Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
File: xJkOwgER9C-2LzmoHHOSqSGVW_I.mft (raw, json)
Hash identifier: zSyLY8FkwZJowWzVWqnLpF/Ni3XESUxY4+tghiSM53M=
Subject key identifier: 76:D1:9A:17:44:60:D3:4D:87:C5:45:B9:93:44:B6:E8:DA:42:E6:6C
Authority key identifier: C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2
Certificate issuer: /CN=c4990ec20111f42fb62f39a81c7392a921955bf2
Certificate serial: 0197775321501DEFD359825E6D886203B154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
Manifest number: 01F5
Signing time: Mon 16 Jun 2025 06:00:26 +0000
Manifest this update: Mon 16 Jun 2025 06:00:26 +0000
Manifest next update: Tue 17 Jun 2025 06:00:26 +0000
Files and hashes: 1: S6SgkEKXXupg9NGyg85ew2MKuNo.roa (hash: Ccy6wkPiSmvGfzLUcrIC/arlCjWDtB/tLTVQ150opBk=)
2: xJkOwgER9C-2LzmoHHOSqSGVW_I.crl (hash: 5Us0EOx4Ph5noX+rdju9NFyI9tnAG4KqwWtCo4z/Jp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:53:21:50:1d:ef:d3:59:82:5e:6d:88:62:03:b1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4990ec20111f42fb62f39a81c7392a921955bf2
Validity
Not Before: Jun 16 06:00:26 2025 GMT
Not After : Jun 17 06:00:26 2025 GMT
Subject: CN=76d19a174460d34d87c545b99344b6e8da42e66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:02:5f:04:2c:46:28:15:5e:f0:c5:d2:69:
b0:18:76:b6:02:40:ea:13:48:15:f9:f0:d3:34:cb:
22:dd:a3:2d:99:13:cf:2d:8c:21:63:4d:f5:fc:2a:
f0:c6:20:e6:38:2d:92:52:93:9e:9e:03:9b:1c:2a:
63:43:f1:93:ed:17:cb:53:03:59:fb:6a:b2:29:39:
fe:2c:e8:34:a3:e2:d0:ff:6e:6d:16:c5:b2:78:a2:
0f:db:38:7f:1e:22:f7:54:3c:f2:b0:59:72:9f:57:
45:0c:60:2e:69:39:94:dc:c5:a2:26:fe:d5:dc:8d:
50:0e:ad:a0:0a:30:e6:ad:25:b8:c4:8e:62:00:17:
5a:69:82:0b:24:7f:b2:2c:8d:58:18:8c:be:b5:40:
71:66:09:2d:17:1b:17:f1:6f:48:f7:c4:96:47:cd:
d3:d2:d0:09:99:b1:85:1f:f2:f1:6b:b8:b7:03:63:
9f:91:16:71:79:e8:0c:d2:f0:12:d9:e7:6b:f6:f1:
4b:5d:e6:df:49:9e:95:a6:f9:c4:4f:3f:ef:23:36:
79:d0:5e:f0:f6:c0:96:38:83:d4:ee:8a:3b:94:28:
a1:a5:6e:ad:03:6a:08:9e:c4:ab:7c:ef:95:1d:a5:
dd:0d:94:84:26:f0:95:30:ca:61:2a:c2:55:50:ee:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D1:9A:17:44:60:D3:4D:87:C5:45:B9:93:44:B6:E8:DA:42:E6:6C
X509v3 Authority Key Identifier:
keyid:C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:33:e9:f3:72:aa:b5:d9:ba:8d:b8:15:6c:8c:5b:5a:e7:04:
2c:be:69:15:b7:f4:b6:33:65:2b:19:f1:58:e2:23:ec:6e:37:
cb:41:39:26:5d:d2:0b:1a:0a:2c:6e:6d:c9:20:8d:70:8a:7c:
cd:69:81:dc:70:1c:8f:d1:96:34:2d:ee:e6:20:16:c6:1b:d4:
32:13:37:02:67:bb:1e:30:8a:48:8f:02:36:42:34:d6:95:dc:
36:f1:2d:09:61:b5:e8:9b:20:b9:b6:17:75:43:f9:66:8c:38:
2b:5f:2e:02:05:b1:3c:f3:43:cf:34:08:6e:89:06:13:fb:3e:
4b:05:e7:7b:ed:06:1a:05:75:8e:b7:48:6f:ff:5f:80:70:4f:
73:b2:99:6a:0d:69:96:2d:8d:27:c9:38:6b:3e:10:c0:5c:42:
93:91:aa:65:03:96:b9:d5:70:a9:b0:c2:b7:18:6a:ce:09:72:
31:9c:8f:09:17:72:c9:45:6f:ec:ee:8a:cd:dd:ff:85:b9:4c:
c8:83:f0:6f:df:17:de:36:55:b8:3b:ab:8c:15:18:bd:6c:72:
8b:de:6a:bf:a0:d1:c2:57:4e:68:49:64:f1:95:0e:72:a8:85:
5a:fe:4e:79:82:b2:93:80:d3:72:3a:c7:29:4d:1d:e0:e5:3a:
37:64:d9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:22:51 2025 by rpki-client