Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
File: xcSzrlnZgfJQzIfatZeFSr7XowA.mft (raw, json)
Hash identifier: UAncZLOx37PdLMR7fdMMBnytUIyct1depbmbPxvfgAo=
Subject key identifier: 86:6D:E1:3C:8A:90:AC:28:7F:CE:D3:B2:1D:43:B9:6A:80:05:88:FE
Authority key identifier: C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
Certificate issuer: /CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Certificate serial: 01976DAB550B6A1E5FFEECCB92AA0CEB7496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
Manifest number: 04A8
Signing time: Sat 14 Jun 2025 09:00:34 +0000
Manifest this update: Sat 14 Jun 2025 09:00:34 +0000
Manifest next update: Sun 15 Jun 2025 09:00:34 +0000
Files and hashes: 1: tSYSYm63yj3qobuZYMSr1LAsH4E.roa (hash: e9vbUkUz5x9f5ya8J4QgHE0l9ibgPIgGHQ86whMQdU8=)
2: xcSzrlnZgfJQzIfatZeFSr7XowA.crl (hash: Pj5dFo0hZSPAIf6mDYl3shRf4URGaXTiNFBg7KBl23c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:55:0b:6a:1e:5f:fe:ec:cb:92:aa:0c:eb:74:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Validity
Not Before: Jun 14 09:00:34 2025 GMT
Not After : Jun 15 09:00:34 2025 GMT
Subject: CN=866de13c8a90ac287fced3b21d43b96a800588fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:74:5d:23:ee:ab:69:fe:f3:2c:55:6c:a1:ae:
c6:d0:c0:1d:db:1d:ef:08:2b:48:d2:5c:b2:21:aa:
c5:10:e3:21:db:56:87:bb:05:1c:10:05:1d:30:1b:
f7:63:c2:ea:b0:51:39:42:1d:39:6f:76:b1:a0:d8:
76:8c:c0:29:98:d0:2f:12:79:f9:aa:b7:69:b5:2a:
1f:f0:db:07:98:6f:a7:ea:79:ad:24:cf:97:7f:31:
28:f3:34:c8:1e:a5:fa:f0:9a:ea:7b:76:7e:da:9c:
30:03:fa:65:07:c4:3c:68:bd:93:ef:63:e9:b1:09:
c5:73:24:34:f9:6d:b5:7a:e7:fa:02:d5:e9:58:66:
34:83:e1:f3:87:00:50:13:e3:f4:70:40:06:9f:6f:
cc:76:33:da:c8:a0:10:9a:3f:a3:de:f4:1f:e9:95:
4f:3b:d6:d9:be:01:5a:54:35:45:89:5c:cd:26:ba:
04:fe:f2:77:06:5e:c1:9e:2d:ca:99:b7:a9:1e:f4:
5c:35:f9:93:35:7d:7d:60:1d:d3:7b:f5:61:fa:a1:
83:ed:6a:66:d6:ad:06:1f:87:2b:b6:91:55:69:5f:
17:f5:2d:5d:ad:5a:27:3c:c2:8d:0d:f4:29:7d:d9:
bc:07:39:08:4b:db:eb:96:14:50:fc:3e:83:e3:e1:
e7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6D:E1:3C:8A:90:AC:28:7F:CE:D3:B2:1D:43:B9:6A:80:05:88:FE
X509v3 Authority Key Identifier:
keyid:C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:27:24:95:70:09:50:d4:87:37:30:ea:8a:a1:84:cc:b7:63:
b9:80:03:92:ae:a0:54:48:72:3b:68:8e:7f:17:ce:95:82:27:
79:c0:ef:15:e8:8a:6a:03:7c:82:b4:ab:9f:fc:bc:bc:1c:b7:
ae:82:7c:c6:4b:f6:3f:c3:c5:11:7f:71:4e:cc:17:71:34:98:
9e:70:b1:17:32:69:47:97:90:17:91:bd:3f:1d:cf:f1:42:fd:
f8:13:53:4e:a0:62:29:54:3c:9e:1d:c1:d6:d7:7f:0b:e5:9c:
69:43:11:c6:f8:6f:1e:3f:1e:77:0d:bb:8e:34:3e:e9:54:0d:
25:19:9d:b5:fa:01:c4:24:68:1f:ab:53:d7:e0:1d:a5:1a:dc:
4d:a7:c1:10:ae:22:0a:15:72:c2:47:92:e3:f7:f3:54:9a:ee:
3c:3f:77:ad:0e:4d:9e:7d:e0:0e:c4:2a:2f:91:a9:e3:94:ed:
7e:41:a7:ee:33:09:4c:ec:b4:89:07:54:f6:d2:8f:85:10:43:
ef:e7:d9:c1:18:a1:9c:12:c4:dc:6d:4a:d4:9f:8d:42:42:e7:
08:c9:f8:55:88:02:d0:22:e3:9c:82:ba:14:e6:e8:e2:38:53:
39:b0:35:90:1a:f9:51:42:61:5b:e2:9e:82:28:bf:cc:a8:52:
80:b6:f6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:06:18 2025 by rpki-client