Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
File: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft (raw, json)
Hash identifier: 0+G9dWsVfnNRaBgr4Mt/xxR+BV364L7r/eVdGQxF7hM=
Subject key identifier: CF:1B:FB:CB:81:D6:C5:4F:56:39:5C:FA:EB:DD:32:F9:D7:E2:D1:7A
Authority key identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
Certificate issuer: /CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Certificate serial: 0197B77C9F5F66F701916D872D47D54A2FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
Manifest number: 126A
Signing time: Sat 28 Jun 2025 17:01:27 +0000
Manifest this update: Sat 28 Jun 2025 17:01:27 +0000
Manifest next update: Sun 29 Jun 2025 17:01:27 +0000
Files and hashes: 1: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl (hash: SyzY64TwWKQWr2ioZfaRXlRZsLeF96V5piaDR6MAvcA=)
2: gbEdvQz4q0AdyM98MXiZjERkDX4.roa (hash: QnkSlwi1hREwXQkmvd9zqXoHe57V+gXhpktYubECCFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:9f:5f:66:f7:01:91:6d:87:2d:47:d5:4a:2f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Validity
Not Before: Jun 28 17:01:27 2025 GMT
Not After : Jun 29 17:01:27 2025 GMT
Subject: CN=cf1bfbcb81d6c54f56395cfaebdd32f9d7e2d17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:97:ab:f1:ae:fd:81:92:47:fb:b5:60:16:
ab:de:b5:45:37:b9:7c:83:89:7a:be:62:91:10:4b:
f7:bb:29:0e:50:b1:49:5e:a7:20:92:b6:88:de:8e:
85:99:bf:89:00:32:b1:7c:d6:87:f0:c9:5e:3c:42:
c1:77:1f:c5:82:89:09:3e:9d:75:d9:62:14:c5:45:
8b:95:58:87:73:0d:49:e7:43:33:ff:04:a0:5c:13:
df:b4:fd:a3:64:37:c7:c6:3c:3b:9a:db:eb:fc:ad:
7d:98:2a:cf:a0:e2:40:f5:67:36:4e:09:06:8c:6e:
8b:00:91:df:1a:14:e4:15:15:74:4c:c4:a3:68:32:
45:fd:cc:40:54:1e:b9:41:12:b6:15:3b:c0:31:c1:
a4:8f:6d:ea:4c:16:4e:31:42:ec:93:42:f3:c2:46:
0e:f4:35:5e:5e:5c:32:54:8e:42:42:70:cc:b4:73:
91:f0:5f:5e:9b:32:56:7d:99:06:91:ea:4a:49:de:
93:b5:83:3a:66:7d:71:3e:97:7c:9b:84:4c:af:4d:
c3:71:c8:7d:c9:b0:5a:ca:97:66:aa:c0:58:de:0f:
a6:1c:8d:11:ce:89:a9:01:38:6d:b9:ad:a0:cf:38:
fd:22:8e:4a:52:17:a5:9a:6b:51:1e:0d:3b:89:f0:
06:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1B:FB:CB:81:D6:C5:4F:56:39:5C:FA:EB:DD:32:F9:D7:E2:D1:7A
X509v3 Authority Key Identifier:
keyid:5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1a:47:61:0b:34:f5:ac:de:d2:4f:6c:ed:a1:26:2d:a7:7d:
a1:06:a9:b2:73:14:73:44:79:05:22:d5:14:12:27:60:28:8f:
f3:84:c0:fa:01:78:81:21:23:c9:53:8f:37:c1:02:6e:f9:dc:
0e:d6:3b:72:f4:bc:de:7d:ac:07:9f:64:e5:98:34:52:ae:bc:
68:12:20:ab:ea:c5:07:cf:2f:e2:08:52:9e:81:f9:50:c7:da:
ab:cd:2d:d4:f7:60:65:c3:74:ef:c3:f3:2e:1f:d8:7f:dc:4c:
69:3d:76:e2:62:ac:59:f2:05:16:f1:78:55:5b:b0:b1:ed:de:
57:12:5d:2a:73:3d:c8:99:77:86:15:5b:52:14:f0:67:67:0c:
27:1e:07:cf:ba:20:e0:62:90:a8:8e:75:38:53:9d:25:0f:43:
08:72:c8:e7:cc:53:7a:e8:c2:05:f2:ff:b3:d3:76:c8:8c:b3:
e6:fc:c0:75:64:1f:17:44:09:ea:45:5e:31:91:91:53:c3:a5:
99:e5:7d:20:f5:56:55:11:38:e8:c0:f7:60:a1:95:03:31:5d:
77:a8:f7:ed:e1:a2:a5:3f:26:45:db:c6:bf:15:16:8d:b7:73:
f1:fc:b9:b4:d8:b7:77:2d:fe:9e:d0:0d:5c:e2:38:b0:b5:79:
4f:2b:3f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:08 2025 by rpki-client