Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
File: xZKgYJDwFpQNMesbCbrhLZSxlbA.mft (raw, json)
Hash identifier: 9wmPX+17gHLYqtgbYz3MPCpV05AKgqcGHrPO5pIM08M=
Subject key identifier: F3:F7:E3:FF:8A:0D:3B:0E:8F:8F:90:34:54:7B:DE:14:8F:AB:90:85
Authority key identifier: C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
Certificate issuer: /CN=c592a06090f016940d31eb1b09bae12d94b195b0
Certificate serial: 01976F9A719C92760C917D47AC59CC8C0FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
Manifest number: 0470
Signing time: Sat 14 Jun 2025 18:01:21 +0000
Manifest this update: Sat 14 Jun 2025 18:01:21 +0000
Manifest next update: Sun 15 Jun 2025 18:01:21 +0000
Files and hashes: 1: tOD7ZPqas8UpTT4bdLzx0MJD5rk.roa (hash: k/eXxf7557SFB+l+Q/mWhChu1kZsTZ07A3b0mG1jAsA=)
2: xZKgYJDwFpQNMesbCbrhLZSxlbA.crl (hash: 2X2QjwSBBpdb8NWQ4LNUdfEF3dUjLj/wBAKNQVCTbBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:71:9c:92:76:0c:91:7d:47:ac:59:cc:8c:0f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592a06090f016940d31eb1b09bae12d94b195b0
Validity
Not Before: Jun 14 18:01:21 2025 GMT
Not After : Jun 15 18:01:21 2025 GMT
Subject: CN=f3f7e3ff8a0d3b0e8f8f9034547bde148fab9085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5d:79:a9:fd:00:f8:89:f5:bd:53:60:be:9e:
97:a7:a2:2e:54:81:a8:34:5f:00:20:87:bf:0a:3e:
07:a8:1f:2e:0a:cd:f9:62:57:57:49:35:6c:67:bf:
68:e2:5e:31:fa:f9:09:78:ea:bf:ad:03:83:0b:63:
d3:ef:57:4a:84:5a:cc:0b:ab:b9:97:04:88:cb:eb:
68:9a:09:e1:c5:83:41:6a:df:52:4a:3c:3e:c6:7e:
da:91:51:15:dd:c2:db:63:66:12:c9:14:65:02:ae:
a4:26:0a:90:ea:98:84:63:4b:cc:43:d1:4c:77:7c:
35:25:9e:fd:f4:7f:19:2f:78:e1:8e:ad:d5:8b:fc:
20:cd:b7:ea:7d:a6:33:0f:a5:27:f2:31:40:89:50:
5b:6a:5e:2a:0b:26:8e:18:71:95:37:4c:fd:02:cd:
d0:69:5d:4e:1a:34:b4:03:6c:9d:61:70:d5:62:38:
fe:f3:1b:b2:bb:68:3b:65:b8:b0:65:84:78:ec:e7:
b2:d4:a8:00:6d:84:03:cb:95:23:c9:23:57:e5:d0:
88:c7:ad:b1:03:e9:a8:29:58:89:d3:d2:19:04:82:
a9:ed:1f:50:b5:00:54:de:f2:3d:34:08:fa:8c:44:
be:93:c7:bd:e9:b5:6b:c3:2c:53:08:87:c0:4a:75:
28:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F7:E3:FF:8A:0D:3B:0E:8F:8F:90:34:54:7B:DE:14:8F:AB:90:85
X509v3 Authority Key Identifier:
keyid:C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e1:d8:04:12:f5:bb:66:5c:51:64:c6:e8:aa:06:52:bb:3c:
16:b5:2b:11:5b:d9:a1:b5:a3:e1:f8:da:bd:11:be:a3:6d:fa:
38:e2:3f:5f:24:d9:7d:e7:ba:c4:3c:27:52:cc:f0:c5:4d:df:
c4:c1:fb:51:63:4e:b4:09:37:42:c4:91:5b:ce:36:7b:9c:64:
4d:92:a7:f0:a8:13:33:a5:42:76:7a:b7:7c:a7:7c:b1:9a:58:
21:ef:92:00:33:83:7e:75:66:49:fd:7b:84:b1:db:14:39:94:
06:70:60:69:67:a6:fb:fe:1c:17:69:bb:50:d0:fc:5f:58:e7:
24:b5:18:09:44:c0:ae:9f:01:a4:e0:c9:22:0b:33:ce:49:c1:
4e:78:75:d3:f3:cc:0a:ca:f7:79:1e:0a:e0:ee:69:dd:95:44:
7c:4c:ed:28:c4:2c:cc:f5:c6:1f:57:4b:4e:cd:a6:82:5a:0a:
29:62:82:92:61:8f:3d:2e:63:ef:0c:b5:98:dc:e1:30:dd:03:
07:ec:42:61:16:1d:69:84:ce:e6:15:0a:1e:24:0a:af:11:ad:
05:46:24:1a:f6:3a:2d:f9:a1:02:5f:e3:e0:ec:b2:81:c3:1e:
ca:e8:c4:cc:91:77:df:1a:04:1e:e5:76:81:f8:2d:fa:7e:35:
21:e7:2c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:13:28 2025 by rpki-client