Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
File: xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft (raw, json)
Hash identifier: IixI0RBx4MAcLCQNxi279pQgK3/nrF3Ggu6CwHRU9ys=
Subject key identifier: CE:74:6E:75:8E:85:14:49:3C:EE:62:95:93:17:24:A1:11:DD:65:AA
Authority key identifier: C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52
Certificate issuer: /CN=c5721737651598f56cf7195120777d7b5316f552
Certificate serial: 01976D74585BDB06ACFCBD5CB14CDFC5944F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
Manifest number: 12F2
Signing time: Sat 14 Jun 2025 08:00:30 +0000
Manifest this update: Sat 14 Jun 2025 08:00:30 +0000
Manifest next update: Sun 15 Jun 2025 08:00:30 +0000
Files and hashes: 1: nB0wD2NbLIcgL4wuuaNReH2xdaw.roa (hash: PmwRmIsMv3KSkKaHz3D8VpJ1Kt0x35JTg65eBK0T3+k=)
2: xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl (hash: PXoYThHtunsS8D+xhTXCEm94ZqCD+qnqTv6ttvgNCRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:58:5b:db:06:ac:fc:bd:5c:b1:4c:df:c5:94:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5721737651598f56cf7195120777d7b5316f552
Validity
Not Before: Jun 14 08:00:30 2025 GMT
Not After : Jun 15 08:00:30 2025 GMT
Subject: CN=ce746e758e8514493cee6295931724a111dd65aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:c8:8f:1f:89:c6:af:98:73:ff:08:af:8f:
56:0f:de:a8:17:fd:86:a7:20:52:57:de:d7:9f:e7:
cb:78:ca:fa:9b:c3:c8:41:e1:fd:5f:b7:35:4e:0e:
63:06:ec:f2:ad:a6:f9:59:fd:a8:09:0c:0c:ee:e3:
dc:d0:26:11:56:3a:51:f4:29:2c:04:cf:56:e0:59:
f2:cc:91:85:17:34:c9:93:51:c7:4c:3e:1e:7b:80:
e4:1e:a8:f3:09:8c:2c:84:fc:f3:29:90:e8:f6:8b:
7e:3b:f9:5e:e0:b7:fb:7a:74:6a:a4:24:f4:67:f3:
d2:18:2e:99:fe:d1:04:16:df:16:f8:57:a1:6c:d0:
11:9a:a9:7c:b4:94:f8:cb:f8:13:2a:71:14:a3:4a:
69:c5:4f:5d:74:4e:8d:30:5e:31:da:fa:39:26:c0:
22:ae:9b:8c:7d:8d:f6:3a:0d:e1:3f:2e:1b:fa:21:
7e:48:be:27:da:5f:7f:cb:df:e5:1f:b9:1d:96:34:
79:95:d3:1b:ad:5b:25:ec:cc:10:19:bc:ed:86:12:
c2:9f:f4:6d:2f:64:0c:84:81:1e:7e:b0:ca:08:5d:
1d:fc:b6:38:84:30:78:d8:7a:21:39:3b:e9:2e:f5:
65:b6:76:7b:0a:0f:23:08:85:f7:20:57:eb:ba:72:
18:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:74:6E:75:8E:85:14:49:3C:EE:62:95:93:17:24:A1:11:DD:65:AA
X509v3 Authority Key Identifier:
keyid:C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a8:d9:42:f9:f6:f4:bd:48:c0:fe:8b:13:83:5b:7a:38:82:
1a:3a:6c:c3:3e:77:b7:54:2c:f5:0f:4d:f7:a0:74:e2:e3:be:
83:9b:63:7f:84:6d:23:70:ee:8a:24:af:87:3d:ef:c8:03:c7:
da:7a:95:db:31:53:17:ec:88:d7:de:24:7c:ce:75:61:c9:77:
9e:25:76:28:7e:70:ad:75:48:3d:8e:cf:90:8c:85:6f:64:69:
e1:b0:73:88:42:c1:ba:34:36:95:ab:85:a0:b5:b8:18:f5:d9:
ea:3b:45:e6:33:85:af:bf:42:93:99:84:5e:be:fa:b9:5b:31:
74:49:6f:4b:a9:fd:1f:e6:56:cb:2c:c7:15:76:1e:2c:bd:c6:
d0:4b:e0:65:55:ea:34:61:bb:49:17:cb:df:11:92:0a:61:f3:
ba:93:fb:d3:74:55:54:6b:27:cf:42:3c:61:43:2d:f4:8b:fd:
a0:53:99:78:a9:c5:b0:ea:01:6d:43:9b:76:ba:88:29:40:84:
81:bc:e2:80:cb:31:8a:44:77:cf:9d:03:0b:1a:14:ba:56:47:
84:47:80:0c:cf:85:b0:cf:4f:27:a7:ba:24:c7:1e:be:48:20:
93:21:56:71:c1:2d:60:66:e9:4c:66:65:ae:2d:62:bf:a4:ab:
c1:73:d6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:44 2025 by rpki-client