Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
File: XzHZebcQ7eIGiCOIGqYRrROvVFk.mft (raw, json)
Hash identifier: ZBNCTCbS2MX2AbNjMj0ijZfSEkQGbiMfH4WmsF8JOm0=
Subject key identifier: FD:EC:F0:52:DA:C8:A1:11:46:65:44:52:0B:05:57:55:3C:B1:18:45
Authority key identifier: 5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
Certificate issuer: /CN=5f31d979b710ede2068823881aa611ad13af5459
Certificate serial: 0197B6A1B1D8F63E3CE5182266FB373783DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
Manifest number: 0B6A
Signing time: Sat 28 Jun 2025 13:02:19 +0000
Manifest this update: Sat 28 Jun 2025 13:02:19 +0000
Manifest next update: Sun 29 Jun 2025 13:02:19 +0000
Files and hashes: 1: 7VePb56Lb2mDp_DoHqAJOVOs_T8.roa (hash: V7IpcMoqQADg7SX3r725vYH2jPknDmi+ikdfBjQyP5c=)
2: XzHZebcQ7eIGiCOIGqYRrROvVFk.crl (hash: 8ExayLZ5/ccIWaIaZ++kRNG+wOSvfojIvWhOmy5Ewzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b1:d8:f6:3e:3c:e5:18:22:66:fb:37:37:83:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f31d979b710ede2068823881aa611ad13af5459
Validity
Not Before: Jun 28 13:02:19 2025 GMT
Not After : Jun 29 13:02:19 2025 GMT
Subject: CN=fdecf052dac8a111466544520b0557553cb11845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:91:b5:31:bb:7e:f7:4b:31:0f:d1:e2:13:7c:
18:3a:2a:c8:fa:21:cd:43:cd:73:64:0c:0e:52:06:
1e:f9:28:51:56:9f:e7:3c:8f:5a:a3:30:86:3d:c4:
a0:ad:25:02:9a:fc:d6:03:be:bd:b2:12:62:e2:e7:
bf:19:a2:28:73:53:2a:d9:26:0f:6a:7c:32:a6:07:
92:4a:13:ab:2f:9d:15:cb:d4:cd:e6:78:45:fc:65:
e2:f5:33:4d:c9:a7:3f:ec:d1:2c:e1:ab:6a:3a:b2:
59:26:1a:d6:5e:41:21:02:d8:5f:4b:44:d6:c4:34:
de:c0:9a:f7:78:09:10:32:a5:21:b9:b6:b3:62:94:
66:9f:ae:cf:eb:71:75:b9:ad:1b:a8:5a:c2:6d:41:
16:4f:a3:de:b4:89:88:e2:fa:4a:39:ef:e7:2f:bf:
7b:82:5a:f6:93:e2:1f:f8:e8:fc:2d:72:58:7e:59:
27:56:6a:e9:f7:fb:7b:f6:6f:5b:dc:12:49:cc:36:
7f:4d:11:b8:b7:3e:69:b4:53:6d:cf:98:44:de:cc:
91:f9:d7:a7:b6:ad:51:50:74:45:40:23:8d:4e:14:
47:d6:ed:33:8d:23:57:81:f1:7e:00:0c:4e:e9:87:
cc:fb:35:30:74:dc:58:47:f2:eb:10:34:e0:8a:4d:
b7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EC:F0:52:DA:C8:A1:11:46:65:44:52:0B:05:57:55:3C:B1:18:45
X509v3 Authority Key Identifier:
keyid:5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5c:4c:05:2a:a5:2f:61:41:f0:05:1c:b9:16:99:8a:05:c2:
0c:10:c6:53:14:d3:9d:f4:e8:e6:30:b1:b6:5b:47:88:75:84:
d0:65:b0:96:bd:02:b4:c4:f2:b6:f7:7a:a5:76:56:ae:44:ce:
76:9f:5f:5b:07:b2:bb:9a:ae:33:bb:2e:63:9d:30:9c:02:22:
15:f2:b4:00:54:dc:a1:1f:b1:8a:60:0c:a7:76:f0:70:e0:42:
2a:b3:68:7f:7c:1e:e4:ca:fd:c8:77:19:60:75:91:d1:69:61:
8b:23:4e:81:bd:07:c1:42:93:49:b3:0d:15:1d:eb:a5:ca:62:
02:28:bb:f9:c3:e3:76:cf:ef:af:a7:89:7a:6d:c0:a8:87:a1:
23:5f:17:e1:91:0e:9d:cc:07:9c:31:4a:4b:f9:5b:c1:7d:ef:
18:1b:24:2c:6f:4a:3d:7b:6c:77:f1:68:38:b4:44:bd:57:23:
28:db:fc:84:c8:97:01:47:53:8d:47:39:e4:84:88:19:6b:0b:
81:ae:a0:32:43:8b:a8:1c:cf:94:2a:68:69:56:49:c3:c1:10:
21:93:9f:ed:a4:93:1b:d1:b4:f1:fa:5e:6d:66:c4:6c:3c:26:
e7:0b:0f:24:e9:58:eb:9f:da:2a:02:98:0f:8f:d2:5a:65:b0:
12:fa:90:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:49 2025 by rpki-client