Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
File: xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft (raw, json)
Hash identifier: pAi2ZCzUA3VIMkCI9eDFRhek/R1MkXsTg15Ru60AAl4=
Subject key identifier: 7C:0F:10:6F:BC:36:EA:8B:01:F2:EA:46:FA:8A:BD:F3:C5:E6:30:F8
Authority key identifier: C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
Certificate issuer: /CN=c59c41daf0092b703bc059ba1353f071ed12199b
Certificate serial: 01976C2AD0362EEEED41BA742C12949E37E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
Manifest number: 1521
Signing time: Sat 14 Jun 2025 02:00:34 +0000
Manifest this update: Sat 14 Jun 2025 02:00:34 +0000
Manifest next update: Sun 15 Jun 2025 02:00:34 +0000
Files and hashes: 1: cGueQe1h8duehogXBQfbjMf187c.roa (hash: SeygR9MEl7TBvHViQ7GiY7qErcMbLwgXcJ9lbMPWx3c=)
2: xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl (hash: BonqbXYrhmXSZpHOdYZQzEQK7Qzvc3YTV+g4t1fa39Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:d0:36:2e:ee:ed:41:ba:74:2c:12:94:9e:37:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59c41daf0092b703bc059ba1353f071ed12199b
Validity
Not Before: Jun 14 02:00:34 2025 GMT
Not After : Jun 15 02:00:34 2025 GMT
Subject: CN=7c0f106fbc36ea8b01f2ea46fa8abdf3c5e630f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:a3:3b:dc:c1:15:5c:e2:c1:05:72:09:26:
7a:93:7d:04:4f:c5:6f:38:78:ae:16:40:85:c2:79:
3c:0d:b5:3e:ac:c0:ee:11:fa:1b:10:56:be:57:77:
b7:90:55:20:dd:89:7b:d6:15:4a:fa:15:61:cd:35:
d9:2c:ad:22:1c:2e:a0:d5:91:d6:41:e3:75:27:e4:
18:a0:9b:d2:a3:9a:17:d7:dc:f1:74:e3:a1:8b:8c:
ed:a4:b5:7b:ee:8c:30:44:7b:4e:f0:61:02:ba:0a:
b3:c1:49:6f:b5:fc:4e:a2:ae:6d:4b:56:d8:3a:d6:
f8:ed:b5:70:e6:44:a0:de:ea:79:a7:ee:00:3c:85:
92:de:25:21:76:98:b5:fd:7b:94:9e:d8:17:87:f8:
93:04:4a:86:c8:0b:f6:55:b3:d5:da:dc:67:68:3c:
12:bc:d7:59:85:d2:6d:71:37:e2:72:50:2a:17:e0:
ae:71:d8:50:ca:68:76:7c:5b:6a:ad:1c:05:90:de:
84:38:e9:56:7a:3f:fe:56:7f:73:63:71:be:20:cb:
9d:48:43:72:3b:62:2f:eb:5d:a0:85:f5:8f:b5:0a:
46:5e:c4:91:a8:39:77:7d:0a:8b:ff:24:e9:65:48:
07:03:07:87:ad:60:8f:60:64:b1:3c:7a:57:8f:29:
ed:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0F:10:6F:BC:36:EA:8B:01:F2:EA:46:FA:8A:BD:F3:C5:E6:30:F8
X509v3 Authority Key Identifier:
keyid:C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d4:cd:33:86:a5:a5:00:3c:92:49:d3:c5:34:1b:48:3e:3f:
6a:81:08:d0:bc:8e:d4:40:e0:e7:b6:31:eb:d6:56:5d:e1:e6:
fe:5e:3c:06:ed:9b:d1:2d:dd:71:f8:63:25:51:c4:95:bc:2e:
49:ef:41:3d:5b:9e:1f:4c:0e:75:b5:21:e9:1e:b4:18:84:55:
ce:3b:e8:45:e2:18:3d:39:9e:e0:aa:1b:90:26:51:38:d6:8f:
92:9d:39:cf:db:79:63:05:4d:15:8b:bf:6c:2e:25:fb:cc:5b:
2c:82:92:0c:00:b3:36:d1:e6:8e:1e:36:43:d0:2f:e5:a7:e2:
f8:11:3b:13:41:5e:c6:11:57:4c:ba:a9:29:89:70:8f:f4:25:
34:de:0a:23:61:88:dd:f3:54:cc:a0:66:a1:a3:98:07:ac:89:
b7:80:15:db:ba:b3:d9:77:e7:12:37:b6:34:42:be:66:3c:a8:
9f:49:87:6c:06:3a:7b:12:5b:b8:ed:5b:2a:ba:44:14:ee:1e:
92:0d:a3:77:0e:cd:c5:78:eb:0a:43:49:ef:da:d5:32:32:a5:
a2:d4:a2:e7:4e:49:36:87:0c:37:9e:88:7b:cd:51:24:06:57:
aa:72:e7:7b:96:9c:a7:15:38:cc:0a:ef:20:fa:44:47:50:a7:
a6:d3:6c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:43:43 2025 by rpki-client