Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
File: xCl41TJpj7IIQPlCsCR8Acj1eLI.mft (raw, json)
Hash identifier: z/dyOrS/zotK5b6LTEU4lKzVy3eJRBAAPO9K9NulmKQ=
Subject key identifier: 45:A7:E6:DD:73:21:D3:10:76:4E:B1:E8:C9:5C:D6:1A:61:09:0A:6D
Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
Certificate issuer: /CN=c42978d532698fb20840f942b0247c01c8f578b2
Certificate serial: 019773771436AD99780CB97EDCB04EF5621D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
Manifest number: 1280
Signing time: Sun 15 Jun 2025 12:01:13 +0000
Manifest this update: Sun 15 Jun 2025 12:01:13 +0000
Manifest next update: Mon 16 Jun 2025 12:01:13 +0000
Files and hashes: 1: sUz3CUFPMP6K6odB4EEfathIrJc.roa (hash: 1ZdcoiC8lHKCzYuENUSvIoHg+7T85+kAy12nWc2yMX0=)
2: xCl41TJpj7IIQPlCsCR8Acj1eLI.crl (hash: SQKZuOjXYACJMWRmuQJKCIKeC7/1N9Bm3q6ykqm4rJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:77:14:36:ad:99:78:0c:b9:7e:dc:b0:4e:f5:62:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2
Validity
Not Before: Jun 15 12:01:13 2025 GMT
Not After : Jun 16 12:01:13 2025 GMT
Subject: CN=45a7e6dd7321d310764eb1e8c95cd61a61090a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1b:e9:85:05:34:7a:e8:3d:c2:e6:86:43:fb:
ac:74:f6:e8:31:5f:65:fa:e4:a7:bb:05:a8:35:33:
58:7f:ad:fa:ff:64:56:fc:3c:36:6d:7c:9f:cb:82:
ce:fc:30:a4:67:67:41:66:e0:fa:1c:d4:c8:e0:c0:
e5:11:1a:1f:09:6b:18:dd:e6:79:b7:8e:aa:d1:bd:
a0:e7:9e:85:b1:f3:d0:a0:fa:59:2a:ac:d2:14:db:
08:98:c1:57:c8:de:4e:8c:87:ff:c9:0d:f1:e2:91:
17:c3:ba:3a:e1:87:80:a9:ea:03:b2:2e:a5:5f:84:
69:7a:52:f5:49:c1:c6:e0:9a:91:ca:f6:ad:c7:fc:
18:85:37:61:65:50:f4:10:e5:b0:eb:75:18:59:01:
e0:26:7b:ac:87:5c:fb:46:dc:e4:37:96:d4:a1:e0:
20:3a:e9:23:56:c1:1a:54:5c:a3:8a:95:11:8c:b6:
6f:1f:15:f8:d8:7b:fa:da:b9:1b:9c:a0:b1:99:19:
50:91:6e:ac:b1:85:67:ca:5f:ec:1f:20:ed:f9:5c:
f1:cd:82:11:95:33:98:79:fc:27:35:42:89:07:3b:
96:e5:29:83:72:98:12:e1:fc:4d:d3:bb:b6:c4:44:
24:7f:08:72:75:dc:2f:22:8b:23:f7:73:04:8d:f2:
bb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A7:E6:DD:73:21:D3:10:76:4E:B1:E8:C9:5C:D6:1A:61:09:0A:6D
X509v3 Authority Key Identifier:
keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7a:38:c3:a4:97:8a:0c:5f:4e:75:5d:8b:2b:be:83:a5:05:
d8:ae:81:53:08:2b:5c:5d:8a:28:7e:15:d9:0b:78:05:ce:e0:
28:c4:9f:bf:07:d6:6c:8b:03:b2:3b:22:f3:16:db:20:92:09:
86:a8:ed:68:1f:09:12:36:87:07:5f:29:55:78:04:f7:3a:38:
06:85:47:41:25:d3:87:e7:32:a8:12:bb:e6:de:e4:83:c0:e3:
17:48:7a:82:3c:b6:c4:1f:94:bf:3a:22:b5:1c:72:a6:d3:fc:
80:d0:d7:b6:47:b1:8d:98:43:d3:3a:f7:ed:9c:3f:f7:aa:84:
76:55:90:26:54:ef:d7:c0:dc:e7:2f:e3:5c:c6:59:36:03:15:
4b:a2:a9:f1:72:1a:9d:82:c1:fc:40:df:6b:0e:30:05:32:7b:
dc:36:6e:15:c7:77:eb:b3:be:9f:b4:d4:aa:61:23:8e:c7:31:
7e:ea:06:53:6b:eb:39:ad:22:0c:db:6b:80:ec:49:55:7a:3e:
c2:74:e9:e5:8a:ef:f0:41:6a:e8:72:29:44:e0:fb:af:1f:9d:
23:6c:38:db:19:89:9c:9e:f5:94:e9:03:9f:73:e4:c9:26:cd:
35:fe:18:6c:18:20:83:5e:d7:10:31:b6:0b:49:18:ea:f1:a4:
03:aa:f5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:11:00 2025 by rpki-client