Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
File: _xwhiBHZKUrWMSU6RF7R05WpY58.mft (raw, json)
Hash identifier: 7dPmwavhSReHG8zTpYGp4oKUsN5ID4oof5IygP3nVEg=
Subject key identifier: B6:E0:4B:99:66:3E:60:E3:F9:92:E3:97:F2:28:1C:72:FA:95:01:57
Authority key identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
Certificate issuer: /CN=ff1c218811d9294ad631253a445ed1d395a9639f
Certificate serial: 01976F2BCEAD739E8CF7B4DAE5991D8FF6CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
Manifest number: 13EB
Signing time: Sat 14 Jun 2025 16:00:31 +0000
Manifest this update: Sat 14 Jun 2025 16:00:31 +0000
Manifest next update: Sun 15 Jun 2025 16:00:31 +0000
Files and hashes: 1: _xwhiBHZKUrWMSU6RF7R05WpY58.crl (hash: nqI5pJbFkvxO5t3MfegU7ck7eMZqtkdqqh1IG88vOmc=)
2: v5mMLWDyDi7CQki8wtNGLvZaSFo.roa (hash: QY/aaNbMvjreUlmsWUFxIkBwGJaecYw8AUp+m4XK/7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:ce:ad:73:9e:8c:f7:b4:da:e5:99:1d:8f:f6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1c218811d9294ad631253a445ed1d395a9639f
Validity
Not Before: Jun 14 16:00:31 2025 GMT
Not After : Jun 15 16:00:31 2025 GMT
Subject: CN=b6e04b99663e60e3f992e397f2281c72fa950157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:18:a7:92:55:0e:d0:cb:f3:86:3e:4e:30:
a9:c6:ff:80:e0:2b:c2:6c:87:1f:df:3e:b7:bd:61:
88:f9:bf:55:ae:94:05:62:0a:57:8e:6c:26:b9:80:
6d:a6:b8:a3:96:79:ea:23:65:a2:46:b7:91:12:dd:
46:f2:2a:c0:e3:26:ce:5d:76:d7:6e:6c:02:8f:e2:
3b:36:fd:65:5b:86:f8:6e:ad:fa:83:bb:e6:d9:7f:
af:4c:9c:58:63:b3:c0:91:b5:c9:5d:ea:cb:6e:6d:
4b:10:56:fe:8c:37:cb:f4:e9:7f:ef:41:48:5c:5c:
e6:df:06:45:15:2a:c0:9a:2f:bb:02:6f:fa:01:e6:
90:95:1e:58:cb:3b:9b:25:37:1d:72:32:02:80:5e:
a9:3c:67:b4:88:55:82:c4:c3:d4:12:94:9e:6d:19:
d9:06:20:0e:87:0e:59:54:7d:7b:66:4c:ba:84:4f:
76:17:d3:f2:fa:50:46:ae:8e:0b:34:12:b3:a4:48:
aa:8e:5f:cc:46:82:67:b2:6b:47:6a:13:fc:d7:30:
5d:fd:40:67:f9:48:41:36:70:0c:68:79:f4:9e:a6:
55:7a:8c:14:6c:a9:41:e1:e2:7b:5c:8e:34:55:cf:
41:67:c8:44:47:d4:1e:18:1e:ec:4b:c8:7f:72:3a:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E0:4B:99:66:3E:60:E3:F9:92:E3:97:F2:28:1C:72:FA:95:01:57
X509v3 Authority Key Identifier:
keyid:FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:be:39:e0:be:70:6c:8d:db:01:24:48:e4:82:9f:79:68:c0:
e7:b7:90:af:06:1e:8a:c5:4a:56:41:2b:da:b6:6d:bb:11:5d:
a8:5d:7e:01:1b:45:aa:dd:d1:a1:8e:be:52:c1:f6:29:6d:0a:
a4:14:e6:40:e3:15:49:4c:19:4e:10:ca:a0:5d:e2:e5:4b:2d:
8a:39:42:59:d1:7e:56:85:cb:73:6d:7e:53:42:9b:3b:6e:62:
26:ed:e5:a6:29:f4:57:45:52:a3:a8:b8:49:18:9c:bf:cc:f7:
9d:5f:31:f8:4a:81:f1:0d:9d:f2:3f:98:b2:4b:ac:4f:a7:0c:
c9:a8:53:01:25:50:4a:58:af:48:ba:31:f4:59:d4:76:16:65:
44:22:82:34:a5:b2:a7:e8:bb:79:47:cf:bf:c7:26:7b:fd:6d:
9b:23:9e:d2:c1:c0:5f:c3:ac:c7:9e:b1:2c:e6:63:c3:d2:40:
15:ac:53:a0:0f:1b:a9:00:89:59:30:ed:b9:15:cf:0a:1b:2d:
19:a5:4f:0b:b9:b9:19:d2:a2:95:31:04:a9:7c:5b:5e:71:6f:
d3:53:1e:6e:66:e8:db:70:88:6d:a6:f8:37:47:a5:25:6a:7a:
1a:b2:69:a2:a7:16:68:28:3b:ce:cf:8d:c2:9d:1f:64:44:2a:
4f:ee:a9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:57:54 2025 by rpki-client