Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File: xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier: UX/gPWMcbejnNSK6vxr9WnJg0oQhBd5O+aadDmPKoaY=
Subject key identifier: F9:52:3D:F1:38:3E:FC:1E:DE:18:7B:9E:14:F5:57:DD:5C:C4:BE:1F
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial: 0196C194167911298843E821CA58CB40BC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number: 10DB
Signing time: Sun 11 May 2025 23:00:29 +0000
Manifest this update: Sun 11 May 2025 23:00:29 +0000
Manifest next update: Mon 12 May 2025 23:00:29 +0000
Files and hashes: 1: BSgJK3zd9Y_223mUoTLPcPOstiI.roa (hash: Xk2I33HjNWnCyc+NaAuDhngUeqYXn+K/y09c1v7ieOc=)
2: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: rvZDhHB762f68j5YAm/doeggGHVhUGajKE8cuIQBs/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:16:79:11:29:88:43:e8:21:ca:58:cb:40:bc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Validity
Not Before: May 11 23:00:29 2025 GMT
Not After : May 12 23:00:29 2025 GMT
Subject: CN=f9523df1383efc1ede187b9e14f557dd5cc4be1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:94:93:fe:ea:4f:66:48:0b:93:4c:1a:fc:
3b:3b:a1:d7:e9:9f:57:1b:49:98:6f:e5:ba:0a:15:
cb:e0:a3:7c:d2:b4:32:43:67:1c:52:36:38:2b:de:
d2:47:c1:7b:87:bd:73:74:ab:63:bd:86:6a:c6:09:
3e:1a:67:65:56:48:c9:31:80:42:63:00:cf:05:2a:
04:d0:9a:37:0f:69:3e:12:04:17:f6:99:c3:32:82:
ba:fd:96:d7:0a:8f:5e:58:4c:49:41:75:7c:e0:ee:
b5:c3:7a:d3:85:b2:ba:86:9a:83:67:05:61:a9:0a:
2f:db:e4:3c:fb:1b:54:ef:e4:2e:85:8d:f0:ca:f9:
09:ab:84:6b:d5:2f:f7:09:4d:e1:e2:50:f5:46:75:
3a:1a:aa:44:c4:5a:2c:43:c2:14:67:2f:8a:5e:85:
2e:c2:6f:e4:d2:5b:12:d1:bd:8e:16:7e:7d:2d:6b:
d0:40:f9:c1:75:23:6c:9e:77:db:f6:15:c3:39:ec:
b6:e9:12:f1:db:fb:e4:82:50:0e:82:81:3d:e0:50:
81:15:6a:5a:d9:13:1a:e6:1e:fb:ac:3d:69:d6:29:
df:55:e5:ac:63:89:31:e4:9b:cc:a0:51:eb:9b:4d:
6e:75:2e:38:d2:57:2c:87:4a:08:58:f8:9d:59:9d:
80:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:52:3D:F1:38:3E:FC:1E:DE:18:7B:9E:14:F5:57:DD:5C:C4:BE:1F
X509v3 Authority Key Identifier:
keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fc:7e:e2:ba:0e:5d:3b:c2:07:d5:69:4b:6c:f6:0c:81:fc:
b0:7e:82:8a:ce:13:5a:c2:a1:78:d0:6c:2c:da:eb:36:3c:ba:
a7:64:8b:0e:c2:f1:a6:c0:94:60:77:f9:7f:3c:f1:e1:34:e6:
35:97:28:3f:87:1a:7a:7b:2e:44:46:d3:76:df:4d:3c:10:5e:
be:68:48:41:64:d4:a8:af:19:06:aa:d4:14:8f:cc:74:b2:6f:
2e:a0:0f:7e:19:3f:83:aa:be:f3:5b:4f:56:6a:d3:6f:61:91:
7f:6a:cc:d6:1f:4f:20:a9:8f:86:84:c1:e4:a1:3b:3e:be:f3:
c2:16:b4:7c:9d:53:59:1c:5a:bc:82:2d:2b:70:7e:9d:01:6b:
de:45:21:dc:89:c8:4b:82:91:14:cb:d7:a5:a5:3e:e7:3c:0d:
47:98:84:2a:58:51:00:67:75:3f:7c:7b:9a:5a:e5:8f:36:9c:
61:c0:b2:7e:15:c5:b4:4e:8b:22:dc:01:79:4c:44:7b:88:5e:
b0:be:ba:bd:a1:27:b0:c9:86:8b:97:04:f7:6d:dd:3d:cc:a3:
9e:21:aa:de:e9:97:7e:dd:cc:76:35:a1:1b:b8:95:c4:72:73:
63:75:61:0c:05:33:4f:99:ea:c3:48:96:e3:4e:c0:53:ea:dd:
13:0d:31:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:30:42 2025 by rpki-client