Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
File: XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft (raw, json)
Hash identifier: SuW5DGCqFlAUkYxIOM70PEUoa9zKq4+V1nVt1XgBohs=
Subject key identifier: 73:E7:41:A6:31:3F:CC:ED:EE:A9:7E:2F:15:6A:C5:9A:34:52:78:63
Authority key identifier: 5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61
Certificate issuer: /CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
Certificate serial: 0197B70EEADF24AA75698101C511C0F4A79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
Manifest number: 1050
Signing time: Sat 28 Jun 2025 15:01:37 +0000
Manifest this update: Sat 28 Jun 2025 15:01:37 +0000
Manifest next update: Sun 29 Jun 2025 15:01:37 +0000
Files and hashes: 1: Cla5c1NehU4owZxYbWxe5QAstj0.roa (hash: kJV6jFD/Rf8rBVTNLGsW3TqMX9jv4tuD1CIR8TuTHbQ=)
2: XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl (hash: q8gjVS3ITARtKvj6IEldqmeSUTCZbyB4EQffh89ZuAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ea:df:24:aa:75:69:81:01:c5:11:c0:f4:a7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
Validity
Not Before: Jun 28 15:01:37 2025 GMT
Not After : Jun 29 15:01:37 2025 GMT
Subject: CN=73e741a6313fccedeea97e2f156ac59a34527863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:43:cb:84:7e:75:54:7e:dc:12:a8:c4:85:e3:
ed:41:ae:70:e4:57:11:dc:5e:0e:f3:27:10:6f:9e:
b0:4d:59:79:ea:6a:3e:4f:1c:17:cc:d4:47:85:d0:
fe:12:84:85:36:77:33:68:60:53:75:05:42:8c:dd:
b1:a7:6b:b4:9c:24:ea:4d:d6:5d:d0:10:f7:4b:69:
a0:89:af:e7:37:07:86:ae:67:35:ae:23:d2:79:7c:
e3:d6:07:4f:cc:0c:0a:93:3d:d9:22:ef:aa:7c:d6:
53:d3:2f:de:35:62:f8:c7:db:ba:0c:cf:df:a9:a9:
44:8d:ed:b7:0e:82:5b:ac:ed:71:ee:8e:4a:92:5a:
f4:34:20:db:cc:68:38:9e:67:0f:cf:c7:1e:e3:3e:
f6:32:b5:e0:ec:97:d2:aa:9c:ff:77:a8:83:b1:55:
ee:31:f3:cf:e2:3f:b8:bb:06:20:d0:24:d5:db:5d:
0f:fc:31:d8:97:a3:7d:9c:0a:e8:03:df:04:04:bb:
91:a8:67:41:3a:d7:2b:2c:02:a7:4e:1d:97:ba:63:
44:ea:bf:ca:9e:ab:0c:38:d0:af:54:fc:d8:af:d8:
0a:16:f8:5e:e3:6c:71:f0:0b:e1:c6:80:62:60:70:
d3:43:96:a5:63:38:9f:fb:42:00:fc:38:e7:6e:2a:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E7:41:A6:31:3F:CC:ED:EE:A9:7E:2F:15:6A:C5:9A:34:52:78:63
X509v3 Authority Key Identifier:
keyid:5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:14:df:dc:da:32:42:4b:93:70:21:63:d9:18:fd:68:72:dc:
7e:40:82:f8:d8:34:7e:af:c1:94:43:c3:61:b4:bd:5b:a7:8b:
d2:e8:ba:29:c0:64:e8:b8:94:98:93:62:8c:4b:22:8c:e9:24:
b6:40:22:7d:2e:d7:61:ba:81:ce:fd:ab:2b:59:b7:e7:2c:4e:
d4:d5:aa:2c:72:2a:32:81:63:2e:1b:99:b5:51:5b:2f:46:d5:
4b:5e:cb:61:60:69:ea:68:20:23:4e:86:bc:b1:51:d2:88:05:
1e:ca:34:f1:84:10:b6:e5:e0:58:e5:ad:08:72:c6:28:ef:b0:
c0:ea:26:d2:6c:3a:62:e0:df:65:2f:93:66:7f:b8:06:db:45:
35:ca:34:8d:76:15:21:62:ef:14:9a:35:1c:00:5e:9c:75:1b:
42:68:b6:52:0c:c0:ab:ae:03:23:f3:43:2a:a6:64:c1:eb:fa:
eb:28:b6:bb:52:3f:5e:a9:aa:bf:50:9b:06:3b:34:88:02:c0:
0c:c3:d1:7d:cb:38:fb:3b:3e:aa:fc:70:2c:9d:f0:dd:65:3b:
4e:c7:19:8a:77:29:7a:c0:5b:35:af:fb:60:35:0b:b2:cd:f8:
62:80:96:cb:9b:2c:44:84:d2:fc:47:54:a4:e9:93:34:fb:e5:
a7:bc:c8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:25 2025 by rpki-client