Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: cQXcnhkt04HS5A7mOpUYgDj3cJPhu6naJQf01oYJ/MQ=
Subject key identifier: 50:3A:6A:70:A8:8D:16:BC:66:77:AC:E4:D2:06:28:8E:28:DE:A0:22
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 01976C2AEB660B16883989C24EC21337427D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 151F
Signing time: Sat 14 Jun 2025 02:00:41 +0000
Manifest this update: Sat 14 Jun 2025 02:00:41 +0000
Manifest next update: Sun 15 Jun 2025 02:00:41 +0000
Files and hashes: 1: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: 9HYhpkORMz3W4GU4EHMP08DhkBjrtmcI1Q9Jz864RAE=)
2: uWnagnV7ph6W305lDhQcUtu8iOA.roa (hash: O2rllaolJLmB6wHK4WL6QTUawzuqbXsQObcxgCsZ0L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:eb:66:0b:16:88:39:89:c2:4e:c2:13:37:42:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Jun 14 02:00:41 2025 GMT
Not After : Jun 15 02:00:41 2025 GMT
Subject: CN=503a6a70a88d16bc6677ace4d206288e28dea022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b3:ed:25:73:50:f9:79:37:5f:ae:8a:bb:2b:
5d:72:68:a8:4d:50:08:be:af:12:28:11:4e:54:b6:
1d:6a:3a:cd:34:f0:ba:e9:5b:af:8c:00:f8:09:24:
76:96:46:1d:1e:80:ac:47:0e:b8:64:80:54:53:34:
a1:d6:45:b7:c5:3a:f3:fe:db:22:85:93:01:c0:40:
f1:c5:37:61:47:71:2f:2c:18:33:0e:ab:20:80:bd:
d7:df:26:09:85:29:d8:ec:c5:53:ee:ac:1e:4d:0a:
bf:2b:71:40:83:71:c9:de:8f:ef:37:31:60:b4:0d:
91:dd:dd:61:3b:a9:ff:55:98:39:88:5d:17:f9:a6:
05:39:72:fe:69:ba:36:c8:db:45:ef:8f:2c:7b:d9:
97:a8:c9:1d:1f:9a:d4:99:c8:eb:3e:73:e1:f3:58:
21:b6:bf:2a:25:88:c7:8e:b1:9e:39:f8:95:2f:ff:
a2:7e:cf:55:e3:a4:e8:bf:8e:54:68:e1:0e:b0:bf:
5c:42:82:df:68:88:74:9f:71:66:8d:fb:16:8b:09:
fd:64:7b:76:69:00:86:e5:1d:a9:bd:db:06:7e:74:
f2:c1:26:7c:0c:c8:9c:06:4d:02:de:3f:6b:36:28:
18:ee:5d:1c:2b:62:4f:64:0d:1f:a2:13:30:5b:da:
e9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3A:6A:70:A8:8D:16:BC:66:77:AC:E4:D2:06:28:8E:28:DE:A0:22
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:e1:36:98:84:80:d4:78:6d:48:7e:fa:fb:cf:0b:b5:97:e5:
b1:78:b1:7f:26:78:e8:f4:d7:90:94:38:fb:f3:79:d3:43:8f:
d2:b7:72:b7:35:e3:dd:6f:fd:34:0b:13:d9:31:3a:2d:4a:07:
59:74:dc:16:c6:90:62:79:2f:70:96:9a:9b:29:db:90:24:97:
78:7e:cf:5e:f6:28:73:61:cc:2c:74:44:25:63:25:a1:df:de:
81:66:b7:ce:18:59:12:16:f1:2d:4c:1a:a7:63:25:8f:65:ca:
3f:06:40:5d:7f:46:1e:4d:42:d2:68:e6:07:ee:7c:63:7f:55:
22:c0:5f:2d:ce:d6:86:33:79:44:3a:66:98:e0:28:94:ce:42:
82:50:70:18:af:d5:29:45:bc:5b:9d:36:3d:a2:6c:8b:7a:63:
b4:8f:3a:5a:b1:63:05:be:28:a9:e5:dc:73:71:12:93:97:45:
de:ef:62:a1:8b:e8:08:3f:64:1c:e8:12:6c:2d:65:45:24:c2:
c1:84:7c:da:d8:61:25:be:88:58:87:6b:7c:d4:86:8d:e1:e6:
a1:38:63:8b:ab:2c:a1:6e:e5:32:70:13:ca:bd:fc:e8:37:2e:
13:14:11:33:ed:3d:b3:b0:7b:be:3a:17:dc:8c:ce:20:52:ce:
ee:1b:03:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:17:35 2025 by rpki-client