Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
File: _XF_OrY5RaG-c5wrOiWJvqVd224.mft (raw, json)
Hash identifier: HyWtbcY07zgamPd1JSsNBCx7XJjDZAQHs13DjmM6wGc=
Subject key identifier: C0:56:CC:E4:59:FA:8A:B4:E0:6E:AA:E4:D7:36:30:C5:F3:8D:43:26
Authority key identifier: FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
Certificate issuer: /CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Certificate serial: 019768853BC928D50AC50E30C5E75684561F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
Manifest number: 0B3E
Signing time: Fri 13 Jun 2025 09:00:51 +0000
Manifest this update: Fri 13 Jun 2025 09:00:51 +0000
Manifest next update: Sat 14 Jun 2025 09:00:51 +0000
Files and hashes: 1: _XF_OrY5RaG-c5wrOiWJvqVd224.crl (hash: 1sWRoBzq5K5ZIVUfXwmjF7qeVYHUmox4tU1SOYxIom0=)
2: gzdyy5qInnSa0M6b956pVUzgC-k.roa (hash: 2Ow3V4pucXvBImXLn02gpmIFTSdf3VU+/V7SnyCKOjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:3b:c9:28:d5:0a:c5:0e:30:c5:e7:56:84:56:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Validity
Not Before: Jun 13 09:00:51 2025 GMT
Not After : Jun 14 09:00:51 2025 GMT
Subject: CN=c056cce459fa8ab4e06eaae4d73630c5f38d4326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7c:80:0d:23:d3:52:8c:70:a1:5f:fa:a6:bc:
58:08:59:87:ee:be:04:9b:95:84:5f:de:4f:a4:31:
95:12:de:45:24:4c:15:1d:ed:ab:91:98:a8:14:25:
2c:b1:b0:f1:14:cd:ce:db:a0:04:4a:67:6c:fb:bc:
ed:d2:df:8d:93:1a:eb:66:59:ea:fd:6c:cb:ae:10:
59:38:13:b9:15:7d:64:a3:3c:14:41:80:01:2a:73:
cc:ef:9a:fd:84:06:43:36:a4:a4:f6:f3:88:41:51:
04:6d:82:c7:dd:3b:d9:8c:04:3a:06:77:9c:ca:58:
00:2f:be:83:b7:8a:a4:b1:c3:ad:bc:a2:94:b0:69:
f0:82:66:be:27:6f:cd:15:6f:0c:42:a8:5b:e8:d0:
1c:f9:56:71:96:a7:a9:57:b3:ef:92:fd:1b:6e:c8:
4b:5f:ac:71:79:fa:ec:a6:e2:e2:3c:b4:32:7e:a6:
ec:81:c4:3f:c3:c2:2c:7f:da:c6:ce:c4:85:f5:57:
fe:f8:c2:db:21:a9:da:70:b6:79:5c:9a:07:19:eb:
ee:99:ee:31:37:63:5f:00:e2:87:cf:f5:cd:2d:9f:
45:7b:d5:95:62:ba:81:e5:3b:02:93:0d:c4:24:ca:
0b:8d:bd:2a:12:5f:d0:51:60:29:c4:73:13:15:04:
47:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:56:CC:E4:59:FA:8A:B4:E0:6E:AA:E4:D7:36:30:C5:F3:8D:43:26
X509v3 Authority Key Identifier:
keyid:FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:62:74:f8:ad:35:a4:b1:df:74:ef:ae:3d:6e:32:d2:fa:f4:
d7:6b:90:8c:06:9c:40:67:aa:61:cb:3f:8a:fb:03:8d:eb:31:
97:bb:b0:b2:8b:8f:26:46:da:4b:56:06:93:51:5b:87:2b:2f:
a6:aa:ed:51:60:c6:a6:df:5c:b1:28:fb:a0:0e:a2:55:ff:37:
62:57:ba:87:23:7b:4a:70:bb:44:d2:07:b9:ec:5b:5e:52:6c:
93:a4:27:c8:34:1f:1d:20:18:57:7b:82:0b:b2:e4:fc:8e:e4:
fc:fd:72:a9:d9:5f:9f:7a:56:e0:fd:ce:9c:14:76:c3:81:9c:
9c:0b:8f:71:02:9f:05:94:ff:3c:93:28:bc:f5:be:cb:f1:b5:
9d:df:11:b8:14:53:f4:22:e2:c9:6b:2a:93:8c:58:ec:44:a4:
fd:a9:18:26:fd:82:da:d5:14:82:32:fa:79:41:a9:07:72:17:
ee:e2:4c:ad:04:ba:88:e8:13:0f:c9:70:b6:6b:4a:9f:52:aa:
c5:1e:eb:b6:6f:bc:b1:df:7b:c6:39:6d:78:fa:e1:d1:25:b7:
57:9e:6a:34:52:22:90:bb:e1:48:c6:21:df:29:d0:c2:7b:40:
ec:ab:13:db:83:6e:3f:a1:9e:89:fb:3e:62:3f:a0:b3:e0:d8:
0d:1a:fe:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:35:47 2025 by rpki-client