Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: AlXpRYsxSOXYsFhMtGuYEMsm8NPRuhgHQ73LhJrlSVc=
Subject key identifier: 3C:4F:F1:DC:BA:78:25:6F:60:F5:31:E9:91:11:88:3A:A3:F2:A3:11
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 0197B70F55FBB7E5090D8C095455ADD701C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 0B9A
Signing time: Sat 28 Jun 2025 15:02:04 +0000
Manifest this update: Sat 28 Jun 2025 15:02:04 +0000
Manifest next update: Sun 29 Jun 2025 15:02:04 +0000
Files and hashes: 1: 1-4QYL3zSIvubO19_zc5_sPHbtmM.roa (hash: RSu12j4NBBmo2Fros21N8BPczXB3VUvZpIMKKBoV+WA=)
2: GVUHIfvKpJdOHNnRnG93-HDINEI.roa (hash: /GunX5DVAaqCLeh5vLqdmjbmgKNjplZucj4LzeQ5W4Y=)
3: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: y3F4aj27eGcnXQ5TYynVYXgS2kOMPpgV7u5FJxyrZm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:55:fb:b7:e5:09:0d:8c:09:54:55:ad:d7:01:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Jun 28 15:02:04 2025 GMT
Not After : Jun 29 15:02:04 2025 GMT
Subject: CN=3c4ff1dcba78256f60f531e99111883aa3f2a311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:3c:22:3e:38:1b:ec:f6:7b:d9:07:92:4b:
67:0a:d8:18:34:8f:4f:98:de:15:19:46:af:e3:a9:
50:06:a3:d2:51:f2:31:5b:99:06:77:bb:e4:58:fe:
35:45:62:7a:ab:b7:d6:69:5e:b3:f1:89:9d:57:45:
15:f9:e2:f3:fa:51:a9:e7:9e:de:3e:74:73:0c:08:
c8:d9:aa:6c:64:9e:8c:9c:3e:19:e6:99:21:83:1b:
ad:45:38:1c:27:1a:7a:93:8f:5d:cd:a7:9c:17:b0:
e7:c3:d4:c6:ed:a6:32:9b:9f:cc:46:fd:00:79:8b:
38:82:be:b9:04:94:e7:57:8f:a7:51:d6:90:64:33:
64:28:65:a7:0c:a2:80:7d:c8:9f:8b:5f:e4:35:3a:
a3:a0:2b:9b:81:7a:1e:f8:f1:d1:ba:53:29:fb:8f:
c9:db:48:fc:1c:3a:00:3a:80:af:ee:10:24:6d:ba:
63:a8:eb:be:31:aa:96:8b:fe:da:25:b2:66:24:51:
75:cf:0d:39:db:68:3a:cb:03:f7:7e:7b:f7:07:2e:
19:3e:bf:86:bc:f6:b4:d6:e0:9a:5e:75:87:de:d9:
7a:d8:da:56:4d:0f:75:18:2b:3a:dd:9e:4e:ef:d8:
79:f7:ea:75:60:60:f0:b4:15:7d:90:36:61:0b:c5:
59:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4F:F1:DC:BA:78:25:6F:60:F5:31:E9:91:11:88:3A:A3:F2:A3:11
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a8:11:36:7b:3c:89:9f:52:c1:16:62:f3:5d:f5:12:d9:0b:
9d:a9:49:6f:83:26:98:d6:45:70:34:27:8e:08:00:b9:5c:2f:
3a:65:7e:7c:38:17:4a:0f:2f:e8:fd:aa:76:cb:53:b1:3c:d1:
23:6c:65:74:43:75:34:24:de:25:8d:1b:ab:97:9a:89:18:a6:
e0:0f:24:12:2b:05:5c:c5:9a:3a:18:9c:6d:e2:54:8f:c4:fb:
7b:97:39:bc:dd:e8:63:e9:cb:8a:a6:89:78:bc:02:13:0b:05:
1b:1f:35:f3:27:e9:f6:3f:37:7a:73:91:e0:b9:7b:8c:97:60:
f3:88:1d:4f:8e:7a:19:51:54:2f:ec:3e:e0:7e:b1:61:75:13:
7b:60:3b:33:17:28:9b:cf:b0:8f:8e:5e:5f:6c:58:70:f3:56:
5c:b6:22:a4:d7:9b:d7:19:3f:9c:ee:ee:3e:9d:19:5e:2b:64:
05:0e:c3:88:61:69:14:ad:ff:4c:c0:48:5d:f4:39:43:b4:7d:
a9:d3:61:e2:4a:ae:71:97:09:17:e7:97:dc:6b:e0:79:f8:be:
6b:aa:3f:51:0a:0e:55:6a:af:47:8a:4e:57:03:b8:59:8b:a1:
74:ef:72:d4:bc:f2:5d:5c:4f:ee:7a:96:15:01:00:fd:d1:64:
4b:80:62:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:32:43 2025 by rpki-client