Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
File: xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json)
Hash identifier: SdRQfFZQa9aYzI1tC/YIyrEHARZW2qlv+jWElrIwV+M=
Subject key identifier: 00:21:2E:87:D5:C1:C1:47:03:4C:8E:12:61:95:05:64:79:9D:5B:2B
Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Certificate serial: 01977ED5A4203C9CEDE31BA1CE3A7DE40658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
Manifest number: 027E
Signing time: Tue 17 Jun 2025 17:00:19 +0000
Manifest this update: Tue 17 Jun 2025 17:00:19 +0000
Manifest next update: Wed 18 Jun 2025 17:00:19 +0000
Files and hashes: 1: NBJiMu1brPzEal7P3N6cPAqoIL0.roa (hash: tL077Ces2LMV0DaeWX0Tayl4bRSqsUGH1e79Mg1asv0=)
2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: Yn1QZVXG/OPWPLptsIW7IRPcvoo86be/oe5//9vJqdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:d5:a4:20:3c:9c:ed:e3:1b:a1:ce:3a:7d:e4:06:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Validity
Not Before: Jun 17 17:00:19 2025 GMT
Not After : Jun 18 17:00:19 2025 GMT
Subject: CN=00212e87d5c1c147034c8e1261950564799d5b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:12:bf:ed:c5:56:0f:67:19:fb:8f:b9:bd:
26:66:81:b6:d0:f7:0e:4c:cc:a3:1b:1c:bb:c7:c9:
0f:ba:1a:83:6d:9b:b6:51:09:5b:0b:47:3d:3a:93:
77:3b:2f:06:1a:7a:fe:ba:36:dd:17:08:76:66:62:
53:50:78:58:ae:c9:22:69:49:03:f5:3b:ef:ad:fe:
c8:c0:08:ed:ad:55:b5:7b:93:54:7d:a9:53:28:5d:
4f:65:5c:d1:4c:ac:8b:62:fb:ec:85:14:e0:2a:1c:
47:c5:a9:92:e4:50:a9:e3:9e:f9:3d:b2:27:6c:a0:
aa:de:17:2c:bf:5a:0c:aa:38:fc:d1:d4:eb:76:69:
55:91:32:86:46:9a:de:5e:1a:18:ce:e2:3a:22:7d:
bc:97:f4:0f:c7:a1:d1:6a:54:51:5a:f3:33:1b:74:
4b:b7:81:37:9c:c3:a7:8f:3a:4c:75:44:a1:bf:d0:
61:15:2f:4e:17:13:7a:04:0c:32:3e:bb:35:93:70:
38:ff:09:74:1e:04:fb:c3:8d:8d:a6:33:b1:e4:11:
a3:48:07:7c:b5:6c:36:97:db:fa:9c:06:d5:6e:38:
39:e9:2a:b3:b1:05:3d:ba:c2:8d:5c:d7:92:b8:45:
43:38:dc:23:5b:8c:7c:97:d5:ae:0c:f0:6c:59:e2:
c0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:21:2E:87:D5:C1:C1:47:03:4C:8E:12:61:95:05:64:79:9D:5B:2B
X509v3 Authority Key Identifier:
keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0b:37:84:02:c0:34:da:fc:a7:ff:95:ff:56:4b:dc:2d:b9:
bd:ef:c1:78:03:e4:33:f8:b1:48:a7:17:b4:0b:87:57:4e:44:
63:bb:40:5d:d1:3c:6d:3c:0e:79:39:a4:e3:cc:85:38:10:f6:
7e:4f:34:45:f8:44:03:a0:fb:fd:98:29:06:98:2d:53:e4:fa:
1a:fb:e5:3c:42:b5:cc:7a:68:fb:f6:91:7a:d6:1e:f2:ff:f3:
7a:a8:a9:82:3e:5c:ce:82:56:56:86:a5:1b:d1:4b:6a:11:58:
bb:34:74:1d:4a:3c:fd:e2:1c:d5:aa:30:c2:55:78:e8:81:4b:
81:f9:c5:b7:ae:51:5f:2c:43:a4:6a:2f:7b:14:14:63:99:62:
8d:b8:a0:ba:a5:52:8d:7a:3c:cd:e6:e5:bb:2c:15:3d:7e:7a:
b3:42:54:2e:ec:26:fb:f6:9f:c9:1c:6f:20:04:ca:b8:79:23:
97:59:91:c0:74:e5:74:69:57:ac:26:23:04:74:bd:04:2a:38:
e0:b7:6a:72:fc:82:77:fa:4e:20:50:23:16:e0:0c:9b:a3:e9:
be:2c:36:5d:54:3b:fc:ca:33:c8:ec:9c:80:a6:b2:f3:0a:69:
b3:4a:31:fb:39:bc:dc:a5:70:25:c7:97:da:06:45:dd:18:ba:
a5:cd:e0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:02:32 2025 by rpki-client