Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File: xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier: Nqjp8c3oy25WgoD3+lQGQYdf0fF5Q/bQ4/c2n7EYLaY=
Subject key identifier: 2D:3F:51:E8:3D:82:5E:A3:C1:F9:C6:83:1C:A9:31:97:F7:06:A8:FE
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial: 0197BAB3EDD2C5096DDF61E449F545B4AC7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number: 115C
Signing time: Sun 29 Jun 2025 08:00:43 +0000
Manifest this update: Sun 29 Jun 2025 08:00:43 +0000
Manifest next update: Mon 30 Jun 2025 08:00:43 +0000
Files and hashes: 1: BSgJK3zd9Y_223mUoTLPcPOstiI.roa (hash: Xk2I33HjNWnCyc+NaAuDhngUeqYXn+K/y09c1v7ieOc=)
2: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: 1rLmcIhh9mONt2TlF302xtj50fT9Z8xayp6lCv2+Fzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b3:ed:d2:c5:09:6d:df:61:e4:49:f5:45:b4:ac:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Validity
Not Before: Jun 29 08:00:43 2025 GMT
Not After : Jun 30 08:00:43 2025 GMT
Subject: CN=2d3f51e83d825ea3c1f9c6831ca93197f706a8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:c9:d5:74:f8:4c:fe:1b:76:ec:a7:96:88:
f1:fc:1f:38:db:ff:2d:26:04:5d:75:09:a9:9f:65:
5b:73:b6:48:24:3f:b1:dd:a0:a1:0e:56:c6:a2:b5:
30:96:78:6d:d6:6b:2d:a8:28:0e:d2:f1:85:eb:b6:
84:1e:2e:83:a9:ce:64:70:90:ac:2b:92:3d:08:bf:
72:86:3b:8c:2c:3e:fe:ac:7f:30:ff:ae:b5:22:ed:
bd:0f:d9:0b:6f:71:e6:1f:3e:7d:c6:d3:ec:ee:eb:
3f:ce:dd:8c:04:b1:8e:53:5e:da:55:a2:0e:51:19:
98:ed:ef:ca:ef:a4:ab:53:5e:49:30:55:71:f3:9f:
26:7d:00:bc:cc:10:78:a6:e1:4b:91:34:5c:86:0d:
57:90:a4:25:be:a1:28:20:a5:d1:91:ae:ac:9e:3e:
d6:1e:a4:24:62:fa:75:2d:4e:63:a9:55:48:ac:70:
ef:5b:61:78:a9:e8:1c:79:4f:3c:2e:40:8f:98:37:
19:01:63:9b:b2:c1:f5:15:0c:ec:78:33:bf:9d:3e:
fb:9f:c8:ce:fb:ad:a0:a2:ec:af:78:f2:01:5d:28:
94:b6:22:d0:6a:1f:41:0e:e9:af:c6:1a:bf:f3:2c:
51:e7:50:71:63:63:d7:e4:aa:c0:d0:34:62:42:c9:
c2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3F:51:E8:3D:82:5E:A3:C1:F9:C6:83:1C:A9:31:97:F7:06:A8:FE
X509v3 Authority Key Identifier:
keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:af:d3:aa:18:fc:9b:74:70:43:44:05:44:d8:b9:06:4e:8f:
3a:6d:98:f9:a6:d0:98:1a:6c:2d:02:86:90:9f:60:39:12:f0:
14:b8:b3:bf:b4:b9:89:36:35:94:06:a4:36:01:ed:c4:bd:dd:
cf:43:76:16:9b:c0:1a:d2:78:ad:9a:33:04:28:67:79:51:cb:
ad:08:e2:4f:98:c9:e8:16:f6:d1:cb:86:c4:a9:8d:e2:12:5a:
96:c4:7a:69:18:c0:0e:31:9e:47:9c:b6:98:d5:c4:65:30:99:
17:c0:a1:73:3d:f1:7f:e7:5f:79:b4:19:28:cc:15:73:36:f5:
f1:07:30:e1:2b:df:d9:5b:5f:6a:c8:99:e5:08:1f:d5:ab:64:
4e:29:cf:84:d7:e3:fb:9a:4b:40:75:2e:0f:9e:7b:ab:dd:6d:
ea:69:7b:cf:a5:91:8d:8e:e1:64:44:1d:20:9c:f4:bd:d5:0c:
88:fb:94:e6:3b:d4:79:e7:db:e5:bd:c6:7d:4a:62:9d:b1:d3:
58:0a:4e:1f:19:3d:cc:ed:aa:70:b9:c6:c3:01:56:5e:5e:60:
96:7a:8e:b4:4e:1e:f7:f8:32:4a:98:f7:b0:b3:52:d6:5f:0f:
f6:88:3b:e9:78:39:3c:a5:e7:9d:a6:0b:ee:0d:88:b0:ca:cc:
e8:cd:12:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:24:12 2025 by rpki-client