Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
File: Xjp4NTd7noSf58M_n8pFctkCZz8.mft (raw, json)
Hash identifier: XrxCTnA9s7p6yrlu/U0JHwxtDxWGQGw/83Sr66B9G+U=
Subject key identifier: FC:07:8C:1E:D7:D3:F2:DE:9D:B1:1F:E7:25:5A:E9:9E:8B:41:95:B3
Authority key identifier: 5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F
Certificate issuer: /CN=5e3a7835377b9e849fe7c33f9fca4572d902673f
Certificate serial: 0197B77C0F4E1EE4ABEC77D915BC451B0085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
Manifest number: 0D6A
Signing time: Sat 28 Jun 2025 17:00:50 +0000
Manifest this update: Sat 28 Jun 2025 17:00:50 +0000
Manifest next update: Sun 29 Jun 2025 17:00:50 +0000
Files and hashes: 1: Xjp4NTd7noSf58M_n8pFctkCZz8.crl (hash: 20+nsJQYUz05vm8gT0GBEivkFM90qBCPUczQQg5VKQU=)
2: YZ4IKL3VI82kHojYvMEpDnn7Ttk.roa (hash: /ay5+Bvjtyx5aTWN+x50j7spAi6yaynSV6oKHUcA/E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:0f:4e:1e:e4:ab:ec:77:d9:15:bc:45:1b:00:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3a7835377b9e849fe7c33f9fca4572d902673f
Validity
Not Before: Jun 28 17:00:50 2025 GMT
Not After : Jun 29 17:00:50 2025 GMT
Subject: CN=fc078c1ed7d3f2de9db11fe7255ae99e8b4195b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:96:44:8d:be:7c:e2:98:22:f9:eb:78:52:
9e:11:63:fd:65:ff:ad:62:48:5f:a0:56:f0:a2:b6:
a8:9e:54:02:f0:19:e8:e5:24:dc:04:36:a2:c7:4a:
a4:68:a5:28:10:26:c2:84:ce:0c:28:7f:97:5a:eb:
91:82:fb:00:ef:e2:84:56:2f:dd:6c:98:86:96:24:
2e:04:21:d0:bc:c3:2e:b5:f5:e5:eb:8b:29:38:35:
f3:de:77:4c:79:51:67:46:cb:6e:66:33:6c:a3:10:
e7:f9:e5:e7:20:72:bb:d8:fd:42:0a:54:2c:e9:86:
10:ca:b3:6e:00:c5:f4:79:b7:97:91:6f:8b:de:56:
73:89:58:06:ef:75:1e:f3:28:15:75:d2:19:fc:b1:
24:4f:b1:02:42:00:05:5c:cb:13:f4:17:be:05:78:
e0:1b:8a:1d:e2:64:7f:ed:66:bc:56:39:8c:52:fd:
bb:de:ed:a6:1e:b0:d5:58:3f:5b:28:0e:1c:a9:72:
de:6b:4a:3c:d6:9d:4d:01:97:e3:39:86:2a:65:28:
8e:09:91:e9:ef:ae:8a:80:72:09:3e:67:c3:9b:d6:
79:cc:35:60:d8:61:c3:83:bc:76:48:e1:b5:db:f1:
3a:68:96:d7:87:b0:df:78:d1:ea:22:68:09:ff:a7:
f3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:07:8C:1E:D7:D3:F2:DE:9D:B1:1F:E7:25:5A:E9:9E:8B:41:95:B3
X509v3 Authority Key Identifier:
keyid:5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c5:31:72:09:91:91:94:0d:39:34:3a:f8:8e:a4:6c:43:73:
29:11:80:f8:65:4e:7f:8a:f0:ea:8c:6e:33:4e:28:f0:76:11:
2f:4b:92:a8:14:a0:f9:2b:86:82:19:9c:57:f5:43:57:8c:42:
52:46:2b:43:44:87:e2:0a:e7:3f:67:39:e8:3a:a1:34:77:65:
4a:c9:19:34:3f:9a:6a:15:6b:21:ea:67:c9:f6:fd:f3:c6:9d:
90:2d:11:9b:23:d3:cd:9b:b6:3a:8a:eb:87:81:6b:74:a7:ec:
e9:bb:66:90:bb:cd:64:bb:ea:07:f0:52:e6:5c:89:e8:54:f0:
f8:96:b9:f0:b2:68:bd:f2:54:fb:d9:d7:8e:8a:9b:60:f4:34:
6d:ec:c5:01:d3:8a:22:44:b7:d1:71:a0:48:e5:33:42:1e:3d:
38:4c:fa:e1:c1:0e:d4:69:7b:aa:ed:e5:be:19:02:d5:77:86:
c9:c6:a7:cf:58:e7:b7:86:cf:48:ef:c5:21:07:8c:e2:c3:b0:
ac:86:b9:8c:30:91:19:26:60:14:61:98:bf:8b:3a:10:3a:bc:
5a:f9:54:2f:d0:e3:84:f1:13:5b:f2:aa:b7:89:80:9b:4c:34:
51:34:f6:b6:4b:ea:3f:5c:a5:91:75:ed:2a:6e:2b:a2:8f:ca:
21:a5:33:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:59 2025 by rpki-client