Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
File: xTtM8KdHHwAPilagSbFjlnzDvZk.mft (raw, json)
Hash identifier: A513uzouksxt5sZAY7ZKYl7s+HpEFSnruqUm9ECp4So=
Subject key identifier: 14:FF:39:62:CE:3D:54:DD:F4:19:06:74:BE:05:A4:5D:3E:72:4E:22
Authority key identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
Certificate issuer: /CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Certificate serial: 01976CCFAFE6282030BE24062E655B1C3A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
Manifest number: 14AD
Signing time: Sat 14 Jun 2025 05:00:39 +0000
Manifest this update: Sat 14 Jun 2025 05:00:39 +0000
Manifest next update: Sun 15 Jun 2025 05:00:39 +0000
Files and hashes: 1: 602Z4NiRUVoUbtoD2a1_hKZKM5w.roa (hash: 3NgwOwVM6/UTanDsySZE3RJFx37z0Ri4EFGUt0jIqTA=)
2: xTtM8KdHHwAPilagSbFjlnzDvZk.crl (hash: OQeEEkEACcpS+CqxFuWyLY2DuW22WY0wme2PoCmwzTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:af:e6:28:20:30:be:24:06:2e:65:5b:1c:3a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Validity
Not Before: Jun 14 05:00:39 2025 GMT
Not After : Jun 15 05:00:39 2025 GMT
Subject: CN=14ff3962ce3d54ddf4190674be05a45d3e724e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:82:f8:41:18:50:09:4f:af:48:ca:1a:ff:
68:ec:aa:d6:da:b0:eb:1f:de:a7:4c:c2:ca:b5:bb:
b2:d6:48:91:5e:1a:14:18:f5:c9:0d:d5:03:da:5a:
43:dc:96:80:99:74:e7:50:f8:e4:37:8a:76:b7:45:
7f:e6:d6:e1:54:7e:ce:45:93:46:62:b5:39:6d:25:
64:9b:20:3d:08:3c:99:83:45:e1:9a:13:75:fd:01:
72:c1:39:b2:07:10:45:d3:9f:0c:71:15:49:a3:e5:
03:f2:81:d1:4a:73:e6:47:59:bb:11:4b:ad:28:3c:
8c:3c:5c:86:6c:2e:03:e4:be:b5:a9:7b:ed:dd:71:
90:fa:a2:86:0a:c1:b7:5b:ae:9b:b6:fc:98:fa:ff:
5a:e5:2e:ab:08:bc:eb:e9:4b:49:a8:e1:47:c8:45:
f2:af:fe:9f:28:ba:39:aa:4b:c4:48:59:5a:45:64:
c4:a8:9d:d2:8e:e5:a3:75:11:6b:bc:02:12:12:1a:
9c:f7:17:fe:d1:62:b1:9a:11:07:03:01:10:4b:8f:
33:4b:1f:2b:34:3b:69:04:ed:f3:d4:ad:d7:d5:53:
70:19:66:15:80:9c:d7:68:bb:ec:87:d7:6d:fb:8f:
1a:99:eb:2a:0d:95:7b:d3:09:af:c0:41:97:75:8b:
70:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FF:39:62:CE:3D:54:DD:F4:19:06:74:BE:05:A4:5D:3E:72:4E:22
X509v3 Authority Key Identifier:
keyid:C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:96:66:f9:cb:85:0c:86:e5:6a:06:45:2b:78:d6:67:39:00:
b6:8e:a0:25:a3:e5:68:b0:d6:a9:40:f9:79:f4:17:d3:d7:80:
47:1c:d0:07:c1:98:b7:79:d7:bd:80:3b:06:d4:eb:6d:1d:02:
c5:a1:39:15:b7:db:20:69:7e:f4:b3:bb:29:63:b7:5f:25:e3:
00:4f:9b:b6:be:9e:09:62:68:39:1a:67:e2:f9:c8:2b:11:74:
c5:f9:3a:d8:8a:7a:f2:d7:88:0a:d3:ac:bd:94:d3:16:40:d3:
ce:81:7e:e2:c2:c4:e0:33:4f:0e:0c:96:e2:d7:12:02:f0:ad:
7a:08:4b:d8:9b:2c:82:87:29:f3:02:6f:e1:5c:a4:4e:40:17:
e8:10:93:b4:e1:c3:dd:84:52:68:67:cb:2b:78:0b:b0:05:c2:
5e:b5:ad:b6:f5:39:58:ae:02:7c:d4:8c:ff:cd:7c:1c:ea:9e:
a2:0e:6b:88:eb:80:88:dd:43:71:4c:ad:a2:ba:04:33:83:ee:
3f:97:6f:28:90:7b:e1:0b:dd:df:4d:66:7e:eb:e7:67:35:77:
de:71:3c:c7:22:23:59:7e:65:80:57:50:a6:cb:f1:08:2d:97:
66:52:53:b0:d6:29:fd:fc:5e:c6:94:24:71:c9:9b:4a:b6:da:
a2:56:ff:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:09:45 2025 by rpki-client