Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: QuOwcEY9MY0/HuWLDgp83qeilrzeIu4UYhjYj7fNBIg=
Subject key identifier: CC:39:75:C4:A1:B5:6B:8E:94:80:13:40:24:B6:F7:94:02:92:0D:D5
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 01976A05EFDE9B6859611192C76E3D026BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 0388
Signing time: Fri 13 Jun 2025 16:01:03 +0000
Manifest this update: Fri 13 Jun 2025 16:01:03 +0000
Manifest next update: Sat 14 Jun 2025 16:01:03 +0000
Files and hashes: 1: dzKdTpxKq_7se5lgqFGO0igJYGY.roa (hash: u39TgSEQ2jGGZn4qmwG4cCJAONJvQaBYbbp+0NBr6L0=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: jkKevEUgqBm6hdpQOMwU5H7PM2aS+S45mDWs9EnsynM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:ef:de:9b:68:59:61:11:92:c7:6e:3d:02:6b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Jun 13 16:01:03 2025 GMT
Not After : Jun 14 16:01:03 2025 GMT
Subject: CN=cc3975c4a1b56b8e9480134024b6f79402920dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:df:58:65:7b:73:bb:e2:c4:ec:44:ef:22:
ee:4b:ec:8e:45:92:a2:d2:f8:00:0d:23:b6:78:eb:
c5:bc:b7:fb:43:a6:9c:e6:eb:bd:77:1f:cc:5b:dc:
27:b6:3e:e6:47:6d:5c:55:03:85:7f:f4:62:45:fc:
9d:f9:69:8d:fe:1c:78:9a:fd:6e:29:22:09:f0:aa:
3a:e5:69:e7:da:50:12:cd:16:4b:99:1e:89:e1:10:
85:59:91:62:22:f7:31:1c:9e:1c:05:e6:d7:be:90:
b5:e0:4b:8a:ff:58:da:1c:b3:5d:10:7a:00:65:f7:
cd:d8:e1:25:bc:9f:b9:20:5e:bb:8e:9e:ee:5d:10:
f4:6d:50:36:a7:ce:b6:ad:f1:d8:9d:19:c5:33:ca:
9f:ad:bb:6f:bc:b4:da:05:ae:26:12:e8:76:7d:ed:
c6:94:cd:58:00:a6:2d:22:e6:3f:6a:ea:6a:cf:29:
ad:1a:c5:2a:98:2d:59:b3:79:c1:e8:3d:dc:99:e5:
b9:3d:ec:fd:f2:a1:7a:cf:83:0c:9b:5c:13:2a:e5:
0f:18:a2:7a:1a:1b:59:70:7b:2b:57:9d:6c:00:4d:
c8:07:9a:d0:f4:a6:3e:e0:a5:ca:70:2d:44:6d:aa:
17:b6:62:ff:3e:0d:60:26:b6:3d:34:52:10:99:49:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:39:75:C4:A1:B5:6B:8E:94:80:13:40:24:B6:F7:94:02:92:0D:D5
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f9:ba:7c:23:f5:2d:dd:88:f5:80:eb:07:b0:a1:0a:ed:d8:
f0:23:8a:45:60:dd:ae:2a:55:57:ed:fb:60:0f:1c:c3:7b:72:
bc:1f:02:87:3c:02:3f:40:fc:75:52:38:a2:9a:20:97:54:c3:
e9:54:fc:64:13:c4:9b:0a:c7:67:27:fe:ba:92:9a:15:26:89:
1c:f8:f4:2c:53:dc:a9:18:b6:ba:0e:3c:c8:53:23:72:b2:6d:
66:d3:9d:57:2f:b3:a3:12:0c:4f:4b:74:8f:03:6c:80:d4:25:
f2:1b:8d:0a:e3:04:6b:ff:b4:97:0b:b9:6e:67:3a:33:67:bb:
56:90:f1:a4:cd:78:47:bc:78:be:08:7b:7f:b2:f4:bb:3c:c6:
9a:7c:78:98:ed:c9:28:62:26:66:6a:6e:26:eb:71:ea:0e:f4:
67:a3:04:52:9d:4a:79:e8:4a:d4:19:6a:76:d2:9e:38:ae:b7:
0c:20:4e:e8:46:e5:59:93:b0:60:cc:fb:f2:b6:34:d3:df:6a:
d1:3b:df:91:69:3b:65:3d:51:58:5c:b5:7f:fd:51:ef:a3:cf:
1a:5e:d8:2c:10:84:6c:a1:dc:b8:99:98:45:c8:3f:39:7f:4a:
77:26:27:d8:35:43:3f:58:25:fd:01:ba:90:5a:51:7c:33:a0:
76:4c:93:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:03:31 2025 by rpki-client