Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
File: X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft (raw, json)
Hash identifier: c5h+EX7G0UUmq73B60qMyYxXpMl1D3bnwCV0IB6+/yI=
Subject key identifier: 5E:6A:5D:1C:13:67:B4:59:6C:BB:59:78:FD:9D:96:B6:E5:67:21:90
Authority key identifier: 5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
Certificate issuer: /CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Certificate serial: 019771BF3C4D690A229F2329D4763DAA2100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
Manifest number: 67
Signing time: Sun 15 Jun 2025 04:00:47 +0000
Manifest this update: Sun 15 Jun 2025 04:00:47 +0000
Manifest next update: Mon 16 Jun 2025 04:00:47 +0000
Files and hashes: 1: 8UVdNw9Tjppo478GX33LOZCZ8cE.roa (hash: xHw9+KBXqx4QOGCdYKePtsH/MkWtajsbjnbd18reXjM=)
2: X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl (hash: kMIMxt2ohdOaf7YKF6fXna0bCAj8FdEGHVayyIT4Jew=)
3: u0GrLYuACL29DiJCWcYq6HEFJlU.roa (hash: cbSwt1t630uppqdr6/nRai1LaCLEx7Kek/cW9oYpqtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:3c:4d:69:0a:22:9f:23:29:d4:76:3d:aa:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Validity
Not Before: Jun 15 04:00:47 2025 GMT
Not After : Jun 16 04:00:47 2025 GMT
Subject: CN=5e6a5d1c1367b4596cbb5978fd9d96b6e5672190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:af:27:11:bf:13:d4:6b:a0:85:b2:32:34:
fb:86:46:78:8a:eb:58:0d:9f:4d:eb:98:4c:b5:6d:
d4:39:41:f0:ae:ab:08:71:a1:c7:46:97:f9:b2:25:
4d:cc:04:fe:7c:19:55:42:fa:3c:5d:b4:39:ce:25:
88:4e:cf:a0:f1:3b:2d:e0:c7:39:a5:c2:06:19:9a:
c8:be:cb:7c:01:b8:54:72:3d:ad:6e:15:45:7c:79:
88:76:19:3a:5d:14:b3:1a:af:3a:14:ac:58:d2:90:
fd:c3:4c:9a:f7:53:e6:be:2e:75:7e:9a:5a:54:41:
d6:1d:3c:c3:28:12:77:3f:b6:37:48:67:c5:50:e2:
7a:b8:7f:c9:d5:b0:f1:95:30:fa:9c:b8:62:92:d8:
2c:d9:7e:ed:5c:ce:41:53:e8:45:c8:9e:09:cc:fc:
a9:4e:94:73:fa:8e:a3:bf:4e:ee:bf:cb:b6:b6:98:
e5:7f:2d:0f:8f:b7:2f:9c:e8:d2:ee:5b:fc:9e:cb:
22:f1:36:a0:77:56:09:31:99:e4:5c:ef:ab:38:64:
c7:cc:8a:97:80:fa:ee:b6:af:5a:71:73:a8:b8:fd:
5a:0d:5c:78:26:eb:1b:52:d8:4c:d5:e7:fe:cf:95:
58:25:ee:09:e9:3d:a7:ab:8c:c2:63:4c:bd:6d:76:
a8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6A:5D:1C:13:67:B4:59:6C:BB:59:78:FD:9D:96:B6:E5:67:21:90
X509v3 Authority Key Identifier:
keyid:5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c8:e0:f6:ce:ed:dc:b1:07:2a:7a:7a:79:5a:d4:8e:f5:7c:
6e:4b:de:14:f6:12:1f:b8:86:b6:a2:6c:f8:9c:3b:63:b6:48:
80:0c:c2:70:5e:3d:58:89:45:53:5b:08:8a:fa:68:f2:90:de:
5e:17:e6:cc:91:d3:53:8b:39:7d:ba:1b:0b:1a:25:68:30:75:
d8:6a:4f:f2:7f:6a:ef:a6:70:61:76:ae:09:23:84:48:f9:58:
16:5f:8d:55:75:21:4f:f9:80:fa:0b:2e:62:a7:bc:8a:b7:e9:
61:27:d6:38:b5:3f:21:4f:45:88:73:d0:b8:b9:5f:08:03:3a:
61:15:04:98:12:72:e5:1c:f1:17:83:3b:ee:63:6c:f2:b1:c2:
2d:82:4b:65:ed:73:81:33:29:40:5d:95:c6:b4:fa:0d:08:38:
25:f3:3a:95:28:40:d2:fc:de:34:f1:77:3d:38:8c:4e:15:27:
87:d9:d7:3f:c3:a0:70:f0:f8:6b:e1:91:2b:1f:4a:0f:86:2a:
15:02:4d:39:c7:89:3b:45:33:28:42:8f:12:d6:2d:14:43:24:
da:e6:d5:f6:24:5f:39:80:3a:fd:c0:11:cc:ec:50:90:c2:50:
5d:9e:00:5a:86:3f:9f:60:e1:96:db:cd:67:14:89:07:e5:41:
7f:84:c8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:44:08 2025 by rpki-client