Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
File: xTG2PRGmzC0c5p4TEch6waanBzM.mft (raw, json)
Hash identifier: r2pDktINb2iMfv/pVInZZqUGuG2/zvYik2HERjGLWKc=
Subject key identifier: 47:51:93:BE:FF:CF:A8:00:94:3F:23:B0:EC:12:ED:4F:17:17:99:FD
Authority key identifier: C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
Certificate issuer: /CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Certificate serial: 0197B70E6FDF7C2E58F7C38E793B31054523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
Manifest number: 0E39
Signing time: Sat 28 Jun 2025 15:01:05 +0000
Manifest this update: Sat 28 Jun 2025 15:01:05 +0000
Manifest next update: Sun 29 Jun 2025 15:01:05 +0000
Files and hashes: 1: 3cKiOm3cqL9AuF9PS6f53tN4Gdg.roa (hash: HiF4cbbVkgMNvvCZGg36cGuMWinu6Z8X1/cmYfYlH0w=)
2: 7dlaDlkKgi4dAirWDUWBZGBGqcU.roa (hash: p1fbv33BP/4U3m5pS2Ws4rI2vfUa3r6QuSWQWQR+Iw4=)
3: xTG2PRGmzC0c5p4TEch6waanBzM.crl (hash: zNQ5EOtFbayH7Gjn5W5cZar0E69Ayfn2TclO2tcBPpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6f:df:7c:2e:58:f7:c3:8e:79:3b:31:05:45:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Validity
Not Before: Jun 28 15:01:05 2025 GMT
Not After : Jun 29 15:01:05 2025 GMT
Subject: CN=475193beffcfa800943f23b0ec12ed4f171799fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ec:33:24:b0:59:c4:04:b0:2b:71:00:a6:01:
bb:25:6a:1c:6c:e5:0a:b1:cc:9c:87:30:53:2c:63:
b7:34:6d:5d:44:1a:c0:bb:3f:17:ce:59:f3:29:ef:
48:b2:36:2d:c3:e1:ee:e2:0b:3d:fe:2d:de:f9:38:
17:34:21:cf:9d:a2:3c:00:70:27:6b:9c:e4:3f:08:
05:95:c3:72:3a:59:5e:aa:59:78:f3:28:2d:b0:ec:
c2:2a:18:8f:9c:24:09:be:78:a4:9f:38:6d:31:1f:
58:9d:fa:a8:33:46:d7:51:fd:ad:5c:3f:25:3e:39:
0f:36:c7:95:c0:82:d3:3f:b8:37:8e:00:8d:d6:76:
05:f1:9c:36:86:8a:6e:42:b1:00:36:be:d8:29:04:
03:b7:fb:26:6d:ea:74:e3:0d:2b:3a:3d:26:68:3c:
99:17:47:4e:2d:77:4b:20:f3:86:10:02:e7:f1:0a:
4c:de:49:2d:2c:72:39:df:b1:2e:25:a5:f6:25:f1:
d9:ca:59:4e:27:a2:0e:c1:ba:82:98:30:f3:d1:80:
de:85:3d:26:f3:af:c7:66:3b:57:be:0d:d6:9d:be:
a4:7a:78:ac:a3:c5:a4:d3:ff:d9:87:f4:ab:3b:34:
dc:3e:ce:d8:fb:fa:a6:c9:3e:34:06:8c:cb:dd:8d:
40:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:51:93:BE:FF:CF:A8:00:94:3F:23:B0:EC:12:ED:4F:17:17:99:FD
X509v3 Authority Key Identifier:
keyid:C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:55:66:d7:bb:72:e9:d5:3e:d0:96:e8:5d:00:f8:a8:51:1f:
b5:c4:7f:79:87:ab:57:f6:36:7a:24:e7:0a:2f:66:d2:07:b7:
21:95:88:ff:75:b5:27:00:b7:2d:8a:ac:b7:53:c6:ae:04:c1:
09:5b:12:90:c1:6b:d8:db:df:5d:07:06:33:9b:99:aa:35:c9:
bf:34:1f:3d:64:8b:08:ad:cc:dd:f4:d1:58:4d:0e:dc:36:3a:
1d:23:67:1f:a2:26:e2:6e:32:24:c5:73:61:16:c2:ef:67:d0:
6f:05:2c:7a:fc:1f:6e:f8:29:b1:fd:c7:bc:20:86:82:ca:1a:
29:fe:26:c5:90:14:5f:ff:86:d1:57:70:7e:c2:78:cc:49:18:
88:34:c9:a0:ba:69:45:b3:82:18:e1:ad:f2:c8:4f:ed:2e:92:
51:19:c2:00:a2:a2:7e:87:84:9d:dd:8b:c7:da:2f:98:c8:79:
96:cd:57:07:75:cf:7c:cb:ee:05:63:bc:92:f5:a1:52:7a:a1:
95:0f:5d:cc:b9:83:54:f7:85:03:7f:1e:c9:ed:0d:01:c7:dd:
83:fd:28:c5:4e:b2:a6:27:8b:c3:5e:8e:95:55:fe:f6:a5:2f:
99:47:dd:5f:d6:b5:ce:97:c0:cc:bf:e3:0e:e7:f4:b1:c5:89:
16:c9:7d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:05 2025 by rpki-client