Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: Nso85oJ75B4oc01KKYri1KjCagcUOjKON2fVBytCHOc=
Subject key identifier: ED:6C:89:D3:35:A4:22:F4:4C:0E:A0:B8:67:D2:21:9E:D5:39:2E:BB
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 0197B6A0BDF7A7FED364CEE6E032A7BBE873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 094B
Signing time: Sat 28 Jun 2025 13:01:17 +0000
Manifest this update: Sat 28 Jun 2025 13:01:17 +0000
Manifest next update: Sun 29 Jun 2025 13:01:17 +0000
Files and hashes: 1: Jg_jfBjHb0Vu6fkwZ37mMS91qI4.roa (hash: TfhNhqloOoAsI4fDNQ7bFxjaWUIihAJVfn4SJGIonjE=)
2: RAYhGqxG90i3Xl4IbOmBMXLaWWU.roa (hash: PkL3yCHqeCepv6d1R3k2egY2vgT3zl8lcQ+M9WOKBkE=)
3: WhuuzI-giOvU0WJGmRMWrjSlbX0.roa (hash: sWWRUBfHkfBvOOVFSvoXP3yUbe11I9qeTgURb62iypo=)
4: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: MU8ITr00nW8FXg+gjLryrChKPeAExXhQYpOF/3w7h8M=)
5: cu8YZEomM6yhTT6rKGZD0EswcrA.roa (hash: E+q2Kh42Kr16IAejR3Z8uLwJmIfrudkWS/YgHicEZAY=)
6: shFSKFhffIiUAgxysGmRtXRHjKM.roa (hash: dQvH9QymMjpXXdgyrmMvhjbB83wD/WfhP9dhFWk+qZg=)
7: syw_ZhTYU1w7NStTQl6XEtYJ7iw.roa (hash: vh0bYcr2sbcc1SgjyRRRbNDSidOSKXW4Nng93TqNAKw=)
8: ycVnM1zp10CMEnPemmwHq5Kmb7k.roa (hash: X47wni4QutejMcFMTFg2gNEEKNeesZr+QmIkUicE1Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:bd:f7:a7:fe:d3:64:ce:e6:e0:32:a7:bb:e8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Jun 28 13:01:17 2025 GMT
Not After : Jun 29 13:01:17 2025 GMT
Subject: CN=ed6c89d335a422f44c0ea0b867d2219ed5392ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:09:90:ed:b9:15:38:45:6e:c4:2d:21:bc:
cf:7c:86:14:f7:cf:b0:78:a5:03:d8:d2:3e:5c:ca:
0e:c3:8f:a2:74:f4:92:2d:02:37:f8:9e:bb:ed:63:
32:58:c2:bb:ff:1b:6b:a3:92:10:c3:6f:32:73:b9:
f2:25:fd:ac:0a:2e:44:01:2d:f9:85:ad:17:89:af:
4d:24:ad:df:12:4c:a0:ba:aa:4a:9f:4e:42:6f:02:
65:94:55:ca:46:ee:33:7c:c4:9a:a6:ea:2f:39:e6:
93:9e:df:cb:c8:f5:0f:e5:2b:8b:d8:0e:f1:4e:4b:
32:2f:d2:fa:97:5e:19:9f:e3:e6:d2:69:01:46:09:
48:8b:24:65:a8:e1:aa:e7:48:ee:91:12:1f:9b:3a:
be:f6:09:49:fd:c4:f4:e6:b4:ec:53:b4:e2:b0:7b:
00:0c:e0:2b:de:db:f8:3b:16:58:5d:04:a4:ec:36:
d5:db:b0:47:f3:ad:7b:29:fc:99:d2:09:3b:3d:e5:
85:1f:04:a8:68:fa:c3:a1:31:2c:0f:0a:71:3a:a0:
1a:40:66:80:b1:52:3b:4e:df:13:28:51:c2:66:b0:
2b:fb:1d:54:ad:5f:1f:ca:d1:25:58:8f:77:e7:8f:
13:e1:32:14:21:4e:db:e4:76:38:34:3a:ab:5a:05:
9a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6C:89:D3:35:A4:22:F4:4C:0E:A0:B8:67:D2:21:9E:D5:39:2E:BB
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d9:78:ce:88:98:9f:1d:5b:b8:ad:21:c7:81:88:87:b1:77:
2b:75:24:d9:96:95:00:e1:88:8c:b7:ef:87:9b:60:c2:82:ec:
6e:cf:ba:d9:b2:6e:ae:c2:dc:04:af:9a:c2:59:64:34:8b:a3:
d6:6c:17:c1:b0:34:c6:3c:f4:d1:8e:9a:64:69:dd:6c:b0:09:
cd:62:e3:5a:2a:17:2a:b2:01:20:1f:60:ed:6b:1c:cc:59:87:
0a:86:b7:f7:fe:f8:94:81:82:65:58:84:19:19:d4:3a:8f:2f:
c9:5c:29:5f:e2:bb:1d:5a:ee:ac:4a:14:c2:4d:50:ef:1f:cd:
10:2d:2e:48:7b:e6:f6:b4:2c:6b:e1:d7:01:4d:61:18:42:5b:
37:af:41:23:b5:c2:8a:29:60:52:6e:cd:db:1e:fc:24:4a:da:
2f:33:a3:ce:42:a2:57:d6:bf:d9:ea:83:a4:6a:1c:e4:02:61:
47:8a:1f:fb:5d:a6:25:cf:3c:33:e9:3d:f5:0b:e0:6d:72:5a:
cf:b1:63:aa:ae:db:6f:56:37:c9:b6:de:d7:fe:48:9e:57:25:
a6:8a:6a:49:62:5c:80:9f:c2:7f:05:ae:75:bf:fd:b9:03:c0:
4a:85:fa:ff:2f:0a:54:12:d9:fc:7c:70:ef:78:04:99:23:c9:
a9:7c:ad:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:16:49 2025 by rpki-client