Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
File: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft (raw, json)
Hash identifier: nUpmilFOCSvHjkHooEgk8uWL0A5esPAwo99z2Q0n9Bk=
Subject key identifier: 5A:60:3A:C6:45:2E:39:2E:3F:3E:64:A7:DA:42:EE:C7:D0:5B:FF:BE
Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
Certificate issuer: /CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Certificate serial: 01976C2B238CD8DD8413B64FE6526B651513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 02:00:55 +0000
Manifest this update: Sat 14 Jun 2025 02:00:55 +0000
Manifest next update: Sun 15 Jun 2025 02:00:55 +0000
Files and hashes: 1: SCQLL9FrRwZS3_4QAQMFwFWEnMU.roa (hash: hA+a1SinlIIzAIvLt/cO3Kjqq6i5Xzb+bDE4vvr8VPM=)
2: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl (hash: s9n0Ffb85Zg/+XRDtnk2V+ob2gnHFOZNLM2QiKWaL7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:23:8c:d8:dd:84:13:b6:4f:e6:52:6b:65:15:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Validity
Not Before: Jun 14 02:00:55 2025 GMT
Not After : Jun 15 02:00:55 2025 GMT
Subject: CN=5a603ac6452e392e3f3e64a7da42eec7d05bffbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:67:e3:d9:d5:5c:65:bd:b9:85:15:16:5b:f5:
52:a5:20:01:9d:1c:46:83:a9:9c:39:ac:04:69:b5:
86:21:bd:b5:b5:d4:33:20:e9:d7:22:b7:3f:8e:84:
74:72:af:26:36:b1:cc:2a:36:3e:d0:17:b8:19:e3:
62:bc:30:48:c7:1c:8c:f3:bd:07:ed:62:89:fe:5f:
10:bf:c0:03:b5:57:b2:b2:48:1a:c3:79:98:5a:64:
50:f4:46:e3:38:39:9c:e8:41:b3:20:7a:36:99:9f:
a8:e4:3c:ee:0a:2b:05:cb:c7:a3:6a:35:f3:b9:a8:
e1:83:01:b2:31:12:f5:0f:32:a1:88:f2:b0:b1:72:
21:d2:7a:24:a3:4a:55:a0:5f:8f:f2:e8:e3:6c:14:
31:83:e2:0c:5b:a9:14:c3:9f:8c:43:5c:21:d6:26:
c6:2f:ae:bf:2c:7e:7b:32:9f:f2:5e:91:c7:58:15:
83:7e:58:ac:0d:df:a3:60:c8:ef:9c:8a:76:b9:5b:
1f:f5:b5:0c:91:ec:2e:3f:9a:ce:13:f0:b0:31:cc:
2d:8a:6f:70:4a:20:b0:eb:7a:4c:b1:93:09:09:2d:
73:63:51:a6:26:97:de:fc:2a:39:02:c0:8e:fe:19:
c0:bb:3f:a8:98:cc:a2:e3:cb:e7:c6:f1:de:16:67:
3d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:60:3A:C6:45:2E:39:2E:3F:3E:64:A7:DA:42:EE:C7:D0:5B:FF:BE
X509v3 Authority Key Identifier:
keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c9:6b:c3:5c:c8:1c:a8:e1:99:68:79:6c:22:4c:d0:62:d7:
7d:6c:e6:02:9a:6d:29:52:31:e9:fd:75:7b:4c:0b:8f:1e:78:
58:8b:05:a4:78:4d:e7:73:be:8e:92:19:a6:c0:90:e0:9a:ad:
bf:67:ea:8b:f0:ad:39:4d:85:53:5a:8c:6f:a5:eb:2d:c4:fd:
86:57:54:a6:84:66:05:40:4a:4d:4c:f1:3b:80:7c:fd:cd:ef:
a1:50:60:d9:38:13:fc:38:0f:dc:ff:43:5e:66:dd:2b:10:ca:
9e:75:46:09:61:05:1a:fe:9e:9c:d0:29:fc:26:aa:c6:f2:65:
39:4f:47:1f:a0:5c:ba:eb:25:47:92:20:07:dc:38:34:b7:fc:
88:ac:cd:a8:a4:55:98:4c:61:ea:6a:e8:a9:ac:e6:eb:fa:fe:
25:2e:5a:56:6e:f8:85:45:87:46:c7:42:7d:c7:00:da:d9:93:
4b:c6:40:cc:0e:68:f0:95:0f:eb:87:a8:1a:99:67:47:68:db:
06:67:54:c4:00:5e:82:e9:96:ee:4e:f2:6a:97:ef:fa:f7:c2:
f7:3a:c2:e7:2c:55:18:c1:55:3f:51:77:74:8a:5f:c1:1a:75:
30:54:11:60:f3:0e:ac:fe:8f:02:a8:04:d0:f6:a8:3b:ea:83:
5a:08:40:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:21:12 2025 by rpki-client