Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: V2e1clcVAAz9Jvd0dGou7uE6jEFu89seX55WQTE0bak=
Subject key identifier: 6A:AA:75:53:2E:B9:5F:53:17:A5:73:F0:E0:E6:58:E1:4B:8F:C1:1C
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 0197B5FC3A2E0CD5D8E72C68EAC767022493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 14C8
Signing time: Sat 28 Jun 2025 10:01:35 +0000
Manifest this update: Sat 28 Jun 2025 10:01:35 +0000
Manifest next update: Sun 29 Jun 2025 10:01:35 +0000
Files and hashes: 1: 6BSNFyDmxjJKuKKXuAvPxKEuvHY.roa (hash: c6KHneV5lWrYB0vjR6eF0or+/RE98WhZucc1FLSvOaw=)
2: NiPqBoYHUOXXzCg0hHiDr6kmELQ.roa (hash: Xv44Y+Ginwz/PKxo+To+TC8XkCzR/fuz2BqxnW0vSNw=)
3: WVzv9IPs18jpEk9vxuxZJ9DgM6E.roa (hash: B0rUdnUd104guvU3/ZQlq+5h7/GgTzLKvxjoBYXsJx8=)
4: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: vWcB+M93c13uQcxN7+6eZweCPlYyimGq14Ep5pAmHZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:3a:2e:0c:d5:d8:e7:2c:68:ea:c7:67:02:24:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Jun 28 10:01:35 2025 GMT
Not After : Jun 29 10:01:35 2025 GMT
Subject: CN=6aaa75532eb95f5317a573f0e0e658e14b8fc11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:47:33:03:27:43:bd:3d:1e:d4:74:55:48:
75:98:bf:65:d7:22:40:b4:ce:ee:30:31:f4:58:74:
f3:ab:89:39:37:91:4f:0f:cf:ff:d5:f4:d0:c4:7f:
66:99:c5:9a:e7:55:80:40:a4:69:18:6a:6f:c7:a2:
2f:9d:07:98:cf:62:47:8c:4f:00:de:ba:87:b4:91:
a4:d1:66:72:ba:f4:42:48:44:d4:4a:48:5f:11:fe:
a8:e0:d8:39:f9:2f:71:87:ec:90:cb:73:a4:9a:c2:
1b:28:6d:b7:bc:1e:34:8e:02:12:03:50:76:0d:32:
84:ba:ed:0a:99:13:ba:2f:be:ca:49:70:b4:b7:c9:
66:82:61:03:b3:b2:e3:b1:c7:b1:0b:dd:57:18:8f:
60:67:9b:16:6f:b6:c8:5d:f8:e8:54:e9:28:c0:e6:
7e:e0:91:9f:5f:be:2d:98:b9:1d:9a:f5:3d:a4:c7:
ef:2a:bc:71:88:01:2c:bd:42:9c:d3:0e:6f:39:7a:
3f:a0:31:a5:32:94:80:12:a8:0f:f0:1a:06:a6:a2:
f1:d7:bb:8c:01:65:3c:bf:47:2d:71:54:a6:03:c6:
e0:bc:2e:fa:ee:b2:40:fd:c5:5a:da:6a:8c:f3:f0:
17:75:22:29:14:46:b1:13:2d:6f:10:34:11:21:a0:
65:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AA:75:53:2E:B9:5F:53:17:A5:73:F0:E0:E6:58:E1:4B:8F:C1:1C
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:25:a8:b8:e5:79:11:8c:fc:72:91:e8:0e:b3:52:38:fd:27:
9c:f3:10:ae:3b:f3:f3:f8:c7:a4:bf:61:a7:8c:86:1f:e5:5b:
c6:2a:b6:b3:f9:84:58:b3:75:ac:c4:94:0c:f7:44:c8:7c:f6:
d9:92:17:9f:e5:3f:a4:a3:f8:a0:51:69:3f:42:3d:19:46:4a:
7d:e2:9b:af:48:6f:3c:00:a1:92:2f:ae:65:7b:4b:82:11:5d:
4c:c3:87:06:15:29:e4:4b:28:46:60:25:4f:f7:be:96:43:fe:
6e:8a:1d:b0:5c:e2:05:d1:a3:f7:de:03:2e:78:19:74:98:dd:
7f:2f:45:2f:32:bd:de:24:16:2a:04:a3:d2:12:ee:17:ad:75:
1f:af:75:77:28:43:ba:8c:33:5a:9b:de:e6:50:74:0c:ea:89:
ac:43:6b:d8:91:b6:13:a1:67:13:ba:b1:81:16:69:28:f9:83:
80:1a:a1:d9:2d:f8:56:5b:53:03:6f:be:b7:38:74:19:bc:d9:
46:af:0e:57:bf:88:a2:ad:a4:19:c5:e4:6e:a5:65:92:66:99:
52:c8:dc:84:47:05:c5:b1:ee:70:07:f7:fb:9d:e5:dd:6e:98:
b4:6b:cf:fd:9b:11:46:93:aa:7c:a2:21:0a:d1:e1:cd:1d:95:
d2:1e:fc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:08 2025 by rpki-client