Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: 6xgQRaM/20uCtDdXDzHn0IkZ5H6ZU9eYH1ujueNb6tE=
Subject key identifier: 64:DA:CB:1B:C4:46:7A:AF:DC:B7:B6:FC:74:12:DA:26:1B:FB:D0:17
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 01976961B028A12B7DBE4677CD7369B8FFF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 13:01:39 +0000
Manifest this update: Fri 13 Jun 2025 13:01:39 +0000
Manifest next update: Sat 14 Jun 2025 13:01:39 +0000
Files and hashes: 1: tnQ5odqGfmjwtl_VRpWmuxnJVZc.roa (hash: jWqwIWRjWImreknKrwhsqWkckPsMaq433dW/u+UVzTY=)
2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: DTnYUDIdwWEve6RPCm3BqrtWc2R2A98+JzxVjPlg+Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:b0:28:a1:2b:7d:be:46:77:cd:73:69:b8:ff:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: Jun 13 13:01:39 2025 GMT
Not After : Jun 14 13:01:39 2025 GMT
Subject: CN=64dacb1bc4467aafdcb7b6fc7412da261bfbd017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:0a:b0:e3:1c:b4:e8:2a:5c:da:91:c3:68:
1e:16:51:7f:7e:73:7d:9f:94:78:3a:c1:6a:09:98:
66:e0:96:d1:f6:47:b0:90:65:cb:5f:2d:28:ab:fa:
0c:af:f5:48:8a:84:ea:96:b1:9d:b1:ee:12:55:ac:
0c:ff:a3:9b:41:1e:9f:b4:53:67:5f:89:58:5b:36:
e2:10:9d:bb:4d:f6:ed:eb:4a:44:a1:df:86:67:40:
4e:20:73:bb:77:39:94:36:a4:ed:b8:6d:ea:01:84:
b4:60:81:cc:48:73:1e:47:71:f1:ba:89:26:8b:c7:
8a:52:50:35:a9:d9:f2:30:0a:e6:a5:bf:44:53:f2:
1c:c5:b9:93:9e:6e:a5:4d:bd:a7:99:d0:ed:e5:1b:
d3:8c:d5:80:85:68:51:5d:1e:b7:e4:13:44:e0:dc:
a6:1a:e7:1e:a0:d6:d4:11:51:4c:42:90:ec:de:24:
6f:af:89:08:c5:e8:bf:e3:9c:ff:96:92:ab:3b:c9:
67:6b:55:65:06:2b:b4:f9:77:21:cb:f6:f6:87:40:
01:41:d5:5c:f0:22:90:54:62:01:d2:18:d2:ec:97:
0b:0f:3a:07:61:a8:e6:a4:47:27:83:5b:ee:f1:65:
63:20:81:8e:e2:78:56:a2:3d:b4:f5:f7:76:1d:aa:
98:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DA:CB:1B:C4:46:7A:AF:DC:B7:B6:FC:74:12:DA:26:1B:FB:D0:17
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bd:1c:52:3a:bc:a3:6e:4a:ee:10:5f:43:72:3d:4e:dd:96:
d7:21:d2:63:07:86:b2:6e:07:a3:a8:1c:28:c0:13:db:35:5a:
50:bd:2a:e4:d9:7e:7d:c3:fe:eb:1b:c6:d5:11:7c:da:37:c7:
7d:b7:d0:4c:c1:88:ad:9f:11:1f:8c:02:9b:f3:87:ca:3f:f8:
38:44:cf:62:de:8e:26:ad:15:6f:3d:df:35:fc:47:b9:55:a5:
db:68:20:66:c9:d5:eb:c2:6d:c0:5f:af:1d:f1:8c:e1:0a:a8:
47:0a:17:66:6d:39:b8:47:0e:eb:e5:2a:06:b6:c4:bc:95:a9:
b8:0e:5e:3c:7a:63:83:75:b7:eb:d9:45:cf:0a:17:15:07:bf:
39:cd:f6:7b:77:27:35:5a:8a:8a:f3:bb:85:7c:9d:8b:bc:18:
b7:1f:5f:05:d7:38:43:95:b3:13:1b:1a:98:a0:d9:82:76:b6:
f2:0b:51:93:d1:95:58:93:56:0d:2e:a1:7c:9c:43:53:d8:8a:
27:03:31:c1:98:f8:39:b0:1d:c6:1e:7d:fb:bb:71:5b:91:98:
93:d6:78:bc:50:29:0a:f6:2a:e2:36:8d:ba:53:12:a8:3c:b2:
c0:a7:0b:12:20:2c:cd:ff:bc:26:23:ba:81:5a:74:be:2a:ba:
8c:92:5c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:24 2025 by rpki-client