Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
File: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft (raw, json)
Hash identifier: uCm1DQOb02yLboYvzFR1zKuhuZIyTMRxbBjRiNWCX8U=
Subject key identifier: 1A:8E:86:F0:06:79:C0:5F:7C:62:12:B9:63:34:DF:EC:D8:64:DE:99
Authority key identifier: C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27
Certificate issuer: /CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
Certificate serial: 01977D8C73B8527BB4AA34209326C7B64482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
Manifest number: 0503
Signing time: Tue 17 Jun 2025 11:00:46 +0000
Manifest this update: Tue 17 Jun 2025 11:00:46 +0000
Manifest next update: Wed 18 Jun 2025 11:00:46 +0000
Files and hashes: 1: e-ekxZnIJuci57HrEPz7zGue28s.roa (hash: 8H4l0N/E0NCOJoBHvZIBH7Jz+P9G/e+mdO0E4zzVLoo=)
2: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl (hash: 9ncafp0ozwHYIS4N47Keu+xVDAqhC8ujnXfmqeXjvQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:8c:73:b8:52:7b:b4:aa:34:20:93:26:c7:b6:44:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
Validity
Not Before: Jun 17 11:00:46 2025 GMT
Not After : Jun 18 11:00:46 2025 GMT
Subject: CN=1a8e86f00679c05f7c6212b96334dfecd864de99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:f8:71:be:c2:14:c0:4a:62:15:4d:b5:86:
f2:ce:f6:ce:d3:2e:ca:a0:fd:68:72:ee:f7:3e:f7:
74:35:65:22:e1:aa:ce:6c:28:11:5a:e3:3f:cc:5e:
d8:db:13:89:49:25:e7:d3:95:fa:95:48:dd:e2:90:
26:7b:4c:83:55:2b:6e:4a:4c:e8:04:21:1b:ab:64:
c9:91:89:9f:62:40:77:e2:6f:95:e1:ce:83:2b:70:
55:d8:be:eb:e1:fc:65:ad:fa:50:60:fd:16:70:b2:
94:3a:20:04:ba:7d:7b:97:ae:1f:03:c4:0d:bc:17:
1c:17:99:cc:11:fd:39:75:21:cf:bb:41:8d:ec:4c:
30:56:c3:36:c7:1a:c5:dd:5e:39:9e:c6:8c:e4:c5:
b6:4e:29:18:0b:78:58:03:22:5b:0a:70:ad:c7:78:
a7:11:37:c0:f3:30:0d:8f:96:dd:09:e1:27:1d:b3:
4c:21:f0:4d:12:89:81:06:8d:e1:ff:b7:53:46:00:
3d:1f:e1:07:28:d3:f2:62:8b:6e:d7:98:22:c5:8e:
48:48:d4:71:5c:75:72:05:b9:4f:33:34:81:20:7d:
ca:e0:bc:8a:4e:71:0f:d8:8a:e2:b8:cd:0c:cc:91:
af:24:34:8e:96:e1:6b:7b:b9:97:85:51:d7:84:00:
1e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8E:86:F0:06:79:C0:5F:7C:62:12:B9:63:34:DF:EC:D8:64:DE:99
X509v3 Authority Key Identifier:
keyid:C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:61:dd:a6:24:60:c0:04:41:77:69:e3:2f:a2:67:bf:33:fe:
f5:dd:eb:8b:4f:a6:3a:75:6d:90:03:d4:7c:87:83:4e:54:86:
24:85:b8:aa:6a:e2:4c:3f:38:73:51:07:e9:61:a2:21:fe:b6:
32:ab:ff:c8:51:f0:a4:db:c8:a9:c3:7d:6e:9e:7d:a1:95:2c:
cc:99:19:e8:e9:c0:cd:2a:8a:3d:93:40:e2:67:27:23:a6:fa:
97:92:11:ba:94:a3:25:40:aa:29:d5:68:ad:f7:a6:39:de:5c:
2c:b1:df:a0:67:84:12:ff:e4:7f:8c:7d:ae:ef:3e:02:1d:d9:
09:c8:91:c3:6f:fa:96:dd:0e:9d:f6:df:d1:6d:d0:76:25:93:
2b:7f:bf:b6:49:eb:8f:06:31:fc:c9:75:62:a0:a2:78:19:b6:
b8:e7:1e:be:0a:98:cf:78:18:5b:59:3e:63:bc:3f:b8:00:99:
4a:fe:c5:69:62:ca:55:f8:53:5b:48:2a:8f:b6:c0:19:dc:db:
68:72:90:c2:e6:9a:9d:4d:17:a9:82:ac:62:6f:54:fd:91:85:
1c:49:42:fa:ac:ce:14:e0:37:ad:3a:d8:e0:3f:90:3c:f6:cd:
04:30:f7:57:b7:d6:0f:d7:e3:a3:60:dc:48:2b:5f:cd:97:79:
d0:97:4c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:01:14 2025 by rpki-client