Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
File: xYe5zadWA-sNnjdxZ79-DI5EBAM.mft (raw, json)
Hash identifier: YmH0eAa7pSFdqy0vaiuHfKEYhMfM6uVIQltwMNQsNLM=
Subject key identifier: 84:3F:50:16:AC:17:C2:62:85:57:0A:BF:11:44:25:BA:2E:30:9B:D4
Authority key identifier: C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
Certificate issuer: /CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Certificate serial: 0197BB597914F0A1CAD6AC7666D8C65FA07B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
Manifest number: 0EE4
Signing time: Sun 29 Jun 2025 11:01:32 +0000
Manifest this update: Sun 29 Jun 2025 11:01:32 +0000
Manifest next update: Mon 30 Jun 2025 11:01:32 +0000
Files and hashes: 1: 2bRBlMS8mkEOsT7iLZp1HMc84Xo.roa (hash: CRan8iZGqQIXvLKVDuE31EVqd8lIF+Eg5+VWJIeFz/I=)
2: xYe5zadWA-sNnjdxZ79-DI5EBAM.crl (hash: Ok03oV5YkRjq7B4vsD4uU9qTtGtPbbvGzM1oR5E9AYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:59:79:14:f0:a1:ca:d6:ac:76:66:d8:c6:5f:a0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Validity
Not Before: Jun 29 11:01:32 2025 GMT
Not After : Jun 30 11:01:32 2025 GMT
Subject: CN=843f5016ac17c26285570abf114425ba2e309bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f7:48:62:0e:a4:91:80:44:05:d7:71:11:5c:
b7:4a:61:c2:cb:9e:f9:a9:b8:f4:83:13:01:e5:dc:
a0:9a:4e:79:cd:1c:8d:1c:38:e9:0d:4f:57:fe:38:
fc:2b:d7:cb:db:11:47:a1:63:2a:b6:cb:de:7c:58:
b3:d2:b5:92:be:2c:fa:87:33:90:35:81:fc:62:c7:
e3:71:1c:94:9f:00:dc:e5:0d:8c:09:5f:60:11:c6:
54:02:38:2a:49:05:ef:93:ed:14:d0:5b:e1:fb:23:
93:e2:2e:d9:79:a9:3e:3a:9d:6b:84:23:75:6c:df:
bd:59:cc:2d:b1:db:19:fc:4b:d7:ac:68:89:13:53:
10:65:88:d5:e6:f8:6a:d4:28:59:53:cd:4f:ba:40:
f8:37:74:94:81:eb:c3:12:8a:7b:d0:d3:65:2d:13:
21:00:61:8f:d5:15:45:21:0e:41:0b:60:b3:eb:cc:
63:7a:f9:24:1d:dc:bb:70:7f:6c:cb:da:9e:8e:a9:
ec:fd:d7:0d:45:ea:b4:08:48:64:d4:df:04:f5:80:
87:a6:56:15:87:0a:07:ae:d8:32:62:31:37:52:78:
17:ce:57:ba:40:9a:91:90:38:a4:59:84:ae:1f:4f:
50:56:55:cc:38:59:28:e5:3d:47:b5:29:b2:4c:36:
f6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3F:50:16:AC:17:C2:62:85:57:0A:BF:11:44:25:BA:2E:30:9B:D4
X509v3 Authority Key Identifier:
keyid:C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:20:05:7d:7d:71:7d:99:8b:b7:02:4e:66:6e:75:ef:da:b4:
5a:23:db:eb:4c:4f:80:6a:2e:0e:ce:a2:4d:b9:c0:63:ae:df:
f4:d4:a5:4a:eb:8d:b5:b7:a4:d3:d2:7d:f3:5c:df:08:ad:01:
b8:a2:1a:ad:c9:04:e4:3f:ae:72:c4:a9:15:ac:11:80:ed:8b:
7b:28:de:0c:1f:91:50:dc:e9:74:99:94:82:88:08:60:b1:91:
91:dc:77:a7:ab:73:81:2b:50:ee:c8:f2:f9:c9:1d:d4:d9:cd:
55:14:ae:c6:ec:8b:18:20:e3:6d:d7:72:87:74:dd:cd:31:be:
6c:7d:fe:6f:96:40:8c:1b:cf:7d:96:1f:75:e2:1d:3d:b2:a3:
72:1b:b6:b9:83:4b:7b:83:1a:cd:ae:61:75:00:a3:d7:b3:ff:
e8:c2:b4:55:96:7c:4c:31:90:4d:ec:fd:e5:07:9b:ab:bb:4a:
52:c3:f1:a0:7c:95:72:ba:a3:a8:3d:12:a4:18:bf:0d:e1:ae:
ce:b6:c7:91:7a:e0:bc:ba:5d:da:89:f5:b6:63:3b:fe:3e:46:
30:ad:02:df:cd:90:16:60:5c:e3:23:1c:d2:10:bf:03:22:53:
0b:65:ea:13:b7:ef:96:29:c8:ba:ad:d5:ba:86:f2:e6:bf:1d:
f3:af:e9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:28:58 2025 by rpki-client