Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
File: xVCFAF0ORJ07r6McXLQp_4nSxLc.mft (raw, json)
Hash identifier: A6eDSkoJzGgJsTroRFqVx6k0V8nAo5XLaI+jjun/w80=
Subject key identifier: 71:4C:68:D5:E8:D5:DB:12:24:56:0C:64:C2:5E:E8:6E:0B:70:FE:00
Authority key identifier: C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
Certificate issuer: /CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Certificate serial: 019768BBEEC03B6C44D53B40BB2F31B851FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 10:00:36 +0000
Manifest this update: Fri 13 Jun 2025 10:00:36 +0000
Manifest next update: Sat 14 Jun 2025 10:00:36 +0000
Files and hashes: 1: qW8p1VoO0rmUxSBMMtwtZyhbaDM.roa (hash: qyIGTJ6GSXvozvgOJxEgitWAj9Fu7yaT8GLFsC9Ti8Q=)
2: xVCFAF0ORJ07r6McXLQp_4nSxLc.crl (hash: Bgzxsb35DneWec1o9VY881oqisDWFBlQd8Tgh2vd/4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:ee:c0:3b:6c:44:d5:3b:40:bb:2f:31:b8:51:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Validity
Not Before: Jun 13 10:00:36 2025 GMT
Not After : Jun 14 10:00:36 2025 GMT
Subject: CN=714c68d5e8d5db1224560c64c25ee86e0b70fe00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:35:fb:06:dd:10:be:f1:97:e5:16:01:8f:fb:
21:77:8d:c9:18:49:ba:5d:38:9b:15:92:33:c0:13:
e9:ac:1b:5d:ff:43:f1:c6:bf:27:c0:61:15:df:3b:
79:53:55:07:92:c9:99:c8:40:5d:8e:f4:57:32:a4:
42:75:f1:26:b5:c5:34:33:49:5d:da:60:04:e8:e5:
c5:bb:a1:fd:67:f8:62:88:f8:d8:cf:87:ce:7e:71:
16:49:38:b0:13:30:00:9c:6a:7e:60:f8:13:85:39:
24:b7:45:35:0e:cd:5d:c9:19:a1:5e:b5:2a:fd:d6:
fd:7a:61:70:5c:95:e7:19:b7:a1:4f:f1:38:db:11:
24:8c:6e:f0:8b:a0:c2:6e:4e:3a:6d:ae:ac:e2:6a:
ff:a1:5a:41:e6:e5:fc:fc:6f:10:27:f1:1d:35:8e:
46:8e:6e:cf:4f:84:b7:85:ec:1c:4e:7b:18:8f:bb:
23:57:17:2c:35:57:a1:2f:9e:fb:44:d4:3f:96:08:
a3:64:a6:fa:90:21:c5:0e:8c:a2:57:df:a7:c7:56:
18:fd:3a:7e:ef:8c:cd:38:12:ad:5f:df:5a:5a:a6:
49:34:f2:7f:49:1a:22:f5:55:12:1f:af:6a:6c:ae:
d5:2c:16:a6:2f:54:54:b3:e5:88:ef:3c:48:15:14:
f6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4C:68:D5:E8:D5:DB:12:24:56:0C:64:C2:5E:E8:6E:0B:70:FE:00
X509v3 Authority Key Identifier:
keyid:C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:70:ec:c8:1b:bf:ea:ba:c6:b7:f9:e8:8c:b9:66:e6:83:34:
25:ae:ef:e1:0d:39:b4:0a:1e:8c:c5:2f:ad:35:40:15:11:46:
05:de:ca:88:66:c7:4c:ed:4f:aa:70:39:b8:e6:cf:0b:b2:b6:
b5:4b:d4:67:02:96:15:57:e9:29:eb:7e:bb:f1:d8:8d:df:89:
a6:17:6b:80:cf:cf:85:f4:80:55:30:42:4d:93:9e:29:57:7e:
75:f8:24:d8:66:d2:48:10:4e:61:13:c2:79:c6:8e:5b:d7:9b:
e2:d5:f3:43:b7:95:68:24:b7:ed:b4:39:f5:e6:9f:4d:4e:f0:
7b:da:80:c8:1c:d1:af:91:bc:ed:4a:87:06:5b:5b:77:dc:d7:
0f:e9:50:d0:3d:73:ff:4c:83:87:6f:74:2a:37:1e:c6:f5:4f:
2d:d0:e9:ea:4a:67:8b:c3:2e:5d:c6:3a:d0:46:4e:7e:f3:9f:
65:a2:ba:25:12:32:2a:6a:65:ec:4a:d1:cf:83:cb:06:87:3c:
9e:71:40:91:1d:2c:2f:fb:b7:93:54:63:34:42:9b:31:7b:67:
6f:c5:ba:4b:6b:aa:95:9e:c3:ee:43:0a:e3:50:e7:bd:a4:0d:
73:89:e1:f8:3b:7b:b5:1c:86:14:6e:d1:b5:98:67:de:71:d3:
90:aa:3e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:13 2025 by rpki-client