Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
File: XpgU1DFdMK28jeMGAFVq6cPPns4.mft (raw, json)
Hash identifier: P3c/yx3VGnCXkug1E1b1XrPFrdjjSISjYCrJSRnHA38=
Subject key identifier: 3D:15:BE:74:25:3A:33:43:FA:F6:5C:54:58:AB:82:95:A3:B9:59:AA
Authority key identifier: 5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE
Certificate issuer: /CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
Certificate serial: 01977564C1C6405781829CD13873915118DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 21:00:26 +0000
Manifest this update: Sun 15 Jun 2025 21:00:26 +0000
Manifest next update: Mon 16 Jun 2025 21:00:26 +0000
Files and hashes: 1: XpgU1DFdMK28jeMGAFVq6cPPns4.crl (hash: 20AQGffKktx+HRvHIM/ch/9Lzc+9SLSJXDnt2yoASP4=)
2: srWs4lSgEcXww8bmZ8Qduqdxgdw.roa (hash: Fa3vdYsDt8LbAe4PXMPi2JDBOubqWHhdVQas9y66mmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:64:c1:c6:40:57:81:82:9c:d1:38:73:91:51:18:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
Validity
Not Before: Jun 15 21:00:26 2025 GMT
Not After : Jun 16 21:00:26 2025 GMT
Subject: CN=3d15be74253a3343faf65c5458ab8295a3b959aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:26:a3:dd:46:83:73:66:13:94:53:fc:07:
58:68:52:5f:a1:79:dc:3a:13:b3:20:6d:4e:28:62:
b1:b3:2d:80:8c:a6:4d:79:c6:41:0b:3a:32:0b:c8:
60:68:37:13:5d:02:aa:e2:13:b4:02:2d:92:c7:91:
e5:c5:f4:39:4b:d5:3c:11:18:02:4e:fa:98:28:e3:
8c:31:da:ad:a7:0f:f2:0f:35:f2:7b:41:50:61:54:
15:57:24:42:59:d2:c5:24:33:2f:74:b8:e1:e0:0c:
34:db:89:4b:02:d3:e2:65:e7:5b:0e:d4:af:5a:1e:
20:f5:2e:57:d6:ce:9d:af:15:b8:69:5a:5e:29:ca:
b2:db:7f:f8:30:1d:d4:64:16:65:e2:e5:94:3c:74:
f2:87:9e:4f:97:ef:2f:21:09:6c:d0:6e:0b:66:2b:
96:63:08:b4:bf:75:9a:25:9a:81:df:4d:0d:d2:cf:
f7:2c:87:da:58:92:cc:32:4b:6e:6d:a4:24:86:78:
bf:83:e0:78:bc:76:4e:dc:30:ba:45:80:6e:16:e8:
11:e3:45:e4:c2:4d:58:cc:85:51:68:dd:93:62:9b:
88:9b:88:f5:aa:ec:7b:b9:28:b6:ae:58:e7:da:ed:
4e:dc:98:95:f0:da:d8:0a:64:25:95:43:c4:78:de:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:15:BE:74:25:3A:33:43:FA:F6:5C:54:58:AB:82:95:A3:B9:59:AA
X509v3 Authority Key Identifier:
keyid:5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f7:e3:30:ee:f1:9c:2f:00:f1:98:9f:3f:5c:df:f8:da:aa:
53:29:9e:c2:59:9d:ab:8a:db:14:25:69:04:84:9e:75:03:e2:
71:44:df:7f:42:d4:1b:82:9a:2e:37:39:b1:b7:df:0e:d7:b0:
fd:f5:21:20:7d:56:1c:f0:73:39:fa:e3:73:dd:c0:e8:2c:49:
01:d5:d0:5b:ca:33:42:6b:3d:55:4b:f4:1c:05:0b:12:e3:b8:
b5:df:bd:ee:4f:69:ea:9a:18:5a:0c:4b:a3:2a:2c:d2:a4:43:
cf:62:44:21:1c:45:a8:40:73:e4:28:33:c3:a9:9b:c5:2a:65:
df:05:83:eb:bc:97:12:11:f7:c2:02:55:1b:8f:c9:97:e5:d5:
30:28:33:f1:98:ef:28:37:6c:77:65:2c:53:ab:41:68:1f:8a:
de:b7:1a:ff:4b:a3:4f:a6:92:1a:39:17:9c:49:d7:1e:d0:96:
f1:93:63:a0:88:b0:e6:3e:4a:53:7e:55:67:fb:e0:a3:49:11:
c7:08:f1:8d:a2:6a:03:f5:ba:c0:c0:f0:c9:73:39:5a:34:cd:
91:88:33:34:af:ce:4a:1e:ab:d2:4b:91:81:50:f1:47:05:23:
2f:61:d8:c2:50:bd:17:e9:16:a8:1a:bf:6d:d9:9b:0c:60:07:
0e:89:72:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:57:14 2025 by rpki-client