Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: 5R4YUmO/w7Ce53Mmr9cuPDfd/4WE5pENRWN7aoTHNg0=
Subject key identifier: AE:EA:42:03:6A:2D:F6:1A:62:DC:1E:AF:B1:CD:5E:E5:E6:BB:CD:2F
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 0197684DE476005389169A57442231C6E840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 08:00:24 +0000
Manifest this update: Fri 13 Jun 2025 08:00:24 +0000
Manifest next update: Sat 14 Jun 2025 08:00:24 +0000
Files and hashes: 1: RMEEjlIMkQn-eVpgsZKUIgD2naA.roa (hash: ueUC7fhvm5el60XIzYyUHLJfoQdXhv3L7jiX08frMs4=)
2: pD7HPK_aW3QH3PPrNYbHeMKhGy4.roa (hash: GJeO7Q27YxmGksDjROFyKoncsMRwot0oI2b9og4LUSw=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: WxzDmu5r84UIOJ67IcaH/wvKyxhoCFd/NNBasunfq50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:e4:76:00:53:89:16:9a:57:44:22:31:c6:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Jun 13 08:00:24 2025 GMT
Not After : Jun 14 08:00:24 2025 GMT
Subject: CN=aeea42036a2df61a62dc1eafb1cd5ee5e6bbcd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:3b:67:32:70:5c:02:b6:4d:4c:a8:fd:cf:
41:9a:6f:00:b1:17:b0:4e:17:4a:21:5d:a6:91:b5:
74:37:18:0c:7f:37:a8:9f:8d:70:b0:24:15:f9:36:
cd:56:b4:68:ba:29:be:cc:76:e6:9e:0c:13:cd:c7:
9d:52:33:49:36:8f:4a:d4:61:3f:ba:7d:c7:07:4a:
80:96:aa:ce:0e:23:5f:ef:f8:83:87:eb:65:13:c9:
d2:02:e1:65:45:00:e2:b0:77:63:92:71:be:dd:f6:
37:81:77:fd:a1:90:59:70:1b:a2:7d:72:a7:ae:a6:
49:3d:92:9b:06:7b:57:18:36:ad:c0:cf:a6:24:76:
97:19:e1:c9:da:3d:9b:a5:ec:1c:95:43:ad:b8:7a:
5c:7d:04:c7:27:b4:28:ff:b5:50:33:82:47:28:9a:
3f:0e:1d:69:b2:1f:53:65:93:57:d8:0d:35:6a:e3:
c6:6e:a4:ed:19:1d:65:8f:29:74:83:1a:97:db:83:
3e:7e:f3:aa:92:a9:4e:87:38:46:ad:d8:6a:8d:ba:
10:c7:eb:14:98:62:c2:6a:9b:0e:bd:cd:73:d1:97:
41:df:2e:f6:9d:62:0d:b8:e2:21:0f:ac:6a:c6:66:
87:a2:cc:85:bd:16:e1:84:e6:fe:64:9e:b3:b2:7b:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EA:42:03:6A:2D:F6:1A:62:DC:1E:AF:B1:CD:5E:E5:E6:BB:CD:2F
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4e:ef:54:45:31:09:3c:ee:f6:9f:08:fe:1b:b5:0f:86:27:
f5:5f:87:9c:0b:91:c0:03:1a:be:5d:f2:5f:41:61:57:f7:47:
92:72:68:b6:0b:a1:f6:61:8a:2a:f6:2f:9b:68:7a:a6:d2:35:
bd:c9:3f:c7:6c:1f:7b:06:62:52:1e:81:18:a2:a3:a3:c3:41:
de:9d:4b:a5:d9:8a:83:f3:8e:42:d1:63:b4:c7:b8:e7:7a:06:
71:93:96:04:e6:22:7e:39:b4:36:2f:59:02:62:5a:28:2e:d6:
52:ad:59:3b:c4:0b:13:f5:1f:9b:74:b2:4a:38:aa:83:ef:2f:
9e:22:c3:4d:fd:77:49:64:a8:cd:bd:6c:c4:55:c3:81:76:10:
1a:ab:df:60:2d:c2:43:74:7c:c3:06:e5:95:a7:1f:79:c9:15:
ab:ac:ce:bc:71:6e:76:11:43:2f:2a:49:2a:57:7c:42:c7:a7:
2e:2c:15:6f:4d:d7:a8:56:81:fb:e9:e9:28:41:ce:9c:0e:4a:
9e:c4:72:9f:af:13:6b:47:db:7d:8e:40:c4:b6:e6:b3:5a:b9:
d0:8f:ff:97:5e:45:69:47:c0:c1:fc:7a:4e:bd:da:18:a1:40:
22:4a:59:25:a9:92:40:0f:34:d9:88:00:26:2d:79:8c:09:03:
fc:5f:aa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:02:38 2025 by rpki-client