Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: ccIjJKDmDg+qQiBmHLMyDEq8Wz8tG+2AsnVznKRhvNs=
Subject key identifier: 01:62:34:44:BD:47:F3:5E:C7:6E:DF:2D:0D:11:F5:13:44:53:CF:36
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 0197B6A176B4AFBBA8BB80F60497F8CE31D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:02:04 +0000
Manifest this update: Sat 28 Jun 2025 13:02:04 +0000
Manifest next update: Sun 29 Jun 2025 13:02:04 +0000
Files and hashes: 1: tnQ5odqGfmjwtl_VRpWmuxnJVZc.roa (hash: jWqwIWRjWImreknKrwhsqWkckPsMaq433dW/u+UVzTY=)
2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: tmmhFSbxmWRQaug2uKGs79XeC+98K3jmQ3LDXA3QXKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:76:b4:af:bb:a8:bb:80:f6:04:97:f8:ce:31:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: Jun 28 13:02:04 2025 GMT
Not After : Jun 29 13:02:04 2025 GMT
Subject: CN=01623444bd47f35ec76edf2d0d11f5134453cf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:be:58:d8:36:96:ac:2d:b3:c2:5a:1c:57:86:
ef:e2:b3:32:a9:d9:9a:f9:a4:1c:7b:16:92:30:01:
2d:74:8e:d5:62:04:25:2f:41:0d:ca:77:7b:6e:d3:
22:1a:76:98:5b:61:f9:bb:b8:9a:46:43:aa:ea:51:
c5:88:1e:11:e8:55:3b:f4:19:0a:38:5c:0a:ba:0f:
2b:02:30:24:ba:51:39:96:39:6f:15:45:0c:3c:2e:
80:c0:9c:31:78:12:9d:e3:b9:7d:32:ed:ab:52:44:
71:83:df:41:1b:e5:21:53:64:53:26:b0:b6:3a:bc:
d3:b1:4b:d9:4c:de:5e:7f:27:09:73:8f:68:31:25:
7a:f8:52:6e:59:df:b2:89:48:cd:a9:a2:93:72:65:
40:de:a1:89:db:bd:db:ea:02:b8:28:1a:87:01:fd:
b7:9e:e7:a8:3d:1b:6a:3e:a8:bb:51:fe:64:87:d8:
b5:ea:22:c5:ca:a7:40:51:ec:1d:70:b0:a0:31:53:
a3:fc:68:95:84:7b:18:1d:1f:45:8e:9b:6f:b6:30:
e0:79:b0:36:ff:70:96:69:24:fb:dc:e8:9d:da:30:
27:8d:c2:55:b3:36:23:42:73:d4:de:aa:8d:35:5b:
f6:bb:4d:41:5d:7b:42:0b:d8:d5:40:5b:ee:03:02:
f1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:62:34:44:BD:47:F3:5E:C7:6E:DF:2D:0D:11:F5:13:44:53:CF:36
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d9:e0:6f:1e:d3:52:81:db:43:51:bf:b7:d9:43:a6:85:ad:
b3:d6:9c:6e:f7:c0:bc:d2:4f:4d:63:bb:9f:c3:91:79:3b:df:
1b:fc:e0:24:18:61:e7:df:84:1c:94:23:b8:c2:da:42:46:5a:
00:a6:c8:8b:f7:56:79:91:d1:67:bf:f3:89:71:87:ce:ee:c0:
42:28:07:44:f6:2e:0a:6a:73:82:aa:f4:ea:7c:52:cc:ba:67:
6c:6c:c8:ee:a7:a8:45:b1:8a:fa:b2:97:13:90:99:18:22:1b:
7f:c1:b3:d5:e0:74:53:77:60:1c:e2:e8:2c:94:9d:8e:a5:3f:
71:f2:31:fa:ac:cc:3f:f4:d3:f5:e7:bc:f1:4f:b9:a8:c7:66:
3f:d6:ae:f4:04:10:17:ac:b5:2c:68:87:7a:45:31:b6:7d:3a:
93:82:48:d5:4d:6c:8e:1f:60:b8:81:c4:3f:44:ef:7d:cd:9d:
02:27:de:c6:34:21:cc:6d:2a:92:53:50:3b:6c:7b:3b:ef:b7:
6f:bb:40:fb:5e:22:c9:8b:aa:01:94:7f:98:f2:14:83:42:7b:
40:89:63:dc:64:17:9c:b0:53:f4:b2:45:3a:32:a7:bb:12:ea:
2f:cf:c2:ba:8d:dc:82:66:15:38:da:cf:b7:50:41:8f:76:b0:
a6:9c:de:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:31 2025 by rpki-client