Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
File: XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json)
Hash identifier: HZp3QE6TaAblutEZTUoGBpYQm4C4H02/FBZFuBLbWpc=
Subject key identifier: 71:35:3A:BB:C9:1C:3B:67:A5:79:1B:8D:F6:E6:FA:FC:DD:EE:56:A1
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial: 01976FD0BCA30A9A21F8545DAA3DFD464130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
Manifest number: 0A79
Signing time: Sat 14 Jun 2025 19:00:40 +0000
Manifest this update: Sat 14 Jun 2025 19:00:40 +0000
Manifest next update: Sun 15 Jun 2025 19:00:40 +0000
Files and hashes: 1: 06tgDhMET5PEFJxe6WB-BV1M_gE.roa (hash: mCqrz6qmS27RhPQU4uNyx6aFC+5GW4aIzmbKH5kTy4E=)
2: AqcoNOW_E-xWBo1Rt_yWTCfd42I.roa (hash: QWci9V2NjIY+SYFiDofrhj2aiBG+2NbxvfuonR2gWB0=)
3: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: TumLet8F1VLL78tc2lVLylLiwK6LTuVvg5S1YZjKOrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:bc:a3:0a:9a:21:f8:54:5d:aa:3d:fd:46:41:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Validity
Not Before: Jun 14 19:00:40 2025 GMT
Not After : Jun 15 19:00:40 2025 GMT
Subject: CN=71353abbc91c3b67a5791b8df6e6fafcddee56a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:37:8b:f7:56:7e:d7:3f:73:07:0d:21:05:
90:6e:cc:77:0b:e0:bb:2a:70:05:16:f7:dc:f9:93:
a5:57:ff:90:d1:06:8f:ab:ba:3d:b2:2d:5b:1b:18:
7a:4f:6a:58:b6:5a:17:98:4d:ea:bc:4b:67:f4:e8:
fb:a4:39:ca:d1:8c:ea:2d:d4:bf:ff:21:8e:ba:3f:
28:ab:aa:ac:73:d3:c0:09:f1:a6:19:77:5b:ab:8e:
0d:43:e4:86:30:2a:f9:a9:12:60:98:95:16:d7:1d:
61:2a:55:bc:47:76:a0:1d:ba:88:f9:2f:c3:40:3d:
e2:5a:f2:02:4b:b1:68:5f:29:82:5a:05:dd:d3:35:
e7:e7:6d:2f:6f:77:e4:61:34:9a:ce:14:ac:52:77:
a1:b4:00:9e:a4:cb:d0:e4:2a:39:9f:83:38:e6:bf:
3e:bb:cc:da:b7:d2:07:75:af:8e:e3:6f:22:b0:f3:
18:b8:01:7d:36:81:0b:7e:a4:f0:ee:81:08:f9:49:
9b:f5:75:4c:06:93:a8:2e:c9:e6:1e:f4:3f:05:34:
1b:ac:5e:14:3b:b5:3f:f4:ee:a1:06:2a:c9:97:73:
88:28:20:50:b1:98:40:e8:f1:24:13:22:59:b7:de:
ca:88:a2:34:f9:2d:a0:32:c9:54:b4:59:89:02:c1:
1d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:35:3A:BB:C9:1C:3B:67:A5:79:1B:8D:F6:E6:FA:FC:DD:EE:56:A1
X509v3 Authority Key Identifier:
keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3f:6e:99:79:44:87:2b:6c:36:6a:fb:10:47:94:6c:2e:4c:
85:cd:61:7a:b6:1f:29:de:04:0c:f9:22:7e:7d:56:de:98:8d:
14:5e:eb:09:8c:a6:8b:5d:6b:dd:05:a1:e5:4b:96:ac:c3:53:
e3:70:3f:de:44:19:b5:7e:85:79:95:40:87:0e:1e:5e:ed:5c:
82:96:ea:d4:8f:99:7c:d8:3e:21:54:eb:3c:c7:a8:86:37:02:
f4:bc:07:5d:99:b0:2f:53:b6:b0:9d:bc:ad:24:60:a0:e3:4d:
1f:52:4f:b1:71:b2:ae:3a:96:13:86:b5:0e:39:a5:4c:46:78:
c2:ab:69:b5:25:7f:f1:69:d7:03:a9:5a:75:56:e7:7d:f6:5a:
6c:89:db:76:f1:0b:e9:75:bf:49:38:a4:e9:e7:e7:ee:3c:94:
c6:ea:2b:04:a8:31:55:89:4c:78:92:b6:7d:90:6e:cd:96:3b:
9a:c5:15:ae:5f:1b:02:d6:92:c4:29:7f:ae:92:8f:a6:22:89:
9f:2e:95:52:8e:2f:12:a2:2d:6f:5d:70:83:8f:ce:92:50:72:
2d:3f:f1:95:d5:81:7e:32:94:d7:97:93:85:15:71:b2:10:1d:
4c:8e:4c:32:d3:f9:2d:54:39:5d:a8:d9:89:21:a6:56:c1:66:
95:7b:9c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:09:11 2025 by rpki-client