Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
File: xrxZ-PdUTx6lulwYs44lc1F8kTI.mft (raw, json)
Hash identifier: V8fiLiEFygQc7gls0b12Q/+Vuu4TRJyTpAR47A3t8PU=
Subject key identifier: B4:65:CD:71:0C:7C:24:0E:5E:D7:23:E6:15:06:08:FC:30:A2:DD:54
Authority key identifier: C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
Certificate issuer: /CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Certificate serial: 01976BF42A0CBA4D5CD409E0F250635E9289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
Manifest number: 04B7
Signing time: Sat 14 Jun 2025 01:00:52 +0000
Manifest this update: Sat 14 Jun 2025 01:00:52 +0000
Manifest next update: Sun 15 Jun 2025 01:00:52 +0000
Files and hashes: 1: 6MomF24SoPaNk6ERP73wy8mqx3c.roa (hash: IjQTHFK2Z40w4CuSFshJCdouXIm82jCIjL5J78qv4kA=)
2: xrxZ-PdUTx6lulwYs44lc1F8kTI.crl (hash: Nljd3gg04rHNMycbaDjWN/VtYINnQoQ5F9OEw3+boRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:2a:0c:ba:4d:5c:d4:09:e0:f2:50:63:5e:92:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Validity
Not Before: Jun 14 01:00:52 2025 GMT
Not After : Jun 15 01:00:52 2025 GMT
Subject: CN=b465cd710c7c240e5ed723e6150608fc30a2dd54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2c:be:74:c8:43:63:ac:ed:5f:e6:9f:ff:25:
a2:f5:4f:fc:b2:dc:66:88:89:3b:1f:7a:23:dd:8d:
ea:27:0a:df:6f:4e:49:3f:31:4b:e6:30:84:f6:fc:
b9:d2:44:2e:88:a7:9a:14:ec:39:13:2c:65:de:ab:
a8:7f:73:c8:60:23:55:48:5c:29:97:6b:b7:81:2d:
0c:06:2a:fc:8a:75:c5:33:46:0f:a6:af:f1:d5:20:
7e:6b:b9:9f:9c:28:e3:0a:4c:14:85:35:47:c3:19:
29:21:0d:79:f5:fe:49:36:e9:03:9d:05:23:91:4a:
ba:b7:9a:c1:10:6a:e9:a1:ed:a5:42:88:45:93:39:
59:66:8c:7c:0a:40:5f:8b:f0:d8:69:ba:0e:d7:77:
63:50:b0:36:e4:41:e9:88:8d:e5:a3:ee:d7:ce:4c:
04:f6:07:d9:62:61:0f:49:c1:8b:32:6d:7a:ed:a0:
ec:60:5c:17:a9:1a:e6:01:5a:1e:a7:40:f4:6b:22:
af:9f:7b:8b:1b:e8:ac:a3:f9:b5:10:1a:0e:77:fb:
1d:4a:f3:0c:c5:57:c2:94:a3:ee:c7:d0:56:6c:d8:
97:9b:22:2f:cc:c6:f7:6e:2f:ce:03:b7:3e:d8:3d:
c3:90:73:ea:5c:eb:0f:8e:6c:c2:16:d3:21:32:c7:
46:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:65:CD:71:0C:7C:24:0E:5E:D7:23:E6:15:06:08:FC:30:A2:DD:54
X509v3 Authority Key Identifier:
keyid:C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ef:ac:4e:31:38:a2:aa:bb:c4:68:52:94:fa:54:2d:9d:2c:
53:f3:41:08:b3:69:81:a1:00:00:09:17:8e:0f:09:05:38:70:
dd:67:54:af:27:02:c4:ac:70:1d:4f:24:67:4a:71:94:0c:21:
c8:74:90:95:6a:af:f5:74:ca:b2:c8:9d:6e:c8:e0:70:d4:f9:
19:8d:a9:8f:70:2c:db:86:f2:b2:93:d5:3f:e6:47:2d:b0:e4:
1c:cc:54:a6:a7:8b:49:fd:3c:69:1a:91:1d:b7:9c:b8:6b:94:
4a:2b:5d:12:cf:d7:dd:19:01:b1:f7:82:9e:f3:96:56:68:5b:
55:6b:e1:29:21:4c:b9:53:78:24:f7:da:61:b6:bc:85:c7:2d:
9e:9a:10:61:54:86:75:23:78:39:be:9f:51:d2:f0:42:ab:70:
6b:d6:54:62:30:a3:da:f4:ca:71:8c:4a:ab:0a:ce:db:a6:25:
eb:72:1a:8a:56:01:44:fa:1b:51:6d:f0:8b:b2:74:85:af:c0:
fe:af:6a:0e:a0:85:5c:10:f3:e5:d6:f4:a1:79:ba:b8:2a:4c:
41:43:1b:17:80:26:c2:82:bf:2d:cc:79:9d:ec:ed:5a:34:0d:
91:b4:ff:53:68:35:97:39:d5:a3:5c:30:e1:aa:75:c7:48:83:
8e:b3:70:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:51:41 2025 by rpki-client