Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
File: XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft (raw, json)
Hash identifier: jirylwAZXKO4g+Wn7Anr//kqheZ5mWU64lKsFAEogI4=
Subject key identifier: 6E:9E:9F:CC:32:84:9B:C4:27:76:0A:71:4A:EF:20:A9:96:38:4D:ED
Authority key identifier: 5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
Certificate issuer: /CN=5c757007aebf00098a800228db1f5930ee66e675
Certificate serial: 0197B96A8D7C9CCAAD57FE43F84DCACD57FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
Manifest number: 05BC
Signing time: Sun 29 Jun 2025 02:00:57 +0000
Manifest this update: Sun 29 Jun 2025 02:00:57 +0000
Manifest next update: Mon 30 Jun 2025 02:00:57 +0000
Files and hashes: 1: XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl (hash: lBNm6iuJMuKU32WQndyBELzwD32Ayg+8rWLm9b/0dOc=)
2: zeSSBsoxeiaEub6sPGDgBihsYlQ.roa (hash: ZJtLDNZbI5epQGziT22ZjYkOk6GcLflWv5h+Gm6/V1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:8d:7c:9c:ca:ad:57:fe:43:f8:4d:ca:cd:57:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c757007aebf00098a800228db1f5930ee66e675
Validity
Not Before: Jun 29 02:00:57 2025 GMT
Not After : Jun 30 02:00:57 2025 GMT
Subject: CN=6e9e9fcc32849bc427760a714aef20a996384ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:0d:b3:a9:8c:82:ad:81:d1:f6:3a:97:46:
99:fd:bd:fd:82:14:0f:01:c5:19:57:c2:7e:25:cd:
aa:40:a1:a1:40:e2:eb:3a:35:e2:35:a6:73:23:ab:
f1:37:74:0a:60:85:ee:22:49:32:1e:6d:d5:40:64:
bf:37:73:64:18:6a:6c:e0:22:b6:84:20:d9:48:67:
34:e0:92:2b:9d:29:fc:d2:49:a9:bb:b9:61:3d:22:
ec:9c:b0:0b:28:39:76:f0:d1:cc:bb:fc:b2:b1:b1:
94:30:56:9d:fd:86:0e:ff:e0:0c:b4:6b:64:9d:08:
75:e9:dc:72:9e:a0:98:db:f6:38:0d:a5:6a:dc:68:
bf:54:4f:ba:81:02:9a:07:cd:d4:47:61:b6:48:84:
fd:97:f4:47:52:93:62:51:9c:c4:e0:7a:f5:7a:4b:
14:8e:83:c3:61:19:00:1b:57:45:9e:79:75:7d:b2:
86:43:73:f5:6b:2f:ef:6a:fb:50:3f:b1:f4:99:76:
20:db:b4:c0:54:c0:9e:43:b5:ca:67:78:40:e7:99:
da:5d:03:f6:eb:04:c2:28:85:e0:59:2e:df:72:9c:
1b:4b:14:82:44:01:32:cf:18:71:14:37:84:4f:d5:
07:11:01:c1:be:d6:de:b7:98:65:63:a5:1c:4a:5d:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9E:9F:CC:32:84:9B:C4:27:76:0A:71:4A:EF:20:A9:96:38:4D:ED
X509v3 Authority Key Identifier:
keyid:5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c7:5e:d3:78:18:0a:7e:26:ed:af:6f:35:ce:a2:e5:47:05:
b1:da:c9:44:94:f7:6b:2a:08:a2:5d:64:28:9c:e7:31:ad:55:
dd:b7:25:e0:b7:53:45:92:af:09:d7:4c:08:da:6f:96:4a:22:
03:d0:72:3c:0e:4b:da:b1:2e:f6:a1:0c:e6:b6:6c:f3:71:04:
be:3b:ad:d8:c6:81:af:a1:64:79:9f:cd:74:cd:d2:29:2f:7f:
5a:60:79:8f:93:ff:5b:e5:0c:fb:3e:6e:53:19:d3:30:d1:c1:
8e:35:69:5d:86:20:87:74:76:35:e4:ce:12:38:95:f9:e8:c2:
69:44:9d:19:49:26:56:39:08:d6:0f:eb:76:17:af:1c:0b:61:
67:35:de:ac:fb:11:82:75:15:0b:cb:91:d0:39:41:0a:66:ed:
fb:ea:b0:51:d7:a4:72:c7:d4:ed:5a:30:8e:6d:9b:e2:af:88:
eb:9d:64:36:d2:2e:6b:c6:09:92:bd:56:24:a5:d1:6c:a4:eb:
62:81:83:68:9f:8e:15:3b:57:a6:b3:eb:d3:de:80:6c:30:c1:
a5:a6:b3:f1:a2:dc:e8:8f:d1:c9:65:59:b9:01:bb:91:e7:9c:
c8:3d:ce:cd:18:ba:df:7d:02:16:76:f9:1a:11:c6:32:87:93:
12:46:7a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:14:59 2025 by rpki-client