Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
File: xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft (raw, json)
Hash identifier: 73jCtj/nfo0bJtSMzB4ktok9M5mnyPStUM4bymGPkY0=
Subject key identifier: 03:35:B2:51:C9:C6:6B:0B:AE:14:4B:FC:80:01:2E:56:E2:A8:EE:38
Authority key identifier: C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35
Certificate issuer: /CN=c6c6653e87bb2ef9adbb061960e20500a554f035
Certificate serial: 0196C6161DAFF3F360033A665F0E555404B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
Manifest number: 0503
Signing time: Mon 12 May 2025 20:01:00 +0000
Manifest this update: Mon 12 May 2025 20:01:00 +0000
Manifest next update: Tue 13 May 2025 20:01:00 +0000
Files and hashes: 1: CL-hnZLAW32dB0McMUvKXumHbjc.roa (hash: /6abOSVtqiSm907QP0eqatEoUJFnqFDpeoJMvvSk4WA=)
2: xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl (hash: pfZSUVI7PBhMO0VykT+m8Fj6Ex2txh6HwV2KOCfXvUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:16:1d:af:f3:f3:60:03:3a:66:5f:0e:55:54:04:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c6653e87bb2ef9adbb061960e20500a554f035
Validity
Not Before: May 12 20:01:00 2025 GMT
Not After : May 13 20:01:00 2025 GMT
Subject: CN=0335b251c9c66b0bae144bfc80012e56e2a8ee38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:5e:92:c9:dc:a3:d8:44:76:b7:78:94:a1:
1f:c7:83:72:02:cc:72:30:b5:4e:ff:1b:9a:f7:31:
f1:4a:42:5a:85:af:42:35:89:8c:4a:29:2e:bf:e2:
4a:38:e4:ba:64:9a:2b:93:9d:b0:22:91:c6:5c:12:
24:70:1b:7c:ef:4e:2f:32:04:0c:40:c3:33:f9:b8:
fb:ac:73:c9:b0:0c:57:51:0e:3b:4d:fc:bb:76:9b:
f3:b7:d8:f5:34:30:e6:56:1f:41:20:8d:92:d7:d0:
33:86:93:fd:66:64:8c:4e:18:1a:79:73:2f:78:04:
8d:9d:3b:e4:f1:1a:06:6b:7d:2b:c8:0c:05:1f:a3:
68:d5:69:ea:7e:db:25:40:52:c0:eb:70:a6:c4:33:
6c:3f:cf:97:38:08:2d:e0:b4:c5:b6:36:46:97:a5:
be:64:05:14:16:b2:57:04:b1:97:80:32:d8:4e:0f:
b2:e5:5f:44:7a:4b:06:4a:9f:99:69:38:18:63:c2:
66:c9:7b:ee:76:f5:eb:ab:3f:d3:ca:4c:0d:b2:81:
a9:2c:10:17:21:66:e7:74:75:cb:7c:01:41:60:7c:
97:3b:02:69:5b:28:a2:1c:ce:29:d0:2d:41:ef:42:
14:75:cf:4a:53:5a:bc:be:9d:e9:a1:a9:bf:cc:14:
41:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:35:B2:51:C9:C6:6B:0B:AE:14:4B:FC:80:01:2E:56:E2:A8:EE:38
X509v3 Authority Key Identifier:
keyid:C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1c:d6:6f:2a:8a:80:fc:43:40:ca:96:96:52:37:b2:95:b9:
f8:c1:ff:3a:f1:bf:f0:b9:e5:49:6f:05:6a:92:98:47:8b:f6:
a2:dd:d4:a6:ac:61:7e:a9:4f:be:1b:37:50:1c:12:c6:f1:51:
79:d6:1a:35:6f:61:87:41:14:ac:a9:ed:b0:d3:f4:bb:46:24:
ee:eb:59:29:c7:76:97:60:bf:54:0c:19:45:b9:91:d4:c4:ff:
f3:5a:66:c2:67:60:2f:0f:12:e7:c0:38:71:ed:5d:be:8b:74:
70:f0:d0:be:2e:34:a9:ff:17:4a:f2:df:1c:3f:2b:d4:8e:c4:
27:02:45:b0:02:ad:3e:9a:6f:e9:16:be:24:72:94:fc:aa:af:
ad:68:95:db:c7:71:60:da:a7:c5:77:4f:b2:e6:80:00:4e:7f:
82:68:46:78:c8:af:da:57:84:b4:28:af:41:ee:52:76:a2:51:
82:29:ed:fc:49:92:4e:97:33:f8:67:a5:30:c6:57:b1:3d:15:
df:9f:2b:f6:d0:dc:18:39:fc:70:d4:3c:df:8c:b7:9a:ee:70:
36:73:ee:0a:af:f3:e7:55:96:c9:a1:81:80:06:e5:e8:de:85:
59:08:9a:7e:86:76:ea:95:83:ea:dd:a0:bf:bf:bc:75:d0:b8:
be:1f:3d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:57:54 2025 by rpki-client