Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
File: xseGdZEgDB9fn9DMPemVTcE5hi4.mft (raw, json)
Hash identifier: QDxHDWNmWQ+cK4C/cr6qScBOG3BCmGakHs9QMQunWAs=
Subject key identifier: D7:53:82:01:73:A2:9B:B0:FD:EB:DD:F9:75:6F:5B:1B:DF:71:95:74
Authority key identifier: C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
Certificate issuer: /CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Certificate serial: 01976929D7EE5E5FC8AB67D3607AF5C077E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
Manifest number: 04E2
Signing time: Fri 13 Jun 2025 12:00:39 +0000
Manifest this update: Fri 13 Jun 2025 12:00:39 +0000
Manifest next update: Sat 14 Jun 2025 12:00:39 +0000
Files and hashes: 1: n5CLi01m2wEwkEwNJimVxySnb68.roa (hash: 5V0GC7bRrvLJkkKN335rdHnMpL5HHN7RxPUN+snnmZM=)
2: xseGdZEgDB9fn9DMPemVTcE5hi4.crl (hash: 3blMcK5r9tZkA8NRTyHQkMGJMJvRY4Fut9jY0vNxpJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:d7:ee:5e:5f:c8:ab:67:d3:60:7a:f5:c0:77:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Validity
Not Before: Jun 13 12:00:39 2025 GMT
Not After : Jun 14 12:00:39 2025 GMT
Subject: CN=d753820173a29bb0fdebddf9756f5b1bdf719574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:f3:00:f5:97:93:77:83:98:e4:4e:31:9f:
90:5b:6a:b2:3d:cd:fe:be:bb:90:a3:c5:7c:d0:10:
63:bf:be:05:d5:1c:d3:db:a3:74:b7:f0:79:2f:80:
23:3d:0d:61:9a:ce:3e:d4:8b:fe:8e:17:6f:6a:b9:
6e:1d:b3:39:aa:c4:e3:20:04:b7:36:b4:d6:95:c1:
f7:72:6e:6b:38:5f:0b:08:66:c2:61:ed:fe:b7:d5:
64:6b:f1:95:66:9a:f0:e6:9a:d7:9c:19:21:6d:f8:
d3:25:1f:5a:87:f6:3b:47:4b:b9:98:56:06:58:87:
77:6e:62:d4:06:07:a9:a2:5a:f0:8e:65:f1:40:a0:
8a:05:fa:c3:ca:08:02:c5:4f:a6:6e:66:3c:4e:60:
62:e9:37:80:7c:35:28:02:12:d9:5c:89:07:e6:27:
85:62:1e:17:9e:08:e0:d6:23:46:04:6a:3f:ee:b0:
8b:f5:4c:e5:b0:bd:1f:c0:93:fa:7a:e6:42:5a:70:
e9:c4:18:bf:cb:6b:b7:1a:83:ea:4b:4f:4d:5b:e0:
26:1d:89:92:92:d3:0b:f8:10:fd:6a:1b:bc:07:31:
97:05:43:94:90:83:64:65:28:f9:ec:a8:86:67:34:
5d:7c:0b:05:66:df:c9:df:d8:cb:1b:dc:23:e3:62:
6a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:53:82:01:73:A2:9B:B0:FD:EB:DD:F9:75:6F:5B:1B:DF:71:95:74
X509v3 Authority Key Identifier:
keyid:C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1e:7c:a7:1d:a6:24:1d:0c:7a:fd:2b:6e:f3:aa:5c:15:c6:
0f:81:43:83:85:41:87:17:b3:c0:0d:64:a0:4e:51:59:42:ad:
38:b5:54:b8:5e:33:ca:3d:31:ad:14:ab:f2:0b:83:c7:af:a7:
92:ac:35:c1:c7:e2:6b:00:de:68:b9:d5:fb:8e:2b:f7:b4:02:
c0:8f:6f:dc:5d:98:5c:6a:52:0d:52:25:cf:03:66:0d:e2:4c:
15:eb:14:b4:0c:c9:24:e4:4a:d8:e1:c1:30:96:15:d5:a3:4c:
d9:d2:95:ff:15:9f:05:86:54:8e:ca:7f:89:00:1b:7b:fb:f0:
ec:ce:82:dc:47:f8:12:6b:7a:d5:f1:83:88:02:47:09:cb:49:
45:f3:06:c2:db:08:e8:54:06:88:2d:4d:a0:a8:22:af:f4:6c:
73:f2:db:a1:af:24:2a:be:c3:e1:8b:bb:bb:e1:a4:64:56:51:
e7:d9:9e:2a:16:10:60:75:f6:8b:a0:e8:31:f5:35:1d:db:1a:
c3:f4:1a:fc:27:be:f7:82:7c:cf:1d:17:36:bc:08:cf:4e:69:
28:35:d4:55:a4:54:22:a1:b4:09:14:3a:a2:04:1f:69:20:34:
51:30:d0:af:ba:af:7b:72:b7:4a:bb:72:92:8d:f8:f9:13:0f:
28:09:c2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:15:36 2025 by rpki-client