Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
File: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft (raw, json)
Hash identifier: Jwu+zt3LR+5lkJlAtJR8JE4cLCIlsX/KtMgE7XBA7fU=
Subject key identifier: 67:05:E1:C8:C7:77:DE:C8:52:74:2F:9B:33:3F:C1:AD:9F:63:5E:36
Authority key identifier: 5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
Certificate issuer: /CN=5ea68c853810d0320b156844f29317701b58610d
Certificate serial: 019769CE7235E345029052134E5D0C4C2120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
Manifest number: 09CB
Signing time: Fri 13 Jun 2025 15:00:26 +0000
Manifest this update: Fri 13 Jun 2025 15:00:26 +0000
Manifest next update: Sat 14 Jun 2025 15:00:26 +0000
Files and hashes: 1: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl (hash: 8iSnAcmMpy9EEqi3cLFMleDTRN4kVuRMIo7ffcsmJDI=)
2: zWctF490hB_hw_nmdFUFC_bPmMM.roa (hash: SsIXLaayVDdukX1So7HtLQgGu/7qBD8U27FPnJFIDDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:72:35:e3:45:02:90:52:13:4e:5d:0c:4c:21:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea68c853810d0320b156844f29317701b58610d
Validity
Not Before: Jun 13 15:00:26 2025 GMT
Not After : Jun 14 15:00:26 2025 GMT
Subject: CN=6705e1c8c777dec852742f9b333fc1ad9f635e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:30:01:0c:5c:98:2f:c4:99:cb:4a:5e:a1:ce:
40:fd:20:31:92:17:44:9b:7a:81:a9:a1:78:a8:dc:
2f:3b:7f:cd:11:e1:a8:bb:d8:57:7b:e9:0e:f2:5b:
57:6c:6a:ac:30:90:96:b2:68:ea:36:b9:3b:96:d6:
d6:1c:e8:17:e1:14:84:7a:a2:e0:ec:76:1c:d8:7b:
0c:cb:8c:c3:3c:a0:7d:a3:dc:79:8f:cb:25:5a:72:
88:97:1b:1e:f8:58:86:f3:d0:57:b2:5a:2b:fb:b9:
48:01:1d:6b:09:53:26:6d:ee:cc:e8:cf:cd:c6:c7:
b0:e2:98:94:ca:28:67:10:a0:e8:ae:04:f9:f6:37:
f5:fb:96:5f:2f:6d:8b:20:76:52:c9:60:cf:c9:98:
ef:1a:65:55:7d:ab:c7:9a:b6:e9:2d:44:6e:08:d6:
c9:de:b8:33:55:72:17:30:1f:1e:23:ce:ac:85:d9:
a7:24:ff:10:52:2d:d6:f1:44:4c:21:b3:cd:ac:97:
02:7d:10:9f:18:27:82:76:8b:d8:c8:37:62:ac:9c:
f0:f6:65:a7:a9:ee:63:56:a7:ee:17:2a:99:c9:52:
3b:9f:6a:9a:ce:f0:73:3f:6a:b5:54:e3:0e:b5:89:
d5:b6:40:a8:76:fe:4c:9d:a6:55:2f:cf:e2:ca:26:
ef:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:05:E1:C8:C7:77:DE:C8:52:74:2F:9B:33:3F:C1:AD:9F:63:5E:36
X509v3 Authority Key Identifier:
keyid:5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:bf:1f:62:35:1e:5a:87:3d:43:a3:d4:d2:0a:75:94:b2:44:
7b:db:32:6a:43:b1:cc:69:d5:5e:03:4c:60:a1:c5:8a:5d:36:
24:2e:46:7b:21:4b:f9:1f:a8:19:b8:0b:37:0a:72:d0:3b:d4:
72:e9:9b:49:90:2f:12:2e:21:51:e4:e5:b8:71:2e:d3:bc:75:
de:cd:05:ad:5d:3c:d8:c4:e0:45:cb:c4:37:8f:e1:85:3c:20:
58:85:37:1c:06:7e:f5:c2:db:05:d4:2c:6f:f3:7b:dc:4b:1a:
b8:2d:a4:9f:e1:51:4b:26:e2:be:42:d2:ec:fd:b0:0b:51:b2:
c8:0d:5b:f0:98:bd:c7:9e:21:1a:78:a1:fc:be:88:0a:77:45:
e5:1e:99:76:0b:58:f6:a2:ab:05:5c:62:de:71:f0:b7:28:cc:
2c:55:65:07:08:4f:4f:f6:7a:fd:1d:a3:4c:90:70:dd:7e:60:
a2:ea:41:01:54:79:24:af:60:05:65:ac:70:63:ef:4c:ad:c0:
70:bc:d1:41:2f:ec:64:e5:55:d9:a7:26:a4:2e:75:4a:88:6c:
4c:bf:da:fc:41:8c:00:d5:66:0f:10:80:7d:2e:50:56:62:d8:
70:c9:40:51:ed:b1:17:07:d3:9b:a2:3f:fb:4d:da:d8:7e:2d:
c8:bc:f2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:20 2025 by rpki-client