Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier: lr5KCvBiHZ7BSOjOxn7rm+0FamsbTJefFKCFGHiuM9w=
Subject key identifier: 2F:5F:B1:41:45:75:6A:40:6C:65:FB:77:89:A8:41:60:06:A4:3A:9E
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 0197B745550C33AF59DEDFD6DF2C5CCE9FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number: 0D82
Signing time: Sat 28 Jun 2025 16:01:03 +0000
Manifest this update: Sat 28 Jun 2025 16:01:03 +0000
Manifest next update: Sun 29 Jun 2025 16:01:03 +0000
Files and hashes: 1: SKLs3SUJ6QhNbVJrjYVyYf81aEc.roa (hash: R9s9J4TIgAF+/QEDyhuyAA67g5wViBKHguVZOslEIHs=)
2: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: PWYje43egYcv/PGafrtbukVGXRx5f00/T2hKXNW+u6U=)
3: rAM6r2SFYvSQGaseydRgOte_bds.roa (hash: RYGmm+YYhr7YTk+o6zMn3og3hxzFO1fF/P5WPNoHQX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:55:0c:33:af:59:de:df:d6:df:2c:5c:ce:9f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: Jun 28 16:01:03 2025 GMT
Not After : Jun 29 16:01:03 2025 GMT
Subject: CN=2f5fb14145756a406c65fb7789a8416006a43a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:81:13:b0:6f:f9:85:c1:08:f8:6f:47:98:ab:
a6:54:40:94:a7:28:91:c0:ba:61:fc:60:54:7f:39:
30:df:d9:dc:9d:82:be:8e:f0:8d:81:88:05:3d:5d:
d6:f3:9c:84:4e:0e:e2:7b:f1:27:12:b5:35:46:5b:
52:ee:a1:fb:99:da:bb:19:31:79:4d:76:47:bb:40:
95:a2:28:ee:49:85:0b:43:78:34:f4:f3:26:c4:31:
67:ef:7c:d1:9a:de:24:5a:2c:32:44:68:42:5c:37:
b3:ec:bd:34:59:5b:72:11:bb:45:de:0b:9e:a6:42:
50:8e:a8:27:57:29:b0:07:fc:3e:9c:12:4f:70:e1:
40:45:aa:8b:b3:1f:e3:0e:64:f3:12:47:db:31:60:
ee:b2:b2:ec:07:4b:9e:b4:f4:66:40:93:2d:96:6a:
cc:3b:02:39:74:63:5f:6d:5a:81:48:da:e9:d7:79:
ac:62:0f:16:b4:03:e0:ac:d8:fc:5d:1e:76:07:d2:
d8:36:c5:fc:b1:cf:06:b6:3e:e3:cd:ed:f5:14:3d:
14:e4:14:a3:cc:55:7c:a2:18:a2:99:28:87:f5:9f:
61:98:2c:9f:3a:03:69:cc:df:32:bc:20:78:2d:87:
9b:0d:dd:bc:68:a6:2e:e5:1d:ef:38:0d:7d:53:a9:
a6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5F:B1:41:45:75:6A:40:6C:65:FB:77:89:A8:41:60:06:A4:3A:9E
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1e:c5:6c:7a:8a:ff:65:71:cc:b7:04:ac:c6:fe:18:2e:ef:
3f:a2:2f:f8:3b:3e:06:43:64:ab:ce:c9:b5:29:8d:c6:13:ba:
c2:ca:be:e3:0b:b0:25:0c:b4:53:0a:08:57:1b:84:21:c5:81:
76:07:37:2c:80:dd:f5:49:b1:17:8d:2c:72:91:99:f7:8e:3c:
fa:b1:94:8a:d9:91:d8:c5:af:9c:d1:44:43:e0:e1:6c:9e:d4:
75:a6:71:44:e4:8f:9f:bb:f5:40:39:31:ac:15:50:35:bc:4b:
2f:7e:1b:28:9a:d9:cd:ca:ca:57:95:66:1e:1c:d6:32:a5:73:
a8:f6:6c:15:b4:10:41:9b:91:02:f0:d8:dd:65:87:ee:97:91:
a5:48:9f:43:09:d9:95:85:c5:5f:c7:4e:39:10:3d:b3:85:4e:
15:c9:83:57:c7:d1:ff:e9:a9:38:3b:92:1c:46:e2:18:80:b4:
86:17:9a:5b:10:95:8a:b4:ee:a5:c4:4b:ca:a6:bc:f3:15:19:
b0:4b:11:f5:08:50:b3:36:af:51:0b:77:d1:ae:9f:17:9c:b4:
24:b4:67:88:0b:ee:45:e3:b8:76:8f:0b:16:74:c8:91:b0:8f:
4a:db:a7:5f:cf:2e:1f:54:5e:94:45:48:69:3b:55:82:ec:d2:
ca:40:41:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:32 2025 by rpki-client