Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json)
Hash identifier: IszCoql0smLeVyjE6QC6928XFXbaELXqbQQP53+jX/U=
Subject key identifier: 35:F6:01:2E:AC:D2:1B:A1:F3:B2:E6:D8:2C:4A:2C:F4:0A:7B:CF:AE
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 0197BAEBD6ED202B18013C89355A7FB20FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
Manifest number: 0CD6
Signing time: Sun 29 Jun 2025 09:01:47 +0000
Manifest this update: Sun 29 Jun 2025 09:01:47 +0000
Manifest next update: Mon 30 Jun 2025 09:01:47 +0000
Files and hashes: 1: 40yCVkYGTOMJYURdKu5OL8q7Bzw.roa (hash: h/nti1hzbLvvpfXJilPwqQ4MgoCvDWVJCjnc6zF6lIg=)
2: 959nax4Sel7CbjLeAYmLWWQndxQ.roa (hash: liX4bBBihJXYjqG/dIaKEN/KHAc7Bsnfhrqb4D2Gsu0=)
3: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: JpXYngBmxTd4ax4NKEGwOTyNbs0UjX5gx6xN+j4AUsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:d6:ed:20:2b:18:01:3c:89:35:5a:7f:b2:0f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Jun 29 09:01:47 2025 GMT
Not After : Jun 30 09:01:47 2025 GMT
Subject: CN=35f6012eacd21ba1f3b2e6d82c4a2cf40a7bcfae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:9f:1e:c1:d0:67:4b:e8:52:37:f4:2a:0c:
c5:c7:68:9a:9c:50:71:35:a3:02:f4:a8:09:7f:b2:
ed:e0:3d:dc:75:79:e6:b2:6a:e8:f7:1f:db:5f:3c:
b6:88:84:3c:cd:2e:b4:cb:44:03:d1:a9:23:6f:b5:
96:72:72:c8:00:3a:07:43:b3:1a:5d:ba:c8:04:5d:
bf:7b:b6:a1:47:a4:4b:f0:58:78:d3:2d:f4:4b:dc:
7e:05:8a:52:cb:39:32:3b:ca:1b:97:f8:9f:0e:d2:
94:a2:16:bd:47:2c:e1:58:1b:db:0b:9e:cc:72:40:
57:d2:37:95:64:57:72:26:b7:95:c9:b6:19:95:78:
11:98:3e:83:90:30:cb:65:1d:75:a7:14:dc:c3:e0:
bc:47:4c:e0:df:78:a4:e1:4c:b4:48:06:df:b7:be:
91:a3:8a:94:4e:28:03:03:7d:f9:f4:32:47:dd:18:
a9:f6:18:5e:41:4f:b1:61:2f:11:1b:8d:e7:9f:1a:
b1:d4:01:99:56:3e:70:e2:7a:20:eb:85:4e:3f:2e:
ce:d5:36:e5:ea:d6:5b:e6:3a:97:73:f6:95:0a:2e:
22:5e:32:a9:08:07:82:ba:06:9c:e4:3d:cf:68:3d:
94:a2:c8:25:ab:4c:5c:81:c3:3f:b2:f7:7e:21:a7:
f7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F6:01:2E:AC:D2:1B:A1:F3:B2:E6:D8:2C:4A:2C:F4:0A:7B:CF:AE
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cb:fa:72:cb:7a:27:22:82:d1:8c:5d:e6:7b:f3:ae:96:e1:
a2:b5:80:21:41:07:29:6b:65:f4:b4:cb:fa:7e:49:a9:21:36:
0e:16:04:47:c5:a7:84:09:0f:7a:b9:a5:61:f4:04:84:d0:97:
dc:ba:53:e7:28:52:a1:46:79:b9:dc:b8:aa:91:ed:48:8a:37:
36:6a:7d:e4:88:e3:96:66:67:38:67:d6:50:9d:6b:da:42:95:
db:1b:16:c2:41:7b:3c:fc:34:69:07:de:54:a8:f2:fc:cc:b5:
21:53:1a:be:78:0b:53:d4:16:7c:14:26:66:3f:70:b2:20:79:
59:ba:14:09:4e:92:12:5e:2c:f4:f2:c3:58:2e:29:16:a1:fc:
5c:b6:46:5d:a5:43:2b:c9:a3:31:67:d7:d4:1f:5d:22:f0:2b:
45:a8:f1:71:c0:69:4f:70:10:df:23:f6:79:67:62:19:8d:12:
ff:fc:39:6f:f4:4c:5e:18:63:d1:24:25:98:9a:73:55:11:f5:
40:cb:e0:98:df:fb:b3:aa:ff:fa:70:b6:c5:a3:98:c2:c7:4c:
2d:0d:e9:df:0a:4f:9b:4e:7d:3f:16:74:ca:d8:98:67:dd:88:
f7:bd:56:7a:70:36:2b:c1:b8:c0:42:8e:cf:35:5e:40:2c:2c:
a1:de:cb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:45:01 2025 by rpki-client