Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
File: x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft (raw, json)
Hash identifier: B3Ad3IaC7MOc68jU4xs+drCQi2A5EMn8YmFJeajPM+k=
Subject key identifier: 45:C5:AD:4F:A6:F4:5E:3F:1C:B0:72:0F:77:77:59:40:8F:D3:93:D8
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial: 019769299A372EAB93C5C21A292CD0AA0E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
Manifest number: 1390
Signing time: Fri 13 Jun 2025 12:00:23 +0000
Manifest this update: Fri 13 Jun 2025 12:00:23 +0000
Manifest next update: Sat 14 Jun 2025 12:00:23 +0000
Files and hashes: 1: BmvH7Z7uqcJeleMQ8G7clQImys0.roa (hash: lHLdYcAsPsm30xzIk5bUgfaHNZnvFrDG5BK0e9ZCPyo=)
2: x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl (hash: 32834w1RT4eTDRUz5UCizYHRHgEtE13bP9MsTekyDWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:9a:37:2e:ab:93:c5:c2:1a:29:2c:d0:aa:0e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Validity
Not Before: Jun 13 12:00:23 2025 GMT
Not After : Jun 14 12:00:23 2025 GMT
Subject: CN=45c5ad4fa6f45e3f1cb0720f777759408fd393d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:17:ac:1a:e0:37:5f:57:96:5c:a4:74:5e:
00:ce:7f:e2:c5:46:0d:42:98:5c:93:6d:dd:d7:c5:
c2:0e:1a:e9:e2:34:42:49:34:48:42:08:6a:e1:e6:
bf:a3:17:c6:68:82:f8:d7:d4:f2:a4:b6:64:14:ee:
f5:d7:ca:f5:61:57:7b:4e:f6:87:6c:b7:55:64:b2:
73:07:69:30:3f:fb:e9:9e:57:a2:86:e7:57:52:c6:
16:84:b8:1e:32:dd:48:82:33:10:37:b0:81:97:8c:
e1:f0:72:bc:ac:6b:0d:b9:11:f8:19:7f:62:f3:86:
96:50:38:83:59:45:33:f1:ae:22:b9:b7:47:7d:a7:
78:a5:43:e7:02:1a:47:bc:ac:5b:36:78:27:49:98:
d4:a6:0f:70:ca:bd:de:7f:90:a4:c5:1a:2c:fd:73:
3c:f9:f8:36:5b:64:f6:3e:1a:25:e7:c7:d3:fd:19:
3d:48:2e:65:43:48:07:ef:55:52:80:12:e4:1a:99:
68:59:cf:e8:68:81:2c:9c:6e:41:d7:32:69:74:d3:
17:42:a8:c7:6b:a1:8d:01:62:36:4e:07:c9:4c:6e:
9f:fe:78:e6:e3:f9:2a:35:7d:0f:ad:ac:53:19:84:
90:a9:6f:41:11:05:bc:05:bc:47:cc:c9:80:14:0d:
3d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C5:AD:4F:A6:F4:5E:3F:1C:B0:72:0F:77:77:59:40:8F:D3:93:D8
X509v3 Authority Key Identifier:
keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:04:b3:4a:ef:cf:cf:02:4f:a4:76:fe:ea:1e:75:f8:af:53:
70:5a:b8:48:71:2d:4e:6f:1b:04:de:08:c7:e4:c1:fe:03:8d:
62:61:cc:fd:07:ea:1e:1c:18:31:7b:d6:7b:31:53:c3:f3:8b:
95:89:d3:30:a9:e8:ae:47:52:eb:56:f3:60:49:4d:a8:be:19:
c1:5d:8c:bf:cf:4e:97:2e:06:3c:2c:eb:dd:92:da:5c:d7:12:
f6:a2:8a:10:a5:13:78:87:6e:a5:bd:46:6b:14:9f:78:db:a9:
93:5f:94:6a:7a:b5:f9:fa:35:8a:36:4e:11:32:08:e3:f3:5b:
60:6b:c0:f9:21:55:48:d3:8e:75:bf:b5:60:2e:d7:28:ba:47:
e7:62:8d:bb:04:f6:6f:19:26:b5:e8:a7:15:83:8c:40:19:9b:
ae:d3:0c:84:5e:6e:ab:93:2e:3f:e2:1f:9c:5a:b6:65:50:6c:
ff:8e:dd:5b:b3:8c:89:00:f3:e5:4d:53:18:50:24:f3:bf:8f:
25:b3:6e:44:af:7d:42:29:a6:fd:db:d2:44:0f:ce:ff:c8:41:
c6:12:d9:07:7c:c8:ca:58:d7:a1:63:28:43:cb:2f:65:44:8d:
18:e0:be:64:cf:24:48:a6:a3:24:0d:18:73:d9:e3:68:5f:6d:
90:ca:f3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:08 2025 by rpki-client