Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
File: XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft (raw, json)
Hash identifier: g7xVh3GmsJ2vMbGfMvcy4MMdBFC1CDPq/i1P+frvQr4=
Subject key identifier: 27:4B:A7:0C:1C:E5:68:D0:D3:B9:A9:CC:15:BB:32:BE:EA:D1:D6:D0
Authority key identifier: 5D:E4:58:F2:1D:40:64:66:BD:F6:82:40:F5:05:EE:FD:19:7B:A9:36
Certificate issuer: /CN=5de458f21d406466bdf68240f505eefd197ba936
Certificate serial: 01976C99252EF38B09C1382DB6333135AB01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 04:01:05 +0000
Manifest this update: Sat 14 Jun 2025 04:01:05 +0000
Manifest next update: Sun 15 Jun 2025 04:01:05 +0000
Files and hashes: 1: 8x6SWTgZKaQldoz2iRV_QSdqbtg.roa (hash: LzTLrE8ZLdriPR/s+lretToH9KQur6QiGymJnQCIGiw=)
2: XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl (hash: 83JBelPaZqGlU0o9MOxp/vgBlWbwlSGsMLk4zYx3Hz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:25:2e:f3:8b:09:c1:38:2d:b6:33:31:35:ab:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de458f21d406466bdf68240f505eefd197ba936
Validity
Not Before: Jun 14 04:01:05 2025 GMT
Not After : Jun 15 04:01:05 2025 GMT
Subject: CN=274ba70c1ce568d0d3b9a9cc15bb32beead1d6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:10:61:83:0a:c5:6e:82:71:78:3f:d2:d4:
f5:b6:8f:5e:88:aa:34:33:90:9a:09:a0:21:2a:17:
2e:c3:da:ef:80:6f:84:75:bb:ec:24:72:0b:a3:4b:
6e:30:59:95:74:bb:9f:eb:c6:b5:bf:b4:06:49:77:
d7:fd:02:21:43:89:5c:f0:0b:93:fa:08:8b:f9:3b:
02:21:2e:3e:cd:d7:a2:1a:21:cd:94:18:fd:88:6f:
e2:72:46:43:1f:27:24:e7:97:93:63:78:b6:f3:12:
ab:50:67:17:87:45:39:7e:79:59:d7:bb:82:a0:f4:
aa:1b:23:d1:21:f4:e9:2e:64:34:b4:5d:63:a8:39:
c6:ec:2d:61:04:4e:fc:b7:e1:9f:f8:ef:a0:89:cd:
72:46:d5:45:78:80:3e:fb:28:ef:f9:6c:a1:5d:b8:
6d:89:a8:b4:61:40:80:87:1e:0c:0e:87:e6:a9:bf:
6c:0b:89:0b:fb:d4:b7:2c:c4:06:24:2e:93:3c:d6:
27:a9:0a:40:86:72:c8:3c:b7:41:d7:c7:41:01:34:
2b:e5:32:17:c7:59:9a:80:dd:f1:b4:e3:ff:0e:cf:
17:66:1c:0a:be:2c:a8:a2:d4:65:e9:46:40:b3:77:
77:a2:40:96:8c:f9:18:bf:75:e2:92:64:cd:ce:58:
74:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4B:A7:0C:1C:E5:68:D0:D3:B9:A9:CC:15:BB:32:BE:EA:D1:D6:D0
X509v3 Authority Key Identifier:
keyid:5D:E4:58:F2:1D:40:64:66:BD:F6:82:40:F5:05:EE:FD:19:7B:A9:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fd:95:ae:fb:c1:e6:63:43:96:55:e9:6c:ad:a9:b2:f2:a1:
8e:a8:bd:22:7b:6f:3c:b8:5c:a7:3a:ae:30:f0:bb:d2:00:c0:
aa:29:0f:93:59:61:98:4b:85:32:b8:c7:22:04:a3:95:0c:bb:
31:a4:59:9f:e5:15:1b:8e:b4:ea:a6:9e:a4:2a:90:07:e2:87:
97:7f:13:4a:3e:8c:36:07:58:93:ae:df:10:b8:fe:d2:ef:4d:
7c:bc:82:d6:fe:06:c3:a6:51:2e:ab:4e:c8:6b:3e:10:ee:a9:
a9:05:18:8a:a5:45:1b:a4:9c:72:7c:5f:4f:d7:69:df:f7:a0:
c8:04:d4:37:7f:e1:d4:6a:2a:d6:2d:00:c1:e1:e3:b6:32:7f:
7c:df:fb:7c:c1:6c:43:b4:1b:5e:b6:e1:cb:0c:f1:3b:64:61:
bc:47:dc:a9:20:eb:17:5f:1b:10:35:d0:63:ac:e7:d2:2a:15:
38:ca:b4:f7:5d:f7:f4:57:66:bc:7b:23:31:b3:8e:6f:a8:8d:
e5:4e:96:0d:75:b1:9f:1a:ed:d4:44:44:12:35:06:a6:40:fe:
ed:13:73:0f:d4:7e:3d:9f:4b:fd:bb:21:76:1b:99:6b:47:e7:
3a:f2:45:41:23:71:91:88:2c:56:35:b3:09:9e:66:53:94:23:
de:e2:bf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:27:35 2025 by rpki-client