Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
File: X89dJaNmGj5y0nKUVPf_gEtDvbk.mft (raw, json)
Hash identifier: DdjM/3QHghRUm8lH2Y8/LHPagjgaAJEmwngWNyYA/v0=
Subject key identifier: 0E:29:EA:31:57:D0:D2:EC:D4:84:49:F6:8D:A2:A7:C1:63:67:23:18
Authority key identifier: 5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
Certificate issuer: /CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Certificate serial: 01977150F840C7E6015DA6CDAC541921A890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
Manifest number: 0981
Signing time: Sun 15 Jun 2025 02:00:21 +0000
Manifest this update: Sun 15 Jun 2025 02:00:21 +0000
Manifest next update: Mon 16 Jun 2025 02:00:21 +0000
Files and hashes: 1: SFEaLCcaSPqW-NAacKDtjgx58ew.roa (hash: OMHSr2CJgaO8nulVRKhQLnfgujY5dtYfYIWPqUiWupI=)
2: X89dJaNmGj5y0nKUVPf_gEtDvbk.crl (hash: XDuWFjOcTU9WOd369CBkFCrEYUIOH+8trrz1Ih2L9x8=)
3: XiX2H6KV22GA3qGzZguRskRxlFM.roa (hash: vDk26PHouRJN4yP1V97RLW7KQYk0VPaf7UJ2taG9B6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:50:f8:40:c7:e6:01:5d:a6:cd:ac:54:19:21:a8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Validity
Not Before: Jun 15 02:00:21 2025 GMT
Not After : Jun 16 02:00:21 2025 GMT
Subject: CN=0e29ea3157d0d2ecd48449f68da2a7c163672318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:cc:9a:0c:b7:b0:13:c5:b6:79:f0:b0:ba:
6f:fa:ac:e8:88:82:0e:45:bd:d5:fd:0f:e5:a9:d8:
64:7c:2e:ec:38:4a:d7:e6:c6:c5:cb:73:c8:65:43:
35:1e:7d:4e:b7:6a:1d:a4:99:22:84:47:47:6a:6e:
73:21:9b:6b:22:89:86:ca:1f:eb:08:ac:5d:53:8c:
24:42:2b:a5:14:9c:c4:4a:b9:ee:81:37:b9:c5:75:
5a:a7:9c:e0:cc:45:61:af:db:93:a1:33:0e:71:b6:
c5:b3:a6:ec:9d:13:ea:c9:53:9a:6b:b7:f2:bb:0e:
08:c2:90:be:1f:3d:f6:d5:cf:cd:66:d8:55:ce:03:
ba:8a:a1:a5:ca:73:3f:45:ba:2f:fa:27:a7:5d:ba:
48:91:f5:fc:73:21:c0:9b:e9:85:63:2c:af:26:11:
86:43:fd:d5:b9:9d:75:40:d7:c3:0d:0b:87:08:d7:
9b:ef:bc:22:e7:7c:3d:13:0c:f4:f7:83:24:1f:71:
90:6e:70:e1:da:74:68:e7:da:46:7f:f3:d3:cc:2a:
d9:aa:2a:67:d5:d2:da:56:5d:48:e1:5d:c8:40:24:
3e:95:9a:3d:8a:7d:53:19:40:b9:2f:10:b9:41:fc:
90:9b:e4:31:2c:c3:c7:fe:7c:7d:c7:41:9a:09:c0:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:29:EA:31:57:D0:D2:EC:D4:84:49:F6:8D:A2:A7:C1:63:67:23:18
X509v3 Authority Key Identifier:
keyid:5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:46:88:d3:20:3b:03:76:f9:37:0e:27:74:08:db:fa:e0:5c:
d1:46:9c:f6:7b:99:9c:47:9b:37:19:d3:85:35:92:e4:09:54:
92:72:a3:d4:d8:44:57:4b:fd:49:18:c3:1c:6b:69:f1:e9:f6:
49:5e:6e:ed:ab:32:1f:aa:41:af:54:31:d2:92:db:59:7f:a9:
37:3f:56:0c:e7:14:e5:40:42:5d:96:71:b7:28:6c:c2:c9:c3:
30:ca:22:94:21:c5:fa:75:db:fc:a7:ce:26:ad:03:21:66:f2:
78:47:9a:73:91:96:98:2e:1f:75:3f:33:aa:d8:3d:e7:5f:a0:
83:ba:16:f5:7f:59:ff:4d:ea:30:ed:44:83:3e:a4:dc:7b:fb:
55:7e:91:bd:bd:ae:67:c6:37:10:ea:b0:bc:b3:0d:40:6f:63:
60:61:85:ae:ba:5b:04:f0:c8:ac:52:13:2a:c6:3f:ef:a0:cc:
3b:8c:8a:16:36:17:b4:f4:8f:a2:ba:7e:89:2e:8e:f2:0a:6a:
3e:5a:92:4c:98:91:f0:64:04:01:a7:43:1a:a4:07:c3:d0:59:
a6:49:70:37:dd:17:83:1f:60:4d:56:be:f1:d4:e5:d6:a6:6f:
35:3d:c6:12:33:33:ed:d6:97:0c:e5:90:39:47:ef:63:77:98:
2f:ba:5b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:28 2025 by rpki-client