Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
File: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft (raw, json)
Hash identifier: zM6MbH+GPDXj+Y5md3Yp1qRRItpgNij70j7LcSzl35U=
Subject key identifier: 10:01:A8:40:E6:0E:29:AE:0F:95:56:FF:68:B5:47:63:39:36:CD:E8
Authority key identifier: 5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
Certificate issuer: /CN=5f2be62be753ba9929355b4ce988bae12af7272a
Certificate serial: 019770E366BB47E6F080BC62B83E48A6DCD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
Manifest number: 04E9
Signing time: Sun 15 Jun 2025 00:00:40 +0000
Manifest this update: Sun 15 Jun 2025 00:00:40 +0000
Manifest next update: Mon 16 Jun 2025 00:00:40 +0000
Files and hashes: 1: ESLl-bZ97LqqEu-5c2cw2-HWsjE.roa (hash: Jxh/Q8xcc0uLDf1/zXrtw9NWQZKR5wMyKpRis33JWsQ=)
2: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl (hash: X7Zxnm3Fkpb3T6u8uh1o0XCebmWz/LJNJZDB1C1vQ2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:66:bb:47:e6:f0:80:bc:62:b8:3e:48:a6:dc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2be62be753ba9929355b4ce988bae12af7272a
Validity
Not Before: Jun 15 00:00:40 2025 GMT
Not After : Jun 16 00:00:40 2025 GMT
Subject: CN=1001a840e60e29ae0f9556ff68b547633936cde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:32:ce:a7:15:56:af:c6:d9:8d:21:a6:17:
54:e4:de:8a:0f:17:3c:d7:06:0f:38:eb:0f:64:dd:
f1:94:56:68:06:8f:98:5b:f3:e5:a4:08:d1:dd:66:
3a:a0:ee:ae:24:c8:7e:4e:3f:0d:e2:e7:fc:03:10:
ae:46:81:7c:e2:7a:dc:76:55:b6:0f:5f:a6:e7:1d:
13:5a:f0:76:84:10:c3:59:b2:a2:4f:0f:24:a6:60:
7d:46:35:de:54:a6:3a:b6:1b:aa:0b:2d:ab:6c:e6:
41:7a:09:2a:75:16:6e:f7:02:8d:d6:3c:85:67:51:
30:10:c4:4a:1b:4e:41:43:8b:85:f1:c3:bb:51:46:
3e:fa:2f:d4:c1:db:59:0e:bf:11:e8:38:85:45:11:
61:bb:b3:be:66:11:05:92:f1:ee:08:cc:fb:ec:53:
b3:08:9d:80:c9:65:0e:5a:b7:34:5c:db:71:52:ff:
99:95:7a:3f:59:a8:0f:a0:42:fb:31:5b:2d:7f:ad:
f2:df:5c:00:05:3d:95:f6:bf:77:03:6a:a5:2b:a9:
a4:c9:9c:2f:2d:fd:e8:24:cc:e2:97:c6:3b:9c:f7:
57:c0:0d:61:b9:ac:81:3b:f8:16:2a:f1:47:07:2e:
e9:81:b6:74:77:6b:77:2a:df:d4:69:38:2a:ab:4a:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:01:A8:40:E6:0E:29:AE:0F:95:56:FF:68:B5:47:63:39:36:CD:E8
X509v3 Authority Key Identifier:
keyid:5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:52:63:34:62:53:f4:e3:11:ae:59:ab:12:7b:79:60:27:4a:
8b:f3:19:65:d5:21:45:be:49:43:b1:c8:88:9c:2c:ee:08:cd:
72:e8:e1:59:eb:62:1d:f5:34:19:c8:b5:80:72:54:d5:3a:ab:
03:b8:7a:2a:ef:43:a2:15:83:b6:d1:6b:d0:54:15:c7:0a:90:
03:da:9e:ef:3e:3b:d2:aa:f1:09:c8:51:d5:51:d4:ad:2b:78:
3b:0e:c1:aa:61:6a:92:5c:f1:b4:d9:7c:5b:c7:ba:58:d5:d8:
b4:7d:8b:c0:d4:59:4d:3e:43:10:36:ac:68:7c:77:93:f1:ea:
ed:18:ec:63:b3:32:e6:3c:0d:3c:89:07:bb:cc:2a:fa:3c:83:
7d:27:85:d5:61:3d:00:5f:95:4c:c1:04:a4:d9:f3:24:88:3d:
03:05:47:c3:6e:55:21:44:69:4f:ed:2f:2e:3f:3b:bd:88:51:
81:5f:4c:41:8b:7b:12:74:18:97:93:e0:bb:2f:9d:df:5b:29:
03:0f:9d:2d:97:6b:4f:a8:23:4e:61:56:86:ee:69:d9:6e:bd:
36:0b:6e:01:a5:26:ea:15:c5:1e:9c:4e:c3:66:e7:ae:63:7b:
f0:b2:04:59:cb:3a:da:9f:09:ea:b2:ed:c1:c7:9a:22:a8:17:
51:05:f4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:45 2025 by rpki-client