Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: or09Bo9vsK7y7mnJhUK35nrjxoa+FvyUUL96um/bQPU=
Subject key identifier: E3:97:66:3C:72:7F:DB:1F:73:45:57:82:18:B4:8F:98:A3:67:BE:FB
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 0197900041EAC3D7C0838B487EC5B59065DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 1535
Signing time: Sat 21 Jun 2025 01:00:25 +0000
Manifest this update: Sat 21 Jun 2025 01:00:25 +0000
Manifest next update: Sun 22 Jun 2025 01:00:25 +0000
Files and hashes: 1: MPJbxNfI4E3-o9R3b5LoavuNf_M.roa (hash: YmpwW40yFr+eOmaR9up2PE3Zd5XCNeKEz4dO44qxY0o=)
2: dRZw3Usb2yz3p3d9m-6XMO158wI.roa (hash: JliEihs4bCSiKbM0gL/JHcl4AanPExI+3YUAO/UsNWk=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: kaNEJOGcw/+wpBQqVnDkuoVeEVOyumk3KWE1o7tx0s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:90:00:41:ea:c3:d7:c0:83:8b:48:7e:c5:b5:90:65:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Jun 21 01:00:25 2025 GMT
Not After : Jun 22 01:00:25 2025 GMT
Subject: CN=e397663c727fdb1f7345578218b48f98a367befb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:c1:e1:2b:83:70:29:d7:62:89:bb:ae:78:
35:ac:a4:f6:4d:fd:ff:e3:01:1f:48:bd:49:eb:a2:
d3:01:bf:a9:17:77:e1:64:a2:ee:c7:45:60:1d:0a:
cc:2b:5b:9a:d5:4b:16:b3:c5:36:cd:35:15:ba:ac:
77:99:aa:33:fb:30:03:a9:da:7f:67:64:2c:53:e8:
f8:c4:e6:33:eb:e9:88:cd:21:8d:3a:b4:26:f0:03:
35:d4:d5:19:fc:d4:b9:fc:40:36:3f:f8:d9:ec:2f:
cc:b3:bf:3b:d6:d5:3e:4d:45:eb:8b:1c:53:dd:a6:
a3:1b:61:ea:a0:96:76:83:09:c3:d9:49:b1:b2:c9:
98:93:68:50:94:79:e8:7d:85:4b:10:d6:95:3e:73:
e0:59:b5:dd:28:1d:cd:64:cb:1f:94:81:24:a0:a5:
85:a8:34:76:80:07:d5:bd:99:f8:be:61:f0:0a:3c:
18:16:96:1f:3c:88:d6:e9:55:c4:65:08:83:26:9a:
9a:65:43:86:9e:3e:26:7f:1e:6c:f2:a6:3f:06:2f:
b3:fc:df:c9:1c:c5:66:7b:11:73:b3:ab:78:1e:e4:
8c:ac:4a:26:de:17:35:1f:26:41:8e:2b:be:f8:0b:
9e:d9:6d:b6:e4:5e:b6:82:77:6e:2d:00:f4:f0:0b:
34:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:97:66:3C:72:7F:DB:1F:73:45:57:82:18:B4:8F:98:A3:67:BE:FB
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6a:60:10:f3:44:31:f1:fe:4e:72:05:b6:e0:80:58:a9:11:
fb:36:c8:40:91:95:6c:dc:95:49:5e:e5:26:ed:16:e8:93:ae:
7b:73:1a:a1:0b:49:ba:a2:3a:3c:3a:2d:0f:7e:02:45:c3:86:
ee:06:c0:89:1d:0c:e8:38:a7:78:1c:87:0b:c1:3a:6c:a4:95:
66:93:7c:f4:ec:55:f7:73:59:2d:13:13:50:ce:c3:bc:37:85:
ea:ca:cc:b9:53:c8:44:56:25:10:ec:ea:dd:a7:cf:40:a9:75:
0a:43:ad:8d:36:40:b3:e8:ad:38:77:a7:0a:0a:80:21:53:76:
5a:e4:cd:59:3c:70:18:a6:66:45:59:8d:20:f1:c4:91:79:e0:
ab:82:81:51:2d:47:78:30:0f:2b:7e:a8:0c:19:2d:db:ea:c0:
45:d4:a3:bf:5c:e5:94:77:a9:0b:42:47:3c:a8:80:bc:0d:e4:
25:e2:b2:8c:7e:89:e0:a9:e2:68:36:ad:4a:97:ab:01:ff:de:
ea:f5:58:cc:2f:71:c5:a5:bc:73:bf:77:9f:03:9a:c1:79:e0:
83:e9:b7:ec:05:c7:f6:59:8a:41:31:77:c2:c5:fa:47:4c:c0:
cf:9c:38:f7:29:e4:b7:ec:5e:f0:18:5c:69:d4:07:d5:54:23:
20:ae:67:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 11:17:18 2025 by rpki-client