Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: pwvgKwVy4wwrPFiM9BUl09mVktiaLjj6A2X1WSTiQCI=
Subject key identifier: 29:F7:7D:E3:7E:04:5A:37:62:75:22:C6:49:A6:12:BE:9D:3A:6B:DB
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 0197722D30AFDF47FDA5C3B71DB9A0A59AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 06:00:53 +0000
Manifest this update: Sun 15 Jun 2025 06:00:53 +0000
Manifest next update: Mon 16 Jun 2025 06:00:53 +0000
Files and hashes: 1: K9i5BAZ6MzcgF9CzcPcItueT7VY.roa (hash: SAFMofRuJhJyuX+kxWxAf3VBKLBtrOMj73WD80i1Rgo=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: hZPHNpvcOGTs2D3GJZFd4yN9xcRDhh+23lEFdDsd+Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:30:af:df:47:fd:a5:c3:b7:1d:b9:a0:a5:9a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Jun 15 06:00:53 2025 GMT
Not After : Jun 16 06:00:53 2025 GMT
Subject: CN=29f77de37e045a37627522c649a612be9d3a6bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:55:80:c8:59:29:b0:00:65:96:0e:0e:39:
91:8c:2c:8e:a7:84:86:7f:cb:b7:b5:81:26:8d:15:
a0:1e:8e:30:e7:ba:06:30:d3:c5:25:48:e2:64:b5:
99:c0:80:65:d1:55:10:41:ab:bd:84:f6:f6:a5:3f:
67:a5:aa:4b:bf:b2:fb:86:da:34:21:9f:3e:4c:20:
fd:67:6d:57:8c:de:77:f4:b5:36:c6:72:7e:a8:67:
09:59:2d:d3:7b:31:ee:de:67:02:42:19:1d:e6:b6:
df:cd:a1:f2:8d:40:19:7b:99:ce:12:5f:ee:90:08:
f2:fb:eb:88:a5:b3:13:97:67:c4:b5:fd:60:c5:b7:
10:f4:cc:6b:c9:4b:0b:99:fb:6a:cd:7e:d6:b2:c3:
f5:ca:59:d3:17:3b:d3:9e:58:d5:e4:e3:11:4a:74:
9b:c4:59:0f:84:d5:af:51:33:52:11:d3:ed:b1:8e:
91:09:89:dc:43:70:4e:63:9b:b9:53:c9:54:40:9c:
da:31:44:b1:0b:ac:4a:99:c4:fe:46:21:69:18:98:
60:72:4b:b5:28:cc:54:5b:72:6f:ed:83:d2:d1:cd:
0b:06:99:5a:07:a6:02:d9:3b:f0:22:ef:2f:d4:22:
01:5b:a1:ae:62:1b:6b:db:83:b2:52:0a:29:8c:4c:
4b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F7:7D:E3:7E:04:5A:37:62:75:22:C6:49:A6:12:BE:9D:3A:6B:DB
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:2c:7c:2a:97:33:d6:7b:ec:6c:40:d8:13:0e:81:a5:ff:7d:
34:b7:f6:5d:37:0f:8f:6d:1e:8c:36:e0:f2:7c:2c:20:26:70:
2c:08:74:4d:8f:c4:df:f6:4a:e7:9b:f6:5d:f9:22:c4:23:e5:
a3:1c:0f:77:01:9c:cf:3d:a6:19:41:d7:d5:85:f7:f3:88:87:
9a:e5:04:8b:2a:32:a6:0c:8d:fd:9c:3f:70:63:f6:16:17:45:
bd:5a:6e:5d:c4:80:ce:01:1e:f2:ae:96:d6:37:d2:57:7b:60:
87:be:24:8f:59:d1:6b:48:02:bc:24:b8:c1:7b:b7:f4:db:83:
f1:42:9b:3a:77:d3:59:98:20:94:6a:99:a1:8e:11:e8:f4:57:
78:38:ab:59:ed:ba:ba:2d:53:0a:83:c2:6f:0a:96:74:ac:ca:
96:14:ae:bb:bc:07:fa:23:e1:73:46:27:a5:aa:2e:8f:0c:b1:
e4:55:c8:ed:36:e7:98:62:25:e1:73:7a:ca:10:a0:b4:3a:1f:
9e:58:1d:65:a0:76:89:a5:ba:46:f2:bf:2e:c0:9f:55:b3:42:
f6:f5:81:25:26:4a:26:9e:e7:97:11:6a:09:4c:10:e0:d6:85:
cc:ad:b4:82:06:02:12:44:7b:ae:ee:55:9c:28:ba:9a:a4:b4:
f2:6a:25:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:11:23 2025 by rpki-client