Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
File: X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft (raw, json)
Hash identifier: ZD2hqwZRZtGagoRHxT85jxRbTIj43JIdR0WyKD+cdD0=
Subject key identifier: 03:01:DD:B2:98:65:C8:C2:A2:45:22:41:A0:3F:46:28:5E:0B:EB:F8
Authority key identifier: 5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
Certificate issuer: /CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
Certificate serial: 01976BF43625B2F349BAC168B668306ECBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
Manifest number: 0D4E
Signing time: Sat 14 Jun 2025 01:00:56 +0000
Manifest this update: Sat 14 Jun 2025 01:00:56 +0000
Manifest next update: Sun 15 Jun 2025 01:00:56 +0000
Files and hashes: 1: X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl (hash: J59cxaSVFeOJBzMfSv0gguVN5ES+9LE2TqhGVIuxr2U=)
2: d0esey8AL3oqWdpXKQi0WyV7ktQ.roa (hash: J4cOoBAYf62aaAeG5Hi7u+/pYelZ41GqNxwzMAQ75xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:36:25:b2:f3:49:ba:c1:68:b6:68:30:6e:cb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
Validity
Not Before: Jun 14 01:00:56 2025 GMT
Not After : Jun 15 01:00:56 2025 GMT
Subject: CN=0301ddb29865c8c2a2452241a03f46285e0bebf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:e5:c3:41:28:1c:ad:eb:a6:ba:f6:cc:f6:
dd:98:39:68:4f:21:53:ce:a9:43:87:11:65:24:28:
96:62:13:ff:68:bb:0d:c3:f7:16:03:0e:ef:7c:ab:
95:cb:54:15:85:ee:22:4f:db:d8:41:2a:34:64:52:
08:f6:13:e4:ab:6b:0c:db:05:5c:ea:7c:29:89:48:
5e:dc:10:6c:0c:89:95:bd:43:02:fe:f8:1f:32:e5:
3d:09:80:a2:db:6f:5e:b4:27:2a:bb:43:20:d1:ae:
16:90:49:85:53:77:3e:90:b9:21:fc:61:f0:24:15:
89:f0:29:56:ab:81:1a:dc:f7:c7:aa:8c:87:05:ca:
b5:02:81:fd:12:fd:46:24:69:36:0b:97:6e:90:8c:
e9:ba:f8:21:86:4c:9b:b5:d9:da:af:60:f2:dd:53:
54:84:36:98:78:dc:21:b5:52:06:37:04:e2:23:d8:
aa:79:d0:cb:aa:8f:e0:9d:a6:ec:ce:96:88:27:f7:
02:74:7d:74:54:84:bb:90:a5:f6:08:e4:14:e6:32:
72:98:41:42:fd:00:fa:08:eb:6b:91:e6:25:03:3c:
4c:a8:62:f5:c6:e5:f8:62:6b:d5:3f:2a:36:6b:4f:
2f:84:9d:1c:ce:15:9a:1f:fe:e4:c5:2d:0e:6d:f8:
43:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:01:DD:B2:98:65:C8:C2:A2:45:22:41:A0:3F:46:28:5E:0B:EB:F8
X509v3 Authority Key Identifier:
keyid:5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:20:55:c7:5f:f0:98:e4:46:9d:45:4a:eb:37:4e:9d:df:ae:
47:cd:b7:9c:b0:04:d7:55:12:7a:02:57:12:b0:85:3f:9c:2b:
74:69:21:f1:2f:d3:1c:6b:39:14:51:b7:82:bd:2e:e8:82:b1:
74:2d:70:bd:43:fe:bf:a5:cb:be:a8:65:27:4d:cc:5f:1c:59:
7d:2f:f5:02:b9:fc:90:8f:97:62:e1:ff:ad:23:21:d3:2a:c3:
b8:fb:2b:31:02:d8:d3:b9:5b:bc:d1:ec:37:e7:22:4b:19:bc:
a4:ad:f5:2d:ef:3b:66:c3:be:09:dd:21:d4:12:14:7a:a1:77:
e1:65:f7:bb:91:42:7d:74:34:9b:ae:60:6a:01:fc:2c:ff:d6:
f6:69:ac:68:75:60:39:35:bc:1e:f5:66:9b:0c:e0:b5:07:b6:
7c:88:1d:d4:cc:78:c0:7c:06:d6:a9:50:42:cd:6c:b1:09:79:
76:a8:1e:c9:57:c7:13:04:cd:34:f0:b6:89:4e:f9:ce:57:72:
9b:dd:b4:80:8e:a6:c3:a6:13:8d:34:9e:bd:b4:13:77:fe:5a:
8a:a7:15:5a:c7:6f:9f:c5:c6:bc:31:a3:06:d4:a2:a4:e9:a5:
5d:9c:2e:ba:bc:90:ce:62:46:74:cc:f3:f0:00:0f:3f:2d:eb:
35:17:04:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:05:49 2025 by rpki-client