Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: RoKeVo7GvzxJ7UCFJ6fwrIdopkiw6swulPklxXOozm8=
Subject key identifier: 05:64:46:8C:F3:C5:96:AE:B7:09:64:9B:D4:1D:2C:24:68:83:3E:95
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 0197B890363EAAECC8C6CA29605A258059F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 0880
Signing time: Sat 28 Jun 2025 22:02:28 +0000
Manifest this update: Sat 28 Jun 2025 22:02:28 +0000
Manifest next update: Sun 29 Jun 2025 22:02:28 +0000
Files and hashes: 1: 6HNEABw1T6hIB0q4QQqsLY38I1Q.roa (hash: zNEGrf7ZrXB8v0Wt79viHUTyVYmykBBzT2YgGkxwTIA=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: uDI1lJhAKJkqlWtLWTie69DG71No1NOpe/C4PzeUrQs=)
3: gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa (hash: K0MEtWJdFKd4YOcyYI4uKnZtszhLsEQLNua4LTuOi4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:36:3e:aa:ec:c8:c6:ca:29:60:5a:25:80:59:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Jun 28 22:02:28 2025 GMT
Not After : Jun 29 22:02:28 2025 GMT
Subject: CN=0564468cf3c596aeb709649bd41d2c2468833e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:6a:58:c0:ea:9d:bf:04:72:45:57:c9:c9:
9b:db:42:63:12:2d:ea:ff:03:4d:63:3f:31:d7:a2:
90:f9:9e:78:48:48:9e:7d:f1:0a:06:c9:71:59:00:
12:3b:d3:20:7b:8b:89:de:ca:8b:f0:9b:0d:2d:f5:
5a:d8:5a:37:2f:02:2d:11:37:5a:2e:b4:6b:3e:40:
ed:d7:60:51:78:68:9d:13:f3:2a:13:8d:5e:b1:5b:
14:9a:2b:fa:fe:f6:22:4e:aa:2f:6e:30:26:db:98:
bc:56:3d:77:e7:8b:bc:b7:12:1b:6f:4e:c3:ba:9d:
d0:e4:1e:bf:43:2c:19:62:ea:97:f9:89:0a:df:51:
b7:55:1e:27:d6:eb:91:f5:cd:2c:08:8e:22:58:69:
2c:ce:f6:34:f3:28:49:e5:36:72:0f:0f:3c:e0:4a:
cc:cb:45:7c:d5:50:56:4a:ed:53:8b:ea:e5:53:e5:
e2:b0:0a:0e:32:42:0c:c4:f4:e1:cd:72:4b:fc:aa:
05:49:5d:b3:16:b2:bb:2d:ad:69:c8:17:fa:46:69:
3b:3e:40:63:a4:0e:eb:25:7a:b8:ce:c2:dd:ad:9d:
30:e4:1c:3e:49:b1:45:a7:8a:12:25:b0:5a:56:b3:
50:15:0d:c2:55:fa:1a:28:1b:db:d7:e1:ce:c4:e0:
29:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:64:46:8C:F3:C5:96:AE:B7:09:64:9B:D4:1D:2C:24:68:83:3E:95
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:90:c6:07:e8:1e:77:29:b4:b8:0e:a1:7e:3c:1b:c3:25:81:
f9:41:c0:19:37:ce:19:f8:4a:2c:cf:07:59:37:43:11:0b:00:
46:b6:f6:d5:09:55:14:0d:48:b7:32:db:62:78:bf:c9:d5:18:
ef:38:c6:9c:f3:fc:52:ce:12:b2:db:3f:c7:13:40:55:69:e8:
a6:71:fc:f0:df:53:e7:91:ad:88:45:d5:b5:61:67:0c:3a:9a:
fe:57:d0:c8:7c:18:85:c1:ca:83:15:1c:a3:3f:ae:7e:d1:b6:
ae:3a:d3:8f:fd:3e:df:c1:b4:93:fc:2d:5d:06:4a:e8:21:0a:
41:f0:8b:e8:2a:db:54:41:cd:8f:e4:e8:e6:66:e0:cc:6a:37:
27:19:bf:da:96:0f:90:75:13:a2:81:27:83:ce:bd:51:9a:63:
49:97:ce:90:82:64:36:e3:9a:7c:94:a1:2e:bf:51:e8:a8:ff:
4f:8d:95:94:fb:ac:cc:5e:8a:e7:cd:ba:19:89:78:58:7f:9c:
f4:a6:c6:84:ff:7c:ab:30:38:1f:94:1e:ef:c5:4e:89:99:31:
0f:c1:72:af:d3:50:0c:4a:ad:15:d3:a6:a1:f1:b9:5a:d0:e5:
b4:6c:bc:c8:2b:b1:2d:34:82:81:df:c5:04:af:b8:5c:ce:4f:
6e:15:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:25 2025 by rpki-client