Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
File: _xwhiBHZKUrWMSU6RF7R05WpY58.mft (raw, json)
Hash identifier: zVEY5ogDUB8A3z35ow9s7NQu/j2l2G1tCMj0KPof214=
Subject key identifier: 6F:87:DE:81:2C:36:91:95:50:A6:4C:89:F7:2F:8D:28:C9:57:56:46
Authority key identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
Certificate issuer: /CN=ff1c218811d9294ad631253a445ed1d395a9639f
Certificate serial: 0197B6A178C74C03A17AC7F29903E2980A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
Manifest number: 1410
Signing time: Sat 28 Jun 2025 13:02:04 +0000
Manifest this update: Sat 28 Jun 2025 13:02:04 +0000
Manifest next update: Sun 29 Jun 2025 13:02:04 +0000
Files and hashes: 1: _xwhiBHZKUrWMSU6RF7R05WpY58.crl (hash: tOD4+mIwqHIaVFDNFXAHHPNlg/3vQ3LGgKzhyWHPGlY=)
2: v5mMLWDyDi7CQki8wtNGLvZaSFo.roa (hash: QY/aaNbMvjreUlmsWUFxIkBwGJaecYw8AUp+m4XK/7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:78:c7:4c:03:a1:7a:c7:f2:99:03:e2:98:0a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1c218811d9294ad631253a445ed1d395a9639f
Validity
Not Before: Jun 28 13:02:04 2025 GMT
Not After : Jun 29 13:02:04 2025 GMT
Subject: CN=6f87de812c36919550a64c89f72f8d28c9575646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:c5:73:96:ce:c0:bb:3c:84:31:2e:49:f0:
58:6d:24:04:82:39:f4:e4:99:9f:32:b5:01:52:64:
50:4e:8c:05:0c:77:2c:a3:c4:77:1c:a3:f5:33:cf:
3f:0b:fd:37:e7:ec:44:2f:a6:d0:61:a9:c6:73:16:
51:9c:5f:1d:7b:7a:20:62:70:50:1c:ad:65:1f:2f:
b9:91:4d:9b:be:a2:1c:ff:53:a4:01:b3:ad:0c:a6:
16:1f:ad:89:7b:35:27:75:f1:04:79:04:68:ea:42:
7f:e8:d6:28:4a:3d:83:72:b4:a3:72:e4:46:17:72:
cf:86:6b:4d:df:fc:15:2f:f5:72:cc:1a:b5:74:4f:
f7:7b:91:e4:12:1f:c1:dc:e0:82:6b:e9:a3:32:25:
45:ea:bf:51:18:3b:a1:2c:b7:38:23:b7:e8:22:68:
d9:10:06:94:a2:39:33:c4:99:fd:70:00:14:a4:aa:
0c:f7:62:7b:07:b9:04:0f:f3:74:20:77:4f:95:4c:
e5:3c:dc:a2:21:97:ac:65:8f:53:b9:21:1f:d3:67:
c3:2c:3b:0a:8b:f8:94:54:07:13:4c:6d:25:56:45:
0d:08:b1:b3:4c:11:1e:65:d2:18:3c:9c:c7:e4:b7:
ed:0e:62:c6:bf:b9:b0:66:02:27:28:70:d1:ab:52:
7a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:87:DE:81:2C:36:91:95:50:A6:4C:89:F7:2F:8D:28:C9:57:56:46
X509v3 Authority Key Identifier:
keyid:FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:74:02:92:69:a9:e5:f4:2f:3d:f9:03:b4:bd:ef:4d:f1:dc:
1d:12:7b:27:f8:ef:04:00:5c:59:30:7e:43:cd:1c:64:e7:04:
10:a7:7a:e5:bc:e9:e8:f2:48:8c:2a:a9:34:9c:ee:e0:e1:29:
66:68:12:bb:75:7a:be:65:cc:76:a4:4b:14:a1:6a:b6:76:65:
a0:fe:73:fc:82:af:df:d5:2f:78:b0:94:0b:b6:36:d6:89:c1:
7d:53:0b:d5:54:e6:e6:15:22:5c:38:16:c8:bf:f6:bc:7e:22:
65:94:0c:ff:cb:82:7e:ef:b2:57:10:63:29:53:f2:90:a6:67:
35:ff:aa:9f:db:e7:a4:92:c0:f2:64:65:e0:d4:a7:da:6e:62:
7d:83:9a:39:89:d4:83:99:9f:48:8e:06:65:1a:c4:6f:d1:7b:
4e:c9:1b:0f:26:b5:83:e3:23:ef:92:b4:7f:e1:9d:8a:98:79:
ee:96:f7:89:bf:cc:15:0c:23:24:47:05:f4:ca:41:73:e8:1d:
d0:d5:fd:6b:5a:10:08:d1:cf:4d:54:87:72:93:15:12:1b:9d:
05:6b:96:2b:53:92:e3:a2:a6:12:9f:93:84:fe:63:c5:9c:e1:
08:e7:90:70:2a:c6:a4:6e:09:41:3b:eb:f9:80:c5:39:c3:89:
41:d7:62:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:01 2025 by rpki-client