Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
File: XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft (raw, json)
Hash identifier: xg1uyvzAGv2RwgL+/z+hEw3RdzWsCbCWlP51wT5k80A=
Subject key identifier: 0B:48:9F:FA:9D:60:DB:A1:D3:A0:A7:A3:0B:40:13:A0:97:79:75:B4
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 01976A7390251228A87F2C815ECFDA6D4D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
Manifest number: 1594
Signing time: Fri 13 Jun 2025 18:00:47 +0000
Manifest this update: Fri 13 Jun 2025 18:00:47 +0000
Manifest next update: Sat 14 Jun 2025 18:00:47 +0000
Files and hashes: 1: A0W4NLtnqVewyPWtMUlDJQbCQXE.roa (hash: MYxIYetVdJmSAzMctuQMtMzPS4ahJ2EbSnELEfjBMw0=)
2: XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl (hash: 6j8TC6H96TmnowjStccaXDjxGKjG340R2epiO17khAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:73:90:25:12:28:a8:7f:2c:81:5e:cf:da:6d:4d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Jun 13 18:00:47 2025 GMT
Not After : Jun 14 18:00:47 2025 GMT
Subject: CN=0b489ffa9d60dba1d3a0a7a30b4013a0977975b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:16:67:93:1a:78:9a:32:de:eb:46:fe:72:
f9:93:dd:f5:f5:63:a6:c1:ad:e7:47:10:f5:c6:b0:
e1:56:3e:f2:00:c1:ad:fe:2f:02:76:ae:e3:29:d0:
c0:d9:68:86:d7:ee:b4:a3:c8:f8:21:cb:fa:dc:a0:
9e:17:df:8a:7d:61:2e:1d:4c:9b:f9:da:e0:a3:8d:
f2:11:82:c4:10:85:ef:fb:9d:3c:94:b4:d9:23:8b:
52:9d:9a:84:33:67:58:22:c3:62:62:b2:5b:88:73:
ce:43:3c:68:a4:bb:09:c6:87:8e:dd:8e:2b:dd:17:
4c:d1:6d:02:25:49:41:c4:ca:1c:0e:04:ee:d1:36:
e3:fb:29:ed:b7:2e:37:21:3f:8c:46:6d:31:d3:68:
61:ec:0e:3e:d9:1e:0b:ce:cf:f2:3c:f3:3b:25:14:
0f:d4:c3:1a:74:6e:02:b3:31:e1:03:d9:32:8d:c0:
55:14:bb:f0:87:46:b8:93:c9:04:1b:d0:b6:08:75:
24:5b:61:aa:34:e4:06:3a:44:3d:47:07:f0:30:56:
86:fe:33:80:75:98:8e:cc:a4:04:3e:8c:b0:05:66:
34:57:f3:6d:33:e8:4d:a0:1d:f0:a0:10:76:dd:19:
e2:5c:be:96:e8:72:f9:b3:be:6e:dc:58:cf:e6:d2:
8c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:48:9F:FA:9D:60:DB:A1:D3:A0:A7:A3:0B:40:13:A0:97:79:75:B4
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3e:4a:85:36:36:15:de:e4:84:ca:bb:59:53:94:22:a5:54:
9e:af:a2:c6:3a:3a:c7:b3:25:1f:af:23:51:92:33:4e:9e:43:
09:37:d6:df:bd:ef:16:d4:c7:91:dd:5d:e6:7e:f8:cc:41:fb:
a0:be:10:27:29:83:5b:ed:e0:99:0a:c3:44:b8:02:16:b7:d9:
35:31:46:42:ec:1d:a9:76:27:eb:3c:fe:d2:8a:25:26:3e:36:
a8:8f:fa:87:9a:77:11:aa:77:3d:df:08:c7:df:ed:21:bf:bd:
e9:b7:13:17:20:bd:9e:62:2f:e1:a9:64:63:fc:61:9b:1f:0e:
86:02:95:87:d1:5b:1a:c5:b8:7b:7f:1c:17:c5:75:6b:7e:20:
42:64:30:45:55:92:b5:fb:e3:87:1b:66:9f:f0:15:c0:88:4e:
c9:48:7a:ee:12:94:ec:83:d8:83:77:da:5d:05:da:f8:10:02:
2f:58:c9:38:66:9a:27:c4:c8:fd:f3:28:34:98:ff:63:e9:16:
e3:df:25:a4:1a:ea:88:34:6f:8c:8a:e4:5f:f6:62:3b:1e:9f:
3b:ba:e1:61:b4:3e:5d:b8:78:cb:77:a7:77:e5:ba:4a:c6:f3:
11:e1:24:3a:db:a4:97:86:58:89:ad:c7:05:5e:b2:2b:0d:94:
fc:74:8b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:41:19 2025 by rpki-client