Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: UhQBJBKevvQVaIrmKBHDadjg7eHhUYoacGhc9whK3oQ=
Subject key identifier: 14:DE:6E:3F:E8:8A:1D:B0:D9:00:96:AA:8C:5F:16:32:41:D6:34:E7
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 0197B7B37ED777D777C0315E2D9A64497F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 04EB
Signing time: Sat 28 Jun 2025 18:01:23 +0000
Manifest this update: Sat 28 Jun 2025 18:01:23 +0000
Manifest next update: Sun 29 Jun 2025 18:01:23 +0000
Files and hashes: 1: 3EU0oyFeuVgyRfJv8cphRhidY_4.roa (hash: uUVRINmwKIXEw7WBi5QJ2PuB8r4TwtW/ERy1bKhXTs0=)
2: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: zE6khWqcxmvTSPfn8MhJXZj1aSfX0TV3ZLuDJjbrxdc=)
3: z8EvHyxXFy9jjv9R0JxJLEvy2D4.roa (hash: sXJWZt8I6k1zbSOq8kLHcxqJ9ibbT5w1l4T6edD/QLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7e:d7:77:d7:77:c0:31:5e:2d:9a:64:49:7f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Jun 28 18:01:23 2025 GMT
Not After : Jun 29 18:01:23 2025 GMT
Subject: CN=14de6e3fe88a1db0d90096aa8c5f163241d634e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:28:65:ff:b9:41:a1:27:b1:e4:81:9a:f0:
21:d0:74:f0:9d:93:e0:68:69:3f:9a:2f:50:c6:b7:
17:43:55:ca:5b:89:77:8c:e2:7e:a6:b3:9e:20:23:
ed:06:1c:4a:19:6a:bb:65:61:9e:b9:a5:a3:98:d9:
dd:e2:9d:08:e9:a0:a0:2e:7e:5d:e9:cd:ed:7f:2f:
3d:b5:b2:95:72:2b:57:41:f1:d2:ce:fe:9b:76:2c:
cd:ae:1d:65:ea:27:23:76:2f:21:f4:78:6e:e3:5c:
65:ab:19:4c:0c:ae:81:e4:d8:6d:93:c8:63:2b:f9:
39:4d:c8:89:5a:31:ad:57:62:ae:a2:7f:b7:c6:07:
b5:cc:e8:97:73:bb:55:74:1e:c5:6b:ab:d8:b2:f3:
ee:e3:57:c3:32:6d:17:55:b2:e0:f8:b6:fe:bf:e5:
0f:2a:b1:7a:3f:14:be:1b:59:b2:73:81:01:db:45:
a3:b4:30:11:69:1c:ae:d3:02:04:5e:a9:4c:bd:55:
64:dc:1c:1c:53:14:ef:a5:d7:19:0c:55:98:f0:e3:
b0:19:1c:ce:43:73:e6:29:00:9b:ea:1b:5e:a9:6d:
de:c1:35:0b:8e:14:27:ec:69:10:99:41:63:a3:80:
a0:7c:0c:ee:20:f2:ea:05:db:f1:a4:ed:5e:39:70:
88:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DE:6E:3F:E8:8A:1D:B0:D9:00:96:AA:8C:5F:16:32:41:D6:34:E7
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:11:22:27:0b:8f:4e:fc:a1:8f:7d:c9:ed:bf:6b:3c:03:94:
11:2f:39:88:f6:2a:8b:b6:50:13:21:9b:fc:b9:ee:0a:52:0a:
aa:6b:f5:17:2c:54:ae:d2:b3:49:48:16:d8:0b:d8:8a:f4:8b:
91:92:1a:48:fd:c1:d9:89:ea:cc:3b:48:44:ee:4e:fb:bc:47:
8d:35:47:15:34:4f:96:1b:1a:ac:28:a1:63:fa:0e:a6:eb:26:
10:d9:da:b3:4b:11:df:1d:6c:2d:1f:39:f0:66:6e:0b:c2:f6:
62:45:52:8e:c9:31:7b:90:74:a5:72:93:3a:84:b1:4d:33:d6:
f7:4e:ab:14:3a:c0:a5:40:ff:f7:63:91:82:cd:3d:31:1c:c2:
55:fc:fb:c5:cb:f1:05:98:8d:2f:04:47:91:24:06:93:70:0b:
3c:de:3a:e6:56:f0:06:09:d2:40:6a:f9:74:c4:3c:cb:5f:72:
5d:38:e2:3d:20:4b:b4:0c:5b:b2:71:a8:5e:5b:7f:f0:92:dd:
6a:c1:7c:67:0b:3c:f4:38:8d:9c:da:ff:34:3f:dd:e1:1c:76:
3a:dc:1b:0a:12:51:30:3a:de:f6:c7:06:63:00:8c:74:ae:7b:
15:91:24:2d:91:59:84:4c:96:d7:1a:2a:69:fa:16:87:c6:32:
d0:21:ee:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:03 2025 by rpki-client