Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json)
Hash identifier: ZQSms+ACLMOhnMP32yI9q5SwoZ9Lg/iVRdhYKkyKt2w=
Subject key identifier: 8E:68:91:FE:DB:A9:A3:FF:C1:5C:E9:5D:0C:45:03:69:4D:FA:0F:A2
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 0197B9A184B219CAC31401F90508AB4EA89A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
Manifest number: 15BC
Signing time: Sun 29 Jun 2025 03:00:59 +0000
Manifest this update: Sun 29 Jun 2025 03:00:59 +0000
Manifest next update: Mon 30 Jun 2025 03:00:59 +0000
Files and hashes: 1: 7I-4Etn_-ATs5ke2k7C_Ri5wOGE.roa (hash: K1mMFeZqT9P2Y1UVAb4tDIF+y7HhkZLZ9faOLYgkjT4=)
2: XufZiysYk33Xck5lo3CwfpdliJQ.roa (hash: 4ytM8O/KmX8CZCFr30YeKBOK7MtkaAq/PPvvT8k7frg=)
3: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: ptIiR4JdFcgOsq9b6Q+KI0tO8Lap9Qnv6y+ImKtNulA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:84:b2:19:ca:c3:14:01:f9:05:08:ab:4e:a8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Jun 29 03:00:59 2025 GMT
Not After : Jun 30 03:00:59 2025 GMT
Subject: CN=8e6891fedba9a3ffc15ce95d0c4503694dfa0fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:c4:28:a9:18:61:4a:b5:01:ef:50:37:e3:
2e:ef:d9:79:d7:cf:13:9b:10:80:cc:f0:df:be:07:
d6:07:3f:97:e0:9c:93:ce:66:70:5d:e1:4a:cc:29:
5d:67:cd:5d:44:85:93:37:f4:88:2e:65:c4:86:e4:
93:97:d7:de:37:48:a8:16:0b:e2:08:f2:e2:c7:e8:
1e:25:86:66:69:44:d2:10:e4:fb:59:e1:22:58:57:
21:67:a4:92:2e:6b:49:05:c5:f0:e2:6c:15:bc:89:
09:ee:25:11:2d:00:4a:c7:7c:89:81:94:1c:d3:44:
31:17:df:db:38:23:d7:43:bb:16:09:d1:39:b3:df:
42:0b:02:d5:7b:51:26:88:af:94:2b:8a:0d:a4:f5:
38:96:04:90:e0:cb:7d:a3:b1:87:83:6a:94:ae:5b:
ff:d3:80:01:6b:9f:70:4d:a8:2c:70:ff:e2:a4:e6:
12:42:1d:a6:32:d9:42:50:62:58:7d:b4:0c:3b:b3:
92:ca:a1:a4:2f:f7:4e:cc:44:d6:b1:2b:ab:0c:fd:
58:69:a2:8c:d6:7e:a4:a9:4f:c4:23:f2:4d:4a:0e:
6c:7a:37:09:96:d5:a4:6c:99:c2:90:92:0f:00:40:
e5:bf:3a:a3:0d:54:86:41:7a:d0:82:e8:f8:f6:9a:
a0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:68:91:FE:DB:A9:A3:FF:C1:5C:E9:5D:0C:45:03:69:4D:FA:0F:A2
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:15:0c:78:6d:7d:ab:3a:79:89:15:c0:21:e6:ec:9a:c6:31:
d9:2a:a2:4b:30:2e:00:58:ea:e6:99:e6:c3:3e:db:72:ef:98:
77:d8:04:c1:bc:d3:de:1e:df:92:bb:84:6f:03:d5:86:73:b0:
3e:e4:8c:b7:af:64:14:9b:71:ec:ea:9b:2d:ec:4c:e4:b6:9c:
7c:89:20:22:e6:a9:09:df:91:94:22:ac:24:a5:a7:b4:4a:f4:
57:bf:6b:0f:1a:38:9f:6d:c5:36:1c:2a:7d:c5:8a:82:da:49:
2d:1d:7c:d4:de:07:39:60:4a:31:80:4a:3b:a2:84:5a:b5:4e:
0b:f2:87:82:a8:7e:f9:55:be:b0:17:d3:a5:aa:18:ef:ff:b3:
76:3f:8f:4f:1f:80:d4:7f:07:56:1b:f8:e8:6b:92:66:be:a2:
0d:c6:13:20:fa:1d:6d:13:48:00:3a:6e:3e:42:96:29:6e:c6:
b8:ed:be:a6:48:0e:0d:1e:ad:09:04:11:ac:c8:c9:8c:b7:65:
17:fb:39:87:d4:ff:a6:cb:0f:23:88:b6:0f:7a:80:f9:ee:44:
d4:73:bc:a7:a9:77:da:ed:4e:34:ff:9c:e1:d5:4c:d9:64:dc:
ac:16:ec:d0:f3:29:73:cd:19:80:5b:73:b8:4e:46:69:87:4c:
ec:15:67:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:54:46 2025 by rpki-client