Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier: 7vh8K0ENB8Dyf05oaoyzRBoEr6Jw+ekti+LuUN0S0ek=
Subject key identifier: A6:14:F3:89:13:88:DC:A9:BB:31:55:5E:C5:11:03:54:0F:DA:5B:69
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial: 01977677BEB3AB5ABBD9D1506F8852CD65A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number: 0AF6
Signing time: Mon 16 Jun 2025 02:00:48 +0000
Manifest this update: Mon 16 Jun 2025 02:00:48 +0000
Manifest next update: Tue 17 Jun 2025 02:00:48 +0000
Files and hashes: 1: kF7mXs8Y_UB13udEpA0xGHCjAro.roa (hash: /PhN9JbWE0fzSWBg1QkZrpWYEK+tJrQFKSHOqe1g6qY=)
2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: 3GhrRPYwy4MqFa2451c8SpVSfiXvqfucu1w46XZrOnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:77:be:b3:ab:5a:bb:d9:d1:50:6f:88:52:cd:65:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Validity
Not Before: Jun 16 02:00:48 2025 GMT
Not After : Jun 17 02:00:48 2025 GMT
Subject: CN=a614f3891388dca9bb31555ec51103540fda5b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:91:0a:fc:51:d5:31:b0:0d:0b:e5:29:f1:5a:
4e:1b:be:f9:24:de:8b:15:80:42:7b:08:34:c1:23:
c5:c5:e1:9c:2d:e7:e8:a6:27:8f:8d:4e:7e:80:ad:
94:68:6f:f8:f2:74:0c:0c:09:60:b0:bc:21:5e:01:
c5:68:20:af:86:55:a3:20:c8:c6:d9:34:2e:96:fb:
1e:be:99:33:dc:eb:09:9f:e7:0f:85:ad:59:47:62:
26:42:ad:50:4c:54:d2:98:00:8d:c3:e0:c3:99:96:
e6:79:14:d7:69:14:15:83:32:8a:2e:b4:a9:1c:51:
68:bc:ce:1d:03:00:18:08:06:08:2b:38:6f:b0:fe:
1d:34:7f:af:85:c4:e6:2d:95:f6:6f:9a:64:96:e9:
90:97:8a:7c:d7:3a:bb:ac:e0:e5:b4:a6:86:ca:7f:
cb:3a:15:ef:21:7a:44:da:39:a8:90:b2:bd:50:a9:
0a:dd:1c:b8:04:42:22:ed:18:8e:40:d8:48:19:01:
9e:6f:87:51:99:54:ad:9c:ec:77:d3:e3:35:ec:a5:
b9:af:84:97:c8:b6:bd:81:f2:09:e2:80:7d:f6:5e:
6f:e5:55:97:12:15:06:8f:72:00:1a:ad:bf:2f:f0:
d8:fa:46:7f:15:11:f1:3a:11:84:e1:43:fb:ff:59:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:14:F3:89:13:88:DC:A9:BB:31:55:5E:C5:11:03:54:0F:DA:5B:69
X509v3 Authority Key Identifier:
keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:99:08:16:d2:de:14:db:d9:f1:c9:17:5f:56:b7:45:24:e0:
50:c6:24:02:91:aa:04:e1:85:8e:35:e4:02:0a:6b:61:55:4d:
bd:a0:a1:b7:93:8d:ea:04:7a:97:d1:39:e6:77:c0:28:a7:4c:
3e:5e:e6:01:48:e0:71:55:47:c7:74:ea:12:cb:5b:af:b7:8b:
a7:83:28:cf:25:2e:88:6e:45:d9:b9:94:5a:9c:71:22:95:ac:
72:f5:a6:39:e8:45:02:d0:09:b3:de:bd:5c:81:b5:9e:18:56:
25:da:09:b5:85:52:2a:7e:04:15:3f:6f:91:1c:77:10:eb:46:
cd:b1:4f:36:ea:07:db:6b:c5:1f:d4:ae:26:0f:8b:87:26:ae:
cd:4d:77:5e:e4:d8:03:28:ab:01:ee:1f:5c:12:ad:f4:a4:ce:
03:38:ba:a5:44:ad:31:45:40:7a:d9:ec:e4:b4:1c:fb:21:8a:
e7:e4:b2:51:d1:c0:4d:2f:6e:3e:65:ce:29:68:d7:f7:27:46:
88:49:3c:ea:9c:29:32:7b:5b:76:6c:7a:b9:b7:5c:da:01:79:
28:4e:c7:40:70:6a:25:64:28:7b:f1:2a:36:a5:10:a9:20:f0:
67:97:5f:93:37:83:ef:9c:58:54:e1:e1:f3:c0:36:5e:7d:56:
a6:3c:b0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:28:40 2025 by rpki-client