Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
File: XL1s2RrWpyhrIfZQn92fUP7nXYc.mft (raw, json)
Hash identifier: HRb8/OfGhEjpioX0DxL2FopE+fmVRoUnJ5+Gb0EKgAw=
Subject key identifier: 9A:67:AF:E7:84:E7:AC:CC:12:A3:B5:48:A9:04:F8:E6:F1:79:6D:FA
Authority key identifier: 5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87
Certificate issuer: /CN=5cbd6cd91ad6a7286b21f6509fdd9f50fee75d87
Certificate serial: 01976960F07770BF446FA55DE2B2401CB27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
Manifest number: 14BA
Signing time: Fri 13 Jun 2025 13:00:50 +0000
Manifest this update: Fri 13 Jun 2025 13:00:50 +0000
Manifest next update: Sat 14 Jun 2025 13:00:50 +0000
Files and hashes: 1: LfsV7f6LxRRDF8DgEB39eI0JGcY.roa (hash: 57HPzdZv/cmkcVMLJmynj7OnbXGj1b4sWVjtj2VnRws=)
2: XL1s2RrWpyhrIfZQn92fUP7nXYc.crl (hash: UhcgppoA6XFjyuxYTNbZKNcw6z8/dtSEm6iSyJzvKQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:f0:77:70:bf:44:6f:a5:5d:e2:b2:40:1c:b2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbd6cd91ad6a7286b21f6509fdd9f50fee75d87
Validity
Not Before: Jun 13 13:00:50 2025 GMT
Not After : Jun 14 13:00:50 2025 GMT
Subject: CN=9a67afe784e7accc12a3b548a904f8e6f1796dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e4:74:0b:78:f1:86:bc:05:02:29:a0:6f:7b:
21:c8:0a:80:da:22:1c:28:d4:ad:19:d8:4a:cd:74:
de:de:63:00:af:61:2c:aa:5a:7b:46:14:67:ae:e5:
64:24:9a:62:97:f6:40:42:c9:ae:6e:92:87:c8:6d:
ff:fd:e4:dc:7a:62:ec:72:08:47:28:ba:dd:f9:0f:
bd:d8:d9:6c:0f:6c:c5:ee:c6:f8:35:24:a6:dc:0f:
7a:e0:47:a1:a0:79:35:9e:52:c4:1e:0c:5e:62:50:
52:aa:a7:ca:af:9b:62:36:77:eb:ab:cd:a5:ee:97:
70:d3:84:c7:74:a3:ab:92:e2:37:5f:d8:b1:28:26:
40:05:86:66:92:79:92:7b:c4:8f:e6:35:34:5a:bc:
1b:fa:ea:cb:16:87:d8:78:0d:04:40:cd:b7:d9:ca:
56:e8:58:0c:28:1b:c1:f6:0f:d6:ea:0f:7c:e7:e7:
d4:1a:47:4f:93:59:49:fd:ab:dc:20:ac:d4:4d:53:
13:d0:e9:8d:ec:a0:a3:8b:7d:b7:d9:ec:cd:c1:1e:
97:34:fa:bd:9f:44:9b:69:82:00:8b:b4:1b:97:75:
7d:48:45:d8:1b:b5:a4:04:af:71:55:bf:9b:a2:6d:
2f:75:0c:78:48:d4:d4:b5:2f:e1:14:89:98:cf:af:
07:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:67:AF:E7:84:E7:AC:CC:12:A3:B5:48:A9:04:F8:E6:F1:79:6D:FA
X509v3 Authority Key Identifier:
keyid:5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:92:da:2e:56:cb:48:3d:2a:12:48:46:66:38:e7:3c:d5:69:
9c:8c:4a:26:6d:b5:a4:02:1f:24:02:b0:9b:c0:86:d9:aa:81:
8c:77:40:cc:bf:c7:51:c7:31:0b:21:b4:41:4e:ee:37:21:00:
02:c0:d8:c3:0f:fb:db:09:91:99:a6:85:fc:13:8e:3a:e4:36:
b8:7d:7f:04:48:5e:02:76:a8:57:ee:46:46:2d:1c:e6:d7:6d:
d0:8d:60:8c:2c:3f:a0:fc:6d:d0:b0:ef:73:4c:ec:4f:33:48:
5e:d2:03:2b:86:86:3e:52:a9:c0:51:3e:63:54:0d:05:1f:2a:
5e:72:4c:90:4b:c1:c3:80:92:0a:42:7f:4e:cc:39:ba:c9:0c:
d5:77:bf:32:57:62:53:47:9a:d7:fc:75:b7:21:49:45:5d:03:
ee:c5:8d:6c:69:dc:76:d7:da:71:fe:c4:3f:1b:f4:55:33:07:
6b:bb:e3:31:f7:0f:a4:71:9a:2c:29:aa:eb:44:11:83:5f:e3:
38:e1:42:d5:f3:95:ee:5e:0b:f3:3b:f3:24:94:cc:3a:75:ab:
f9:6a:08:fe:17:6e:d4:3f:5d:63:d0:c5:44:39:74:b0:c3:a4:
4c:f1:97:7c:3e:b1:34:4b:84:29:41:b5:1e:5b:dd:ee:27:f8:
5b:8c:0c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:35:14 2025 by rpki-client