Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File: xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier: A8wnW98zFHl4VXEFkLaesV81teXeqLmphiXvZUSfPJU=
Subject key identifier: B4:CC:88:66:F5:FA:14:9E:13:3D:4B:16:9E:9C:0B:4B:30:4A:B1:47
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 01976E871D43054E7BD17E2D5A211E718645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 13:00:37 +0000
Manifest this update: Sat 14 Jun 2025 13:00:37 +0000
Manifest next update: Sun 15 Jun 2025 13:00:37 +0000
Files and hashes: 1: CzBENFpROta46Ahh1b9jdj6JXrk.roa (hash: L4tfWnC6wyVnCN7M94V7ANHnHcbMgExMDsrJgBJJe38=)
2: hm1hnmLqRJSfCnblBglQ9G9cJ5g.roa (hash: OUoiUUvLJ3F3/8+NwaVnz5Bp6R2hHKUkPzZNLdBZ/Gg=)
3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: Lc0St7m9Eh2wcn7aiL81WN/l26TpAvBCtsunhfvUdI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:1d:43:05:4e:7b:d1:7e:2d:5a:21:1e:71:86:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Jun 14 13:00:37 2025 GMT
Not After : Jun 15 13:00:37 2025 GMT
Subject: CN=b4cc8866f5fa149e133d4b169e9c0b4b304ab147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:4d:3b:9c:98:79:bd:a3:3d:14:a1:2a:26:
28:43:82:c8:ab:a9:bf:ed:06:82:4b:a2:f1:60:0b:
7b:9d:5c:4f:e4:d5:eb:c0:ba:6f:ef:ed:13:b0:17:
40:34:19:a4:ac:0d:ce:61:18:61:b4:41:e6:8e:12:
59:bd:8a:d1:29:85:3c:8a:01:b1:f5:ab:6b:1b:68:
a8:d0:e3:9a:2e:76:33:76:74:26:7a:0a:16:11:ff:
4a:ec:64:81:e6:1e:9b:0b:11:e1:10:d1:a4:ba:5c:
ec:b5:e8:bc:dc:3b:87:79:f5:af:17:c0:e8:c1:2d:
22:8a:a6:8a:e0:62:a8:cd:c9:fa:33:d0:e7:dd:63:
b5:01:25:5c:8d:3e:8a:94:5f:40:95:73:ae:4d:14:
71:0b:e7:d4:d8:d9:3e:f5:60:75:fc:9b:5e:4d:b7:
5d:da:8e:c7:0a:33:26:2c:03:65:50:df:64:43:0e:
87:49:fe:b9:c8:0a:2f:d3:e8:bf:24:ae:20:f1:d4:
a7:a5:2b:d4:35:cb:95:22:70:a9:bd:e9:7c:6a:f6:
da:35:86:13:df:ec:2a:e2:a6:49:02:08:d3:85:d3:
56:21:ec:56:d4:d2:cb:17:df:42:f3:c6:bc:55:a2:
b2:f4:ba:de:3a:b3:4e:6b:81:db:49:5c:37:d0:97:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CC:88:66:F5:FA:14:9E:13:3D:4B:16:9E:9C:0B:4B:30:4A:B1:47
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4b:a8:62:0e:84:5d:ec:1e:d5:ae:f6:71:8f:90:09:b7:7a:
69:87:af:57:2a:f3:b3:33:b4:9c:0b:2c:16:01:db:07:e3:cf:
5d:08:f1:6b:00:34:bc:1f:17:ca:3e:aa:1d:6c:b5:cd:29:d8:
d9:5c:91:31:c4:36:d8:b1:de:e7:e6:ea:4e:87:53:6e:2e:a8:
18:8e:34:9d:7c:b3:0f:36:ea:a4:88:b6:f5:27:1e:e3:e3:39:
0f:61:3c:b7:9d:e9:c6:23:20:e2:da:7d:29:87:73:34:b9:ab:
33:50:0e:96:95:ca:5a:9b:12:cb:b7:92:f3:3f:d8:31:f7:25:
83:44:e4:2a:76:2a:f1:95:01:de:2d:1e:63:ad:41:55:41:85:
42:1a:e4:7f:7b:80:c4:78:ce:13:53:a8:2f:95:ff:f8:2f:d6:
9e:68:16:2a:da:7f:d6:0c:6b:8c:f1:8a:26:82:06:6a:25:38:
bd:f8:87:ea:39:c7:a5:c4:00:c8:57:b8:87:42:1e:f1:45:0b:
6e:78:b7:66:a6:79:5c:2e:4a:a0:1a:38:73:bd:bf:36:64:35:
01:76:a8:46:bb:92:8a:50:78:e3:2d:33:86:7b:98:6a:90:73:
7e:85:08:f5:02:a6:77:82:73:0a:59:64:01:db:e2:25:0e:b4:
2d:3c:f2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:49:36 2025 by rpki-client