Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
File: X2c9L2Ia4xQHABdIu95jisvYYFA.mft (raw, json)
Hash identifier: VvnV5TcQaU5YdJNjNj4bcKopBi++dufFfrxtzgVJetU=
Subject key identifier: 87:CE:35:6E:A7:FF:94:E1:99:D6:59:60:EF:0F:82:39:B2:45:63:63
Authority key identifier: 5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
Certificate issuer: /CN=5f673d2f621ae31407001748bbde638acbd86050
Certificate serial: 01976D3D7A1D34790039A3A4BFEA8E35A8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
Manifest number: 0604
Signing time: Sat 14 Jun 2025 07:00:34 +0000
Manifest this update: Sat 14 Jun 2025 07:00:34 +0000
Manifest next update: Sun 15 Jun 2025 07:00:34 +0000
Files and hashes: 1: HqDRIksWN36QXauqYoD2knIGjbc.roa (hash: 05DMa/ontaHtCWdbIzNxIFAgYET2ZoK4nwid3joHlm8=)
2: X2c9L2Ia4xQHABdIu95jisvYYFA.crl (hash: VTDW0QjTpiVIGPEIawoebrVDK2OUSRIo5KUSNBNANNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:7a:1d:34:79:00:39:a3:a4:bf:ea:8e:35:a8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f673d2f621ae31407001748bbde638acbd86050
Validity
Not Before: Jun 14 07:00:34 2025 GMT
Not After : Jun 15 07:00:34 2025 GMT
Subject: CN=87ce356ea7ff94e199d65960ef0f8239b2456363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:58:3d:74:bc:31:17:2b:4d:5f:af:0d:16:
6c:85:70:97:5d:af:fe:de:84:7b:5b:0e:47:ed:29:
c8:94:00:c7:a6:97:42:9f:0a:84:bb:da:48:39:12:
0c:b5:0f:d8:3f:85:61:22:9c:ba:08:71:a0:5c:7a:
f8:e6:9b:1f:eb:20:08:0f:56:de:54:7a:7c:7e:6a:
26:9a:b9:87:7c:92:43:13:12:8d:72:82:9d:c1:4f:
1d:41:30:96:7b:1e:ec:b7:04:71:df:50:12:60:c8:
91:eb:fa:8f:c4:14:e0:61:7c:0f:eb:53:31:8b:76:
35:46:42:1b:7a:b7:cf:49:2f:7f:c2:b6:bc:b2:a5:
93:a6:88:5c:f9:34:5c:f6:ea:85:a8:c2:2f:67:73:
89:4b:57:cf:f4:d9:8b:d3:ed:43:5e:fa:c5:86:17:
12:84:c8:ae:7e:bb:3f:fb:bb:99:bd:21:09:de:dd:
9d:2e:9e:5c:6c:6c:bc:9d:63:b4:97:f2:b8:da:37:
53:aa:7d:ff:1f:cd:fd:40:72:a4:f4:99:36:c8:ac:
df:70:21:b1:7d:38:2d:64:3c:2c:af:7d:b0:60:40:
d5:c4:26:e4:a5:d6:68:04:fb:35:61:70:95:a9:90:
11:ea:fd:62:79:90:ce:28:f5:b1:d2:e3:2b:47:43:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CE:35:6E:A7:FF:94:E1:99:D6:59:60:EF:0F:82:39:B2:45:63:63
X509v3 Authority Key Identifier:
keyid:5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:38:ea:22:0c:0c:36:c7:9e:e3:63:fb:ec:9e:d3:4c:6b:d4:
7e:fd:30:81:71:da:83:b8:73:ac:9f:9b:d9:af:b1:b4:54:40:
1e:9f:78:1a:81:22:b4:8b:5f:84:9c:42:e6:0d:fb:11:40:c7:
26:f2:1c:e9:62:67:1a:f2:f9:ad:c4:0d:db:cd:02:1f:49:47:
12:bb:d3:b3:a6:4b:0b:f6:f0:4f:42:1b:3b:83:f3:66:37:18:
d9:19:85:e1:9c:4c:5d:01:be:eb:3f:c5:49:c1:92:ac:e9:fc:
cb:2f:a5:e4:74:e7:40:5c:c7:f9:d6:99:e9:df:32:ea:6b:4d:
32:77:ff:13:9c:e8:fb:2b:24:e2:dc:af:c4:bd:ba:4d:7f:3a:
bf:ca:e6:97:73:9e:e0:23:fe:96:84:f6:c0:09:99:19:dd:1d:
3b:a7:8a:fb:8e:a7:62:30:94:14:80:83:80:b6:29:2a:67:d5:
26:d5:50:15:19:bd:12:ec:f9:e6:9d:00:5a:8c:11:ce:63:98:
7b:78:e0:80:c6:fc:aa:1d:f0:c5:fe:ad:67:a9:69:e4:82:65:
f6:4b:fc:c8:74:23:40:05:13:ca:f7:0d:fb:42:bb:7a:e3:a2:
0c:7c:74:5e:97:22:c8:97:80:14:a0:48:35:19:5e:92:43:f8:
89:01:0b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:58 2025 by rpki-client