Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: 9WPdSmgnCHTpKYRqDIRSgMwi1mCNbCMCfNbnJ/+wyKI=
Subject key identifier: 69:4A:90:32:F7:A9:E1:C8:2F:1E:AB:E9:C7:FD:E8:1F:59:61:E3:64
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 01976BF3FDB0EDE4415B982F17E0B914A2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 1368
Signing time: Sat 14 Jun 2025 01:00:41 +0000
Manifest this update: Sat 14 Jun 2025 01:00:41 +0000
Manifest next update: Sun 15 Jun 2025 01:00:41 +0000
Files and hashes: 1: 1-odAb-HXEiGLPx5y_PADnZMBf0g.roa (hash: 4z0B6lGqXvXr1EDmabK3iy+SlaX1WPh7Y1Hx0zBd0iM=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: oEGLK7rUk9AXEAP1rz9TDXJjIwkSzrobmfp7wqipzVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:fd:b0:ed:e4:41:5b:98:2f:17:e0:b9:14:a2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Jun 14 01:00:41 2025 GMT
Not After : Jun 15 01:00:41 2025 GMT
Subject: CN=694a9032f7a9e1c82f1eabe9c7fde81f5961e364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:bb:7a:de:5c:1e:22:d5:1a:d7:7c:74:94:
cd:a5:51:fa:39:5b:27:c9:39:e0:79:73:80:8a:f3:
17:84:70:02:59:0b:5a:b2:d3:5a:02:ed:b4:64:b4:
28:72:45:a1:3f:f9:19:58:98:87:a5:35:b7:43:46:
14:4e:22:a1:a4:4b:2d:59:7e:7c:e5:cb:e3:9d:04:
3c:56:06:f8:a9:10:11:ab:7b:08:d0:fa:f7:a5:ea:
f0:f9:39:29:3f:8e:8c:15:7c:6c:e2:2b:1e:90:a1:
c9:9c:37:35:2f:58:bb:51:8e:97:9a:a8:05:7d:b7:
d5:a3:24:a1:87:57:94:24:0a:e7:06:a0:86:61:af:
fe:aa:19:ae:4a:a0:42:d9:2e:86:8c:38:da:58:48:
90:fd:b8:a2:aa:2d:e4:16:49:2c:18:4d:ea:b5:6c:
f1:df:92:6f:d9:91:e5:d7:8a:56:a5:f3:e8:1c:92:
75:a6:38:1f:21:40:66:29:da:71:3f:de:69:fa:b2:
34:95:24:76:03:84:d1:70:e3:9a:fc:4a:29:5f:91:
61:b5:32:b8:84:88:f8:32:fd:ea:6f:1c:79:dc:39:
84:3c:f4:20:f3:57:f6:e7:b9:e3:7f:9e:34:ae:39:
cc:d1:40:38:13:f0:a7:f1:33:30:cc:92:72:2a:60:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4A:90:32:F7:A9:E1:C8:2F:1E:AB:E9:C7:FD:E8:1F:59:61:E3:64
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:94:5a:7c:a8:27:3f:c2:22:ce:ba:40:ae:2f:cf:70:d7:95:
52:ae:76:e6:d8:2e:57:34:43:02:93:00:d8:18:ac:c4:75:44:
52:b8:96:f4:48:8a:ab:7d:8b:ab:1a:c9:e5:bf:29:1a:d1:72:
fa:49:7b:19:4a:cd:61:9e:8a:94:3d:07:67:6e:d2:2c:4f:70:
cc:59:0a:cf:33:de:92:c2:57:12:92:b4:6b:e6:32:b1:ae:73:
c7:bc:a4:81:c7:ab:d8:df:bf:cb:36:c6:69:80:bf:7c:f6:e9:
51:c1:ab:c2:a4:f4:67:e5:ee:f9:eb:ed:86:35:11:83:97:97:
5d:6b:fb:45:04:33:6b:5d:3b:e3:3b:e0:9c:7f:eb:24:04:6b:
5a:84:37:0d:e8:23:fd:49:dc:89:16:f5:65:f3:ba:84:21:27:
33:b8:47:17:ef:5f:b9:c1:9e:f8:91:54:a2:16:b4:a6:ce:7a:
7e:90:29:8a:ca:f5:7a:27:69:91:2d:b0:b8:4f:47:dd:04:3a:
b9:51:dc:ea:09:25:18:f6:7b:d3:cf:55:d3:a0:04:35:80:b2:
d5:3e:df:50:85:a2:5d:c3:3b:ba:7a:2a:92:e9:db:dc:28:7e:
5b:50:c7:86:c8:b0:ff:c0:76:69:96:db:89:88:e0:b8:d2:5c:
4e:f6:2c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:13:39 2025 by rpki-client