Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier: vg/GQZIzLjkSSI3iteQcR337MOOJmS1Kedo0uKgViSk=
Subject key identifier: 77:87:12:23:F1:3A:79:26:86:9E:C4:4F:E1:64:0B:85:A6:1A:BD:29
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 0197C75D79EE6902B9D671E0E1F07F51B2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number: 09A6
Signing time: Tue 01 Jul 2025 19:01:21 +0000
Manifest this update: Tue 01 Jul 2025 19:01:21 +0000
Manifest next update: Wed 02 Jul 2025 19:01:21 +0000
Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: AwZlQ8SaIjKFyX5QsQZAg1hzSGPICjTXwWXhwEGuQ3s=)
2: gSiRx4os8QFHcIb_8HNB1oNvcB4.roa (hash: xKETz16WqJ7ei2SjBEUSJgDLxyYrlv9+GX/GJKUW2iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5d:79:ee:69:02:b9:d6:71:e0:e1:f0:7f:51:b2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: Jul 1 19:01:21 2025 GMT
Not After : Jul 2 19:01:21 2025 GMT
Subject: CN=77871223f13a7926869ec44fe1640b85a61abd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:7e:07:68:8c:76:00:3e:37:18:5f:b7:47:
3d:02:98:53:68:45:9c:e4:c4:6b:71:75:58:7b:62:
b2:bd:d4:2f:0c:61:4a:24:e6:57:ea:39:08:d2:a6:
d4:40:00:ff:10:fe:3c:c2:7a:e6:48:44:ec:ab:c3:
52:5b:a8:f6:49:5d:74:81:25:fc:9b:e3:a7:60:32:
be:90:35:97:f0:bd:c0:4c:f4:ac:73:85:e5:25:97:
62:8f:07:10:f6:f4:c5:90:de:1f:53:9d:02:17:e6:
a8:60:86:07:2d:f7:d5:f1:41:48:84:b2:63:76:50:
e2:4e:1f:84:be:db:a2:ef:01:e6:28:65:2f:f7:d5:
b8:e7:9e:db:56:64:20:f5:11:66:14:f9:24:73:c4:
94:72:bd:ad:56:eb:4a:42:6d:08:84:f1:fe:81:8f:
bd:15:de:ce:a4:b0:96:17:dd:42:e2:ed:60:e7:8d:
e5:48:9a:80:18:ff:35:f0:39:8d:f3:04:58:4d:34:
d3:18:46:53:89:51:cb:3b:0b:c1:be:b1:8c:dc:32:
18:42:6b:c6:f1:ad:bd:42:32:5c:c3:f9:1b:c7:10:
9c:de:51:2c:cf:07:77:5b:07:25:26:49:8e:53:64:
cb:d7:73:5d:a3:92:8b:d9:18:a1:16:b1:f9:3b:8f:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:87:12:23:F1:3A:79:26:86:9E:C4:4F:E1:64:0B:85:A6:1A:BD:29
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b9:4b:c6:e1:ef:97:6f:9b:ca:7b:21:2e:c9:6c:29:9b:63:
e9:26:f6:f4:28:57:f9:79:f3:3b:85:8f:7e:95:d1:a5:ad:5a:
b5:fe:84:45:c8:64:6b:ee:6d:20:4c:05:5a:6f:3c:3d:38:68:
6a:0d:20:d1:9c:86:53:c3:62:53:94:8c:d3:e8:eb:b3:f6:02:
3a:ba:98:f7:a3:a1:9e:75:5f:a3:99:cb:fc:f1:cc:a1:ef:41:
46:f1:9c:53:bb:56:33:38:ca:c2:e3:82:2e:42:f3:e1:bd:3d:
20:d9:a5:c4:da:ab:e3:4a:1a:bf:ee:fb:61:19:e9:34:b5:18:
38:61:1b:b2:40:17:6e:1a:2e:f7:29:d7:c5:6d:e1:a9:61:dc:
d1:4d:b2:e7:3c:d9:e5:53:fd:b5:10:40:76:8b:20:8a:18:ce:
0b:69:15:df:89:39:ab:5f:19:4e:b6:b2:10:5f:f2:27:02:e3:
dc:cf:5d:a4:90:e7:d6:d1:d7:0c:c4:b3:09:10:da:92:f2:3a:
8f:5b:72:e2:3a:93:d7:11:ea:53:07:90:fd:00:db:55:68:24:
cd:2a:b2:66:df:11:cc:13:2b:19:6f:d1:69:ed:92:b3:b0:57:
de:e2:62:ed:06:cc:61:5f:4b:6a:66:8b:df:3f:f3:06:b3:6b:
35:12:32:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:36:43 2025 by rpki-client