Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
File: XYHR_0WxVHwAqEtG75nsot-9Rbw.mft (raw, json)
Hash identifier: Mgs3fVcNBIONvPFE2J+597qitsFIOwwAD9XsNjMwt/U=
Subject key identifier: 47:6F:A0:A3:6D:99:B1:A8:3C:20:0D:DA:38:15:30:5F:E7:FA:06:BA
Authority key identifier: 5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
Certificate issuer: /CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Certificate serial: 019777C1A753E6A6A45A5177CD3EEFCC986D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
Manifest number: 1597
Signing time: Mon 16 Jun 2025 08:01:09 +0000
Manifest this update: Mon 16 Jun 2025 08:01:09 +0000
Manifest next update: Tue 17 Jun 2025 08:01:09 +0000
Files and hashes: 1: C-JYvDSVCc5Zd_4Sd7FiFR4ridU.roa (hash: Fud1edK7T1C6PqdOPqDnlVWq4JxXY+eiVXIDYHC1t50=)
2: XYHR_0WxVHwAqEtG75nsot-9Rbw.crl (hash: jCKDRnhk5xinUK3idJwxcrthEfiHuO7PnpWA1Airk3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:a7:53:e6:a6:a4:5a:51:77:cd:3e:ef:cc:98:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Validity
Not Before: Jun 16 08:01:09 2025 GMT
Not After : Jun 17 08:01:09 2025 GMT
Subject: CN=476fa0a36d99b1a83c200dda3815305fe7fa06ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:9b:d3:1c:e5:d8:19:24:bb:62:77:a1:29:
d5:01:1b:46:13:ff:a8:b1:35:6c:f8:6d:6d:6a:ab:
fb:28:70:29:c6:e2:2a:c2:53:e1:1a:15:ea:c2:e7:
29:67:8b:84:27:d7:29:56:30:6d:cf:30:60:18:f9:
be:96:23:36:df:f2:b0:0f:7d:d9:3b:e1:33:27:2d:
db:19:9b:0c:93:20:5d:22:55:a5:07:00:29:8d:46:
8d:bc:96:ec:ba:c0:64:3e:da:4f:a6:ef:09:d5:21:
d2:f0:a8:48:b6:6f:34:ab:8d:27:d4:54:9a:bf:52:
a7:46:d7:3f:29:29:4e:f4:12:b3:36:1a:4f:3b:28:
8e:a2:f1:83:ce:31:e2:f4:87:84:23:8f:a6:67:9a:
91:bd:aa:f5:b1:3c:19:58:17:36:e9:4d:3a:e6:b5:
16:4f:7d:f6:6e:1f:1b:55:40:66:33:fd:62:ab:3b:
65:a7:bd:20:77:c8:fd:03:58:57:df:86:e6:47:67:
d7:74:fe:e3:a3:00:6b:63:5d:5b:5c:df:ca:b2:2b:
77:d0:bf:ea:53:b0:53:e8:79:36:7b:e1:db:ef:d1:
91:48:00:20:40:e9:f4:d6:76:d8:af:e8:59:bc:a1:
5a:08:73:19:a9:94:4b:74:0e:60:d1:8a:38:92:81:
dd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6F:A0:A3:6D:99:B1:A8:3C:20:0D:DA:38:15:30:5F:E7:FA:06:BA
X509v3 Authority Key Identifier:
keyid:5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e4:1c:7c:9b:8f:50:e1:87:5d:55:4d:d0:70:d0:03:22:68:
f7:9c:ec:64:a1:85:97:27:4b:d6:b3:90:89:4f:bf:5a:2d:8f:
e1:9f:d8:28:8a:80:16:fc:88:fd:04:74:d7:2f:9b:23:23:dc:
d0:33:44:62:a9:6d:26:c2:25:c9:24:15:ea:05:26:22:08:ec:
99:ef:62:3f:fd:12:23:35:d2:c4:ec:44:9e:ec:b9:9e:1a:de:
ae:94:ab:e2:e7:80:bc:1b:72:f3:d9:02:62:1e:d9:9f:8c:2f:
1b:82:8d:e0:39:af:89:d9:b3:4c:79:1f:33:75:d9:05:14:27:
a6:d1:fe:93:fe:83:36:a9:19:50:3f:84:a9:73:e8:e4:dc:97:
63:75:7a:0f:7e:72:5c:c0:6b:ac:e4:0b:63:ba:7c:e4:94:9c:
c3:e2:47:9c:79:22:7a:de:b4:39:b7:93:40:b4:03:7b:dd:86:
7a:26:f6:b8:37:e5:7c:59:bc:09:57:26:f8:39:90:13:9a:25:
1d:73:ae:69:29:d1:c5:4c:f0:36:24:63:5b:4d:2b:03:47:56:
f5:be:69:78:4b:c6:94:24:4a:f4:01:2f:bd:30:cd:48:e9:c6:
d8:8d:f0:d6:54:c9:3a:c2:33:d4:40:51:b6:d2:90:be:16:e1:
77:9b:eb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:32:18 2025 by rpki-client