Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
File: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft (raw, json)
Hash identifier: cvAfEbvbTWajJtw/YKHNf/EsOB8SJdrRp6b2i54i05w=
Subject key identifier: 02:09:0F:7A:51:62:15:C2:13:32:BF:C3:EA:5E:A7:F4:D7:69:12:06
Authority key identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
Certificate issuer: /CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Certificate serial: 019768BC12CC99A5AE84D1E0DEB378899B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
Manifest number: 0E67
Signing time: Fri 13 Jun 2025 10:00:45 +0000
Manifest this update: Fri 13 Jun 2025 10:00:45 +0000
Manifest next update: Sat 14 Jun 2025 10:00:45 +0000
Files and hashes: 1: 7H5MwTgN1OYiRCO4mG4ENm-WPD0.roa (hash: /sYr4Nv4zqcEaNJCLCU0HKPHMEqgFJB/Zeuuas/Ouic=)
2: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl (hash: A5pzq3tvCkSjfsDXWQgcakc508CDbftgLCuLuKhbZuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:12:cc:99:a5:ae:84:d1:e0:de:b3:78:89:9b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Validity
Not Before: Jun 13 10:00:45 2025 GMT
Not After : Jun 14 10:00:45 2025 GMT
Subject: CN=02090f7a516215c21332bfc3ea5ea7f4d7691206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1a:5d:08:9c:82:61:73:7c:6d:c7:e6:57:91:
33:64:cb:55:df:e4:93:35:58:ea:43:12:a0:ae:ea:
89:10:ad:e8:6c:ac:a6:16:72:e8:c9:ab:d2:c0:52:
87:81:bd:4c:f4:c0:f5:44:f6:64:08:8d:8a:42:22:
f1:12:28:59:52:63:d8:0e:47:31:61:f9:2a:8f:c9:
6d:77:10:43:60:2b:96:ea:71:b9:ca:97:b8:d2:56:
27:59:50:3b:3f:c0:ef:8a:ec:54:6b:26:d8:b5:c6:
24:bb:0c:ce:c2:a5:1c:d2:41:e6:a6:3f:77:08:37:
b4:62:3b:18:2b:1e:20:f6:59:bf:43:d4:e7:ff:17:
0b:fb:88:a5:84:8f:94:94:1b:52:42:4e:82:d8:88:
30:5c:cf:cd:b1:35:00:57:0a:0c:10:92:8e:18:5f:
ce:99:b5:0d:75:69:8e:7b:c2:aa:0b:bb:75:d2:d7:
d0:b5:8a:96:22:9a:55:e0:7a:af:4b:aa:f8:35:c9:
82:5d:7d:a1:b1:45:03:eb:8d:1e:59:b0:df:0f:b4:
be:61:73:f0:5e:5d:b9:a6:87:e3:17:a8:dd:15:3c:
b8:14:ea:86:0c:2a:bc:21:62:26:f6:44:2b:85:da:
04:85:4b:4f:51:ae:be:e9:49:87:8d:76:38:b4:76:
44:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:09:0F:7A:51:62:15:C2:13:32:BF:C3:EA:5E:A7:F4:D7:69:12:06
X509v3 Authority Key Identifier:
keyid:5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:80:2a:df:98:86:00:50:da:cf:f7:f3:e6:f3:06:09:29:7a:
43:60:7b:6e:c6:be:70:12:ba:35:45:52:8a:c2:b9:22:93:b7:
1e:40:dd:96:b2:29:d0:f3:99:5c:0c:9a:44:76:44:e3:c6:82:
2c:25:39:3a:a3:65:06:2c:38:24:0a:19:3b:a1:fd:de:19:57:
a7:35:dc:a8:b0:06:e3:08:a2:4e:ee:ca:7b:d1:ff:0e:e9:21:
ed:b6:25:27:2c:93:5c:67:b3:02:cf:34:b6:01:94:16:26:72:
2d:19:7a:60:d6:1c:10:e2:20:58:78:38:1d:ef:bd:f6:ec:49:
8f:19:7b:fb:14:d6:5a:93:5b:aa:a6:88:d5:55:ae:6b:41:1d:
f4:34:a2:27:9f:af:f7:9e:dc:c4:99:d7:31:98:92:45:f9:34:
71:60:86:ca:a2:8a:4b:d6:5f:a4:b0:82:a9:e1:5a:51:cf:08:
3d:5e:60:d7:60:e8:cd:bc:f3:92:4d:f4:f5:9c:8f:02:66:37:
03:02:32:d9:fd:a1:cc:73:8b:12:b6:d5:a7:c4:37:a8:22:c5:
56:ac:e7:b4:2e:a4:ac:77:6d:cf:28:5f:a9:1d:9e:0a:63:fd:
86:b0:c6:c2:e9:f0:70:f1:78:7f:84:4c:ee:60:69:eb:1d:cc:
7a:a5:6d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:57 2025 by rpki-client