Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: F5baZcJ9XrI2ZIDdy4zV0pHaehphokYSfGA/PAdlmKA=
Subject key identifier: DB:0B:21:06:B9:6A:75:07:B8:98:3E:14:97:E9:DA:E6:9B:95:C9:5F
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 0197B9A1C48EF619CF34DACE9EB543FF28A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 053D
Signing time: Sun 29 Jun 2025 03:01:15 +0000
Manifest this update: Sun 29 Jun 2025 03:01:15 +0000
Manifest next update: Mon 30 Jun 2025 03:01:15 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: BWgFQEO65H79x33Usx73ag/qMQYvZTHmNsOx3rUO0ug=)
2: u-lGXvBrrOtS45APR_Waw4axrTc.roa (hash: W3bOvfQ0kiPnMkAC0M/+bR7qhmdbihjJm/WhE44sz9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:c4:8e:f6:19:cf:34:da:ce:9e:b5:43:ff:28:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Jun 29 03:01:15 2025 GMT
Not After : Jun 30 03:01:15 2025 GMT
Subject: CN=db0b2106b96a7507b8983e1497e9dae69b95c95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:65:a7:5c:9c:5d:90:2f:aa:3e:a1:b0:94:
48:dc:cb:62:35:fc:42:8c:35:18:48:63:5f:f9:a6:
60:c4:40:7b:cc:21:36:49:39:fa:20:2b:97:36:57:
54:c1:fe:5a:31:aa:95:62:c8:1f:30:60:b8:61:cb:
14:d5:8d:82:19:ca:f1:47:9d:b5:8d:2f:73:93:40:
92:8c:b5:9d:47:d1:35:e0:50:42:3d:e5:b6:33:ff:
69:27:7a:b8:41:57:ab:96:c6:1d:8e:5a:72:ee:81:
d8:91:6c:7c:c4:59:57:f7:c5:e7:70:30:64:8a:7f:
03:2b:2b:36:8c:82:7e:ce:3d:d0:dd:ff:8b:e4:13:
28:dc:b4:00:7b:50:0d:cb:9c:e9:d6:13:64:8b:e5:
05:c5:72:f9:18:08:3d:e5:46:2a:20:4a:d2:79:2d:
a8:ef:3f:8a:28:86:12:cb:67:e7:70:76:a5:d7:a1:
5a:5e:b6:b9:b3:a4:16:41:8b:21:51:a7:33:9d:81:
7c:ad:a4:03:22:ce:7e:a3:1e:76:d4:96:db:a9:f0:
32:21:c6:79:5a:af:07:a3:fd:d3:f6:fe:88:a2:3b:
6d:a9:c0:6f:ce:34:7c:78:5d:b3:87:50:f9:16:9d:
6c:f8:8a:b4:bb:1e:37:9a:d6:8d:03:30:bd:d4:64:
a0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0B:21:06:B9:6A:75:07:B8:98:3E:14:97:E9:DA:E6:9B:95:C9:5F
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:be:de:ac:ae:bd:fe:a4:cc:b4:49:06:a8:46:5f:6c:b2:26:
1b:d7:23:6d:93:e2:06:d8:4f:db:42:ad:0f:ff:cd:2f:03:d3:
76:35:05:58:ca:b2:2e:32:d3:eb:2b:ac:57:87:f6:e3:77:50:
b2:9f:fa:8e:99:19:e8:30:b3:7e:a8:4c:a2:a2:6f:1c:76:f4:
d0:5e:02:61:3d:4e:d9:6f:63:38:23:1c:7a:7b:44:c8:38:40:
72:ab:8e:34:c3:e1:5b:a9:bb:23:9b:73:89:64:0d:71:0e:66:
d7:35:54:95:13:f9:c2:39:fd:35:10:2d:53:49:cc:95:1c:8c:
12:fc:2b:74:a2:5d:87:25:4c:9c:50:9e:7e:9b:ba:ed:4c:e8:
ea:3a:7b:45:b9:09:3a:50:ce:a2:08:d1:82:19:c3:c7:67:55:
fd:da:4b:af:4b:2d:97:b5:1d:78:b1:f9:29:a7:1e:d6:2c:84:
80:c3:06:c4:65:e0:23:85:ab:d4:10:ff:d5:2a:83:0e:45:33:
04:a7:95:03:83:ae:b3:78:07:fd:fc:c3:b6:78:21:d4:78:19:
fe:db:25:dc:08:fa:81:5d:7c:a1:d0:4d:f2:93:29:02:1e:01:
12:ce:32:c7:12:72:2e:41:38:11:9b:93:c8:85:8b:9e:ee:1c:
94:5c:40:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:25:57 2025 by rpki-client