Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
File: XTcKSLWfuBFJXxHElzRILyKxo5I.mft (raw, json)
Hash identifier: jMqXTl1egU6bAyqpkOFlzTgWZkUerjqeemOKz40nxpA=
Subject key identifier: 7B:AD:CA:DE:0F:6B:8C:EC:16:C8:3C:B3:26:D1:A0:6E:6B:45:A3:2F
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 019768BBB5E2A65DA25FCB7C44A048568F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
Manifest number: 1295
Signing time: Fri 13 Jun 2025 10:00:21 +0000
Manifest this update: Fri 13 Jun 2025 10:00:21 +0000
Manifest next update: Sat 14 Jun 2025 10:00:21 +0000
Files and hashes: 1: NKYWlz4gwZY4JXbw2fZ-33Yiq7Q.roa (hash: 78EN8i32FjxMTLLdcIXwd9Vb1kdj7OWCE2WX2/B4rLA=)
2: VUj2jDG1P5mpu3G51mRFUhrIbU4.roa (hash: twr8z4nqYemreBGHT9Kr4AfrcVcZYqpeai7rZry08Us=)
3: XTcKSLWfuBFJXxHElzRILyKxo5I.crl (hash: wjuyfsgFFH3Go2yRuajElj9K0nQG+1+btiUt+nI41+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:b5:e2:a6:5d:a2:5f:cb:7c:44:a0:48:56:8f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: Jun 13 10:00:21 2025 GMT
Not After : Jun 14 10:00:21 2025 GMT
Subject: CN=7badcade0f6b8cec16c83cb326d1a06e6b45a32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:3d:6c:59:3c:3a:e2:00:3f:c4:7f:f8:7d:
87:41:47:fa:9f:ca:06:58:79:1f:3d:ed:81:6c:b9:
df:b2:56:97:03:27:38:00:11:c8:06:84:5d:8d:16:
4e:df:5c:99:6f:ab:b2:e5:29:d7:10:84:91:06:7f:
8e:d3:d8:00:57:99:0e:3e:42:7c:c8:58:12:f2:24:
35:b4:e3:7b:30:cb:2a:f9:25:d1:bb:83:eb:84:ce:
8d:eb:e0:af:ad:d4:72:59:68:5d:43:3d:de:d3:1a:
99:ba:04:9e:33:97:fd:7a:6b:73:bd:fc:f6:36:dc:
8a:b9:13:13:41:20:19:59:2e:ed:c7:de:42:7a:ca:
97:cc:e3:f8:5d:0e:0d:f5:a7:d2:dd:07:e0:5a:33:
5c:27:9d:15:ab:95:03:b0:85:21:d8:26:e7:88:74:
c0:52:76:17:09:97:c2:ab:89:6b:50:0f:f0:37:7d:
79:15:a7:ea:1a:d0:d8:52:d3:93:71:22:7b:21:16:
16:b5:45:d0:45:27:b3:40:21:f8:ae:70:44:97:e5:
34:9b:9c:b4:85:16:27:e2:48:f6:43:41:47:19:57:
3e:64:6a:c5:af:ae:1d:6f:a1:0e:72:17:71:6a:7a:
8a:3e:8c:33:18:32:16:2a:11:87:82:35:42:51:c9:
2c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AD:CA:DE:0F:6B:8C:EC:16:C8:3C:B3:26:D1:A0:6E:6B:45:A3:2F
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:05:82:d0:4c:91:ba:f3:60:bb:f2:b1:bf:3d:75:71:61:9b:
9a:0b:ad:cc:b7:76:20:b4:f8:e0:aa:7a:eb:38:b5:94:ef:e1:
c4:99:ff:73:61:93:5b:f8:37:67:64:47:1e:d2:9d:b9:a3:24:
0a:e9:80:7e:7a:f7:5e:67:86:62:e4:78:6b:53:50:89:94:db:
19:a3:38:73:e3:df:11:93:ab:37:fe:19:bb:cb:49:e5:0a:88:
4d:9d:3c:b7:4b:da:a4:7d:0f:4f:7a:f8:7f:80:67:2d:87:fd:
78:d9:44:32:e1:ec:f0:8f:a3:a1:f9:9b:d6:20:9a:c8:16:52:
f0:8d:b3:5c:bc:7f:c4:9c:35:a4:8e:92:db:5e:70:66:29:a7:
b2:e0:ea:c7:87:ca:4e:13:04:43:b6:19:68:7f:9e:ab:2c:27:
17:79:a2:c6:39:dc:a5:0e:48:f7:f1:c0:47:f9:fa:7a:56:17:
fb:37:dc:94:cc:76:1a:60:ba:3e:e8:28:00:78:56:7b:63:dc:
8c:35:71:cf:78:f5:bc:97:9a:11:96:06:95:fb:cd:69:95:07:
f6:5e:2a:17:95:ff:85:25:07:d4:22:24:ad:e5:47:9e:1c:02:
49:a0:a3:da:4c:e0:4e:85:be:c7:39:e0:3e:44:39:b5:11:fd:
ba:a0:11:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:43:38 2025 by rpki-client