Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
File: XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft (raw, json)
Hash identifier: Da2hw09tdqkjoLJUexJboGG3OfIKV/xHtCZz0JoSS4k=
Subject key identifier: 16:B7:F9:B1:FA:61:75:C0:76:B8:AF:D7:6B:7D:98:56:CE:F8:63:3A
Authority key identifier: 5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
Certificate issuer: /CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Certificate serial: 01978056A876762BDE10951526D6D5D099A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
Manifest number: 1599
Signing time: Wed 18 Jun 2025 00:00:52 +0000
Manifest this update: Wed 18 Jun 2025 00:00:52 +0000
Manifest next update: Thu 19 Jun 2025 00:00:52 +0000
Files and hashes: 1: XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl (hash: 9eSrU7KfRIGeqRkWwdxQOSuxeQRvQ+aBG461wIUZJWI=)
2: ZhJ5kdVgunlmo848w1nL5S4mr34.roa (hash: /GDuU5hcbbZPCMfEmpk6BhKCTJ1fC6jXDas0PVjpCto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:56:a8:76:76:2b:de:10:95:15:26:d6:d5:d0:99:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Validity
Not Before: Jun 18 00:00:52 2025 GMT
Not After : Jun 19 00:00:52 2025 GMT
Subject: CN=16b7f9b1fa6175c076b8afd76b7d9856cef8633a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:c6:e4:44:7f:b3:96:5c:bb:91:60:cf:ec:
97:f9:a9:6b:76:74:d1:26:11:f5:f0:25:7c:bf:28:
f1:16:e1:ab:61:d2:6e:57:fe:34:62:67:ed:e2:08:
85:a1:fa:48:b0:70:01:76:5a:aa:f5:5b:36:c5:85:
55:ac:97:67:22:e2:a9:1d:96:8f:11:78:30:33:e6:
50:ab:d5:3e:82:10:22:2e:e7:fe:09:fb:00:a5:db:
19:3e:a3:93:80:0c:cd:56:8a:a8:df:20:18:be:36:
8d:5a:fd:a8:13:c3:40:b8:6a:74:d1:0a:a9:64:21:
ae:1e:35:b7:8c:0f:38:63:a3:00:ef:de:5e:93:44:
ea:fe:91:af:96:b8:5b:ca:1e:bd:f8:93:ed:cd:e5:
5a:f0:99:bc:97:f5:fa:cf:31:bf:26:5e:4d:18:77:
13:39:97:29:de:25:1c:ed:f3:50:af:3f:cc:ba:d5:
d0:2c:b0:10:71:90:71:49:bb:f2:d8:d8:1f:e1:27:
89:91:eb:d5:21:72:b3:f9:69:69:71:48:e1:77:b9:
e1:80:58:50:4f:0f:e0:55:6d:c2:c7:a6:2e:1b:96:
31:23:e3:a9:13:1d:1a:70:e7:70:fa:7a:0d:9c:81:
35:c2:32:86:80:57:5d:32:2f:f5:b9:7e:35:96:8d:
4d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B7:F9:B1:FA:61:75:C0:76:B8:AF:D7:6B:7D:98:56:CE:F8:63:3A
X509v3 Authority Key Identifier:
keyid:5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:63:e9:42:b8:fa:19:db:c5:66:23:bf:80:dc:e2:b4:64:25:
2a:53:82:64:60:0d:f9:7e:14:82:20:65:13:0e:93:bc:d0:9a:
8d:80:9d:3f:51:86:8e:5d:4f:78:bc:8b:81:05:b6:9e:d4:bb:
71:18:95:62:90:32:0e:49:55:7b:b8:82:24:9a:35:20:c9:3b:
eb:0d:bb:33:e8:26:22:c9:3f:a7:ac:28:51:ba:37:b4:41:82:
1e:f8:9e:c2:36:b5:45:bf:f9:4f:79:de:69:ea:82:11:11:10:
b1:cb:0b:b1:18:9c:5d:0d:8d:e6:76:03:1a:48:c2:66:75:b3:
86:ba:1a:87:a0:1c:89:4e:f9:57:25:28:5e:7a:72:21:75:9e:
3b:95:47:ee:36:37:8a:af:8e:1a:2b:20:83:26:07:94:b0:4d:
f9:56:39:f1:6d:c5:6a:f5:86:27:47:e0:ce:49:b8:dc:1e:e0:
97:af:2e:3e:4a:4b:6f:b4:5f:40:a8:b5:1b:85:36:8b:42:90:
df:db:11:73:91:e3:e0:5e:1e:72:b2:15:12:d7:47:29:48:02:
9f:b3:22:41:37:ad:f4:30:d0:99:8b:f7:04:c5:ee:7a:02:f1:
eb:a6:c9:0a:0e:29:46:52:5a:b8:6c:b3:f0:59:fd:cf:ae:6e:
aa:c6:af:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:57:48 2025 by rpki-client