Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
File: xseGdZEgDB9fn9DMPemVTcE5hi4.mft (raw, json)
Hash identifier: kptzSRLwwKRquRbLG8hJE3jv95EQr0iU2nnPMnI1oJs=
Subject key identifier: ED:52:FA:09:C5:0C:5D:48:66:D5:11:B0:CA:0A:78:E7:78:18:B9:8E
Authority key identifier: C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
Certificate issuer: /CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Certificate serial: 0197B89002B977F9890DCABD89168544F2CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
Manifest number: 050B
Signing time: Sat 28 Jun 2025 22:02:14 +0000
Manifest this update: Sat 28 Jun 2025 22:02:14 +0000
Manifest next update: Sun 29 Jun 2025 22:02:14 +0000
Files and hashes: 1: n5CLi01m2wEwkEwNJimVxySnb68.roa (hash: 5V0GC7bRrvLJkkKN335rdHnMpL5HHN7RxPUN+snnmZM=)
2: xseGdZEgDB9fn9DMPemVTcE5hi4.crl (hash: EwCLrkMLDAYxpc8l8iiengkycWIbXLEjRX/rV75hpw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:02:b9:77:f9:89:0d:ca:bd:89:16:85:44:f2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Validity
Not Before: Jun 28 22:02:14 2025 GMT
Not After : Jun 29 22:02:14 2025 GMT
Subject: CN=ed52fa09c50c5d4866d511b0ca0a78e77818b98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:49:5b:88:ab:ca:44:80:c3:fa:c6:3f:ac:6d:
0e:4b:29:52:e3:91:59:7d:27:35:a0:41:4d:b3:41:
c2:a0:a3:ab:32:ef:12:72:13:ae:c1:b0:44:c7:a0:
c6:42:7f:53:df:a2:3f:66:ab:91:c5:c0:12:1b:19:
58:3e:38:b1:1d:ed:16:51:94:f0:d0:c7:8e:d6:6b:
13:a8:fb:6a:0f:61:db:89:7d:ac:da:c8:69:d7:3a:
e3:d6:c2:1a:cc:01:ab:58:77:bd:47:a1:fe:76:d9:
8f:17:70:e8:6d:0b:f0:d7:d8:f5:04:fa:30:f0:ad:
68:b6:e2:b5:9b:28:ac:c4:d3:b2:e5:d1:af:bd:24:
51:3c:66:55:78:e4:78:68:0c:af:8c:3f:87:4b:73:
96:8e:30:21:f7:9b:a1:d5:ae:3b:38:48:85:fe:44:
69:dc:76:d8:c9:86:31:58:58:a4:91:ec:4e:9f:a8:
ed:93:ae:0c:e1:db:9e:bc:1b:41:f5:29:01:34:fc:
b3:c7:b5:bf:1d:43:ed:f2:c8:cc:62:49:30:b0:b6:
c9:32:ad:ca:68:c1:8f:6d:a0:a9:03:b5:ac:95:f1:
3e:e1:cd:b6:47:04:ee:47:12:c5:1e:33:ef:88:ca:
b8:b4:91:e9:48:ea:fc:e5:0c:33:b7:2b:30:e6:ae:
2a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:52:FA:09:C5:0C:5D:48:66:D5:11:B0:CA:0A:78:E7:78:18:B9:8E
X509v3 Authority Key Identifier:
keyid:C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:84:e9:a1:63:23:52:b3:9a:41:51:d1:20:00:d3:62:78:38:
6a:92:9c:4f:be:da:68:fc:65:85:d5:ad:e3:69:59:8c:0e:dd:
91:01:27:e9:46:e3:87:09:45:33:7b:34:53:87:ed:2a:81:0f:
7a:e8:80:64:a4:b0:8e:ac:57:91:1c:c8:d1:46:9a:56:8a:74:
e2:5c:4c:46:60:6e:15:cc:4e:22:da:03:ba:b5:71:ba:0f:d0:
c8:ea:a0:18:2d:33:98:4e:4f:4d:e4:97:d9:48:40:31:d0:09:
40:4d:a9:e3:d1:89:42:b0:46:4f:0e:9d:71:93:9a:d5:ba:16:
f8:f2:e7:d0:02:0c:84:8e:cb:83:1c:cd:fb:45:06:0e:d9:b1:
fa:e4:af:68:31:91:fe:8a:b8:95:69:a5:1a:fa:a2:87:0a:3e:
f5:2c:20:72:ea:16:6b:a2:94:26:cc:70:64:65:c1:98:96:30:
68:38:91:03:88:2d:06:08:e4:e7:27:9a:5d:24:14:28:fc:19:
a9:db:41:c9:97:ea:cd:cf:9b:06:5b:f9:ef:d5:17:f7:74:47:
1d:fd:cc:25:7d:fc:38:6f:de:fc:98:44:98:37:56:18:bd:24:
73:c3:8e:81:bc:37:8f:2c:f1:3b:4e:63:1f:0a:de:9e:70:8b:
3b:68:6d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:17:29 2025 by rpki-client