Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
File: XE_B5N78Rxyf23_a25iVVj2vmZw.mft (raw, json)
Hash identifier: fCnGHfvZFzeeEJ8NIqADTa+PYG4sKne9fTIeqIVdEs4=
Subject key identifier: 07:63:55:DB:00:EF:86:F6:56:B4:D3:7C:ED:04:55:35:28:2E:5A:00
Authority key identifier: 5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
Certificate issuer: /CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Certificate serial: 01976D3DD371E3DD3CE9203A818139B6D918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
Manifest number: 11AE
Signing time: Sat 14 Jun 2025 07:00:57 +0000
Manifest this update: Sat 14 Jun 2025 07:00:57 +0000
Manifest next update: Sun 15 Jun 2025 07:00:57 +0000
Files and hashes: 1: XE_B5N78Rxyf23_a25iVVj2vmZw.crl (hash: 6e+CFjLRbGk3w7wqU+JFJsd7WwOGgN7Tx6BnVJzMvug=)
2: lvOtY--5ta_q9u7-uCq8vanMR-o.roa (hash: IsaauvQSGX/KNFnK0CxHU+He7cfzl6r9rUGogp/cJBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:d3:71:e3:dd:3c:e9:20:3a:81:81:39:b6:d9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Validity
Not Before: Jun 14 07:00:57 2025 GMT
Not After : Jun 15 07:00:57 2025 GMT
Subject: CN=076355db00ef86f656b4d37ced045535282e5a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:cd:80:e9:42:13:98:47:cb:7d:e1:8c:13:
aa:f3:0e:8e:ee:03:a4:29:89:bf:53:e6:01:ac:ba:
18:a8:e0:b5:20:42:a8:4e:f1:3c:ff:99:9a:1d:1e:
48:01:72:e3:e8:a1:fb:61:43:08:ab:09:2c:a2:fd:
0f:fa:7c:4c:9b:af:c4:6e:fc:c2:bb:f4:03:28:0e:
f5:4b:17:51:34:02:20:75:87:4f:4c:51:1a:24:d6:
d6:a6:fb:d8:0d:3b:01:62:34:0e:21:18:5b:03:aa:
9e:97:51:6e:1e:07:2e:0c:0e:ee:ab:f8:1b:56:ba:
e9:82:64:f8:8d:42:50:a3:2b:6f:3e:fd:54:6c:6c:
fb:99:7c:9f:a0:bf:28:93:f5:4f:5d:a0:ac:f6:c4:
80:20:a5:83:fa:5e:28:7b:9a:a3:bc:2d:b2:b1:8c:
ca:cf:b2:9f:56:4e:6f:d9:d0:6e:bd:6a:40:32:0b:
1b:13:6d:4a:f6:53:e4:25:9d:47:8f:e8:cd:21:66:
66:c7:70:b0:6e:60:2f:6b:a2:c6:24:f6:86:dd:33:
c7:8d:0d:2c:62:7d:8f:b4:a3:52:36:7f:9a:d9:49:
d0:e7:70:73:99:98:96:35:eb:3d:ce:5f:2d:46:65:
09:90:6d:3e:f8:b9:02:ef:12:b5:cf:7f:38:ad:a1:
1e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:63:55:DB:00:EF:86:F6:56:B4:D3:7C:ED:04:55:35:28:2E:5A:00
X509v3 Authority Key Identifier:
keyid:5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ec:04:a2:0f:ae:ba:6b:1c:bb:27:11:c1:09:38:ce:47:ac:
6c:d9:52:df:4b:88:04:83:9a:40:30:66:ed:b0:6e:dc:13:b3:
eb:ec:58:f2:bc:5c:77:7f:f0:cb:8b:52:bc:c0:89:61:90:18:
f3:31:92:7d:bf:c5:21:89:bb:59:76:c1:a3:95:17:30:16:45:
b8:8a:f1:ae:09:b6:17:32:51:52:07:8c:24:83:7f:04:c0:49:
5c:96:cf:eb:85:66:5d:33:8e:d6:fc:8e:3b:68:a6:1a:11:d6:
98:85:c4:e0:f8:eb:38:00:32:f8:ca:cb:4a:68:c9:97:26:17:
07:25:a3:2b:ef:13:94:54:f6:a8:e5:be:d0:ee:da:59:f6:2c:
db:09:71:c6:71:5e:6e:cc:e3:f1:06:4d:16:1d:90:a4:d9:fc:
d1:7e:fe:be:06:38:8c:5a:ec:26:cc:5d:22:de:27:c0:0b:10:
71:16:59:13:e0:e7:fe:69:05:84:28:28:16:f1:45:a3:f0:a6:
3d:fd:aa:d5:c0:82:af:38:96:b9:db:17:88:0c:9b:a5:b0:d5:
8c:42:ef:24:23:41:b9:b0:cf:53:57:8c:18:c9:87:29:7e:eb:
89:6c:08:99:f7:0e:78:61:e7:d9:79:d4:57:7a:b6:a6:78:de:
29:0b:19:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:06:43 2025 by rpki-client