Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File: Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier: wIa5jdRtLSZuGvPoODTiwtg6BD8/+S5HTfshuJ/4z3c=
Subject key identifier: 09:E1:A4:3D:ED:F8:29:34:0D:35:58:82:A5:64:5A:A8:40:6F:42:9C
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial: 019768852B959D28B1E250CBB72AE9BBFD24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number: 070B
Signing time: Fri 13 Jun 2025 09:00:47 +0000
Manifest this update: Fri 13 Jun 2025 09:00:47 +0000
Manifest next update: Sat 14 Jun 2025 09:00:47 +0000
Files and hashes: 1: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: 6nVh9f8CRmmPK6/chEHP1ogSf4wkzh/NDWCl5YCw0mQ=)
2: oNaxj3U73YsxY2SMYd62wSvMB4E.roa (hash: +NOpZAlgmwl+h9fy4R1kVxAQ1d7pxMvgMiKewHh1e4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:2b:95:9d:28:b1:e2:50:cb:b7:2a:e9:bb:fd:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Validity
Not Before: Jun 13 09:00:47 2025 GMT
Not After : Jun 14 09:00:47 2025 GMT
Subject: CN=09e1a43dedf829340d355882a5645aa8406f429c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:2b:19:bc:78:c0:75:fb:7e:42:9d:2c:e1:
99:72:0d:12:62:38:40:42:35:ac:4c:22:8e:51:af:
ef:f3:ea:0e:3d:b9:f1:29:1a:95:21:b8:18:93:8b:
5f:b1:af:15:7a:e6:0d:07:95:62:aa:d3:41:5e:c6:
8f:e9:6b:65:8a:68:54:32:1b:a7:ba:e4:47:26:0e:
67:74:8e:38:5e:f8:4c:26:40:1d:62:48:5e:25:d0:
01:7e:2e:5c:de:39:c6:c7:45:8f:4f:f8:4f:90:8c:
33:28:1d:17:d1:98:33:df:54:a9:b9:fd:a0:ac:de:
ea:2e:0c:38:5e:9b:5c:f8:15:96:c5:7c:43:7a:c5:
13:7f:ee:2b:7c:bf:22:19:0b:cb:76:79:9a:b2:6a:
96:fa:ce:94:46:f9:60:10:9a:91:bf:e5:ca:35:a3:
c2:cf:d6:24:ae:7c:09:13:9c:38:fd:29:f4:40:64:
f9:49:87:ec:4b:33:70:7c:2d:ee:b7:fd:cd:92:fd:
b3:32:11:68:d9:c9:f2:81:84:0f:ea:c8:89:86:e9:
c6:9e:bb:70:af:9c:50:63:01:eb:0e:0f:cc:4a:ba:
31:36:8b:9a:9a:d9:ed:05:27:b3:0a:e3:4c:e4:f7:
91:c7:1c:a3:9b:ce:f7:39:db:74:d3:d4:93:32:1f:
7d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E1:A4:3D:ED:F8:29:34:0D:35:58:82:A5:64:5A:A8:40:6F:42:9C
X509v3 Authority Key Identifier:
keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:07:7a:85:15:57:55:62:ac:6e:64:c1:3f:09:80:98:54:28:
55:27:7d:0b:12:f0:4e:5b:85:4a:a7:b6:0e:7f:02:f3:2d:5c:
d6:0a:ef:69:14:a4:94:1c:4d:71:1c:30:0d:62:3d:6b:1d:24:
6f:14:a4:ba:ec:6a:b2:1d:c5:f7:be:d9:3d:bb:c6:6c:94:e0:
db:b1:82:25:0d:58:f7:f1:4c:9b:09:e5:d2:7b:7b:c1:a2:51:
f1:51:15:9f:5a:56:a1:85:c7:e0:56:dc:3e:e0:25:96:fb:be:
49:c2:f6:b3:3d:45:4f:34:0c:fc:f7:c9:f9:d8:7d:70:70:14:
43:03:2c:2c:e8:86:84:69:cd:cb:a4:c5:dd:f8:05:cb:0c:d6:
6c:0a:1e:a6:4b:0e:e2:b8:1c:11:60:7a:e6:c5:81:2a:86:7b:
35:c3:d3:25:17:c0:6c:94:4e:db:ed:d5:07:24:33:22:3d:14:
4e:1a:85:28:0f:48:be:2c:e5:40:cf:4d:d7:aa:36:3f:f5:1c:
ff:19:19:6f:40:df:d3:12:d7:97:8f:ed:aa:b1:e5:ce:ba:4b:
2a:a6:e7:65:5c:f1:a8:11:b9:e1:5d:d8:15:de:89:71:d3:42:
d6:13:8b:3d:0a:df:62:a7:f6:68:65:6d:d4:d5:cc:44:b9:0d:
c4:0b:5a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:36 2025 by rpki-client