34:cc:74:b2:43:2b:34:dd:
63:d1:03:07:02:06:57:12:56:e1:12:68:8a:a5:ad:ea:d8:29:
fa:d9:d5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:43:06 2025 by rpki-client