Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
File: xTsinnPOa7GW1lwL7xGVYGV6NyA.mft (raw, json)
Hash identifier: uTiqLXaZ3gUcRyv5vQ14a0wc2lpAbXsd0tMCUVHNc9U=
Subject key identifier: A9:08:CE:47:C5:74:66:CA:B3:A8:DB:89:E1:B7:D8:16:AB:4D:28:7B
Authority key identifier: C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
Certificate issuer: /CN=c53b229e73ce6bb196d65c0bef119560657a3720
Certificate serial: 019770AC9479AF2D0A32B7CDEC2417FB3878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
Manifest number: 09FB
Signing time: Sat 14 Jun 2025 23:00:47 +0000
Manifest this update: Sat 14 Jun 2025 23:00:47 +0000
Manifest next update: Sun 15 Jun 2025 23:00:47 +0000
Files and hashes: 1: gzZahYqckgC0Uj_Nklh90nWZtP0.roa (hash: oNQlnk2/mO4eMuiG7Nb/MiiGpF0Vc9lIJ1vyvcm+wlA=)
2: xTsinnPOa7GW1lwL7xGVYGV6NyA.crl (hash: DIojO9bP//d6+5Il8sv/3LNSVeCwI1GmX0x4y5LvvV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:94:79:af:2d:0a:32:b7:cd:ec:24:17:fb:38:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b229e73ce6bb196d65c0bef119560657a3720
Validity
Not Before: Jun 14 23:00:47 2025 GMT
Not After : Jun 15 23:00:47 2025 GMT
Subject: CN=a908ce47c57466cab3a8db89e1b7d816ab4d287b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:68:26:94:97:ce:27:ad:66:0c:62:88:46:
c8:d6:55:44:4b:9f:61:ae:f7:70:b0:00:56:1b:de:
27:bc:9e:09:b5:b7:76:a8:23:5c:3f:6e:83:5b:bb:
fd:ee:f1:a1:c9:ef:ee:45:36:b0:ee:6f:0f:ee:0f:
2d:4b:e8:4d:8a:0b:ca:67:48:7e:80:94:20:e2:aa:
3e:df:f9:d4:41:c3:90:c0:39:ec:20:b5:7b:66:ad:
17:cc:61:74:e6:23:fc:79:70:c2:dc:e9:00:53:09:
85:ef:a3:cb:6e:45:7c:44:1e:88:a1:f2:74:e7:b8:
8c:74:fd:26:10:95:d2:b6:4e:47:69:d2:75:1f:46:
f1:ef:bd:36:71:c1:e7:5f:5d:ed:c6:46:b9:23:5c:
94:e9:dd:cc:f9:a4:a9:ca:15:e5:c0:ce:4a:d6:d4:
8f:0d:5e:3b:03:79:29:af:86:01:1c:f2:d8:c4:2f:
b2:0e:cf:3c:b7:b3:7a:c2:1f:8e:93:55:84:71:c1:
09:41:92:19:45:43:da:8d:1b:dc:e8:ae:9f:8c:bb:
22:0f:5e:64:df:e1:5e:d5:1e:ec:08:f5:ea:fa:b3:
9b:99:f3:1c:2b:97:8a:5c:5d:66:80:37:56:03:31:
98:92:be:83:a6:00:29:d3:7d:d9:36:ad:04:2e:c0:
e7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:08:CE:47:C5:74:66:CA:B3:A8:DB:89:E1:B7:D8:16:AB:4D:28:7B
X509v3 Authority Key Identifier:
keyid:C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ff:88:7a:b0:13:42:61:f1:19:e5:99:dc:b7:f3:cf:8b:16:
7f:db:bc:12:7e:a9:4f:4b:65:17:aa:e3:2a:24:3e:74:dc:86:
1c:2e:fe:49:17:4a:b4:56:e0:fe:d3:58:22:a4:26:c3:5c:24:
b3:60:d7:13:8a:0d:6e:05:39:af:10:74:df:78:71:23:28:6b:
c5:b5:d6:c7:c5:1e:42:0d:c4:39:2a:ef:92:00:42:44:b1:c5:
5b:f6:0c:74:41:2e:3d:9f:01:d7:0a:b6:e4:71:9c:0f:20:a3:
85:32:85:7d:95:1e:e5:3d:2b:32:33:40:51:70:e2:e1:35:44:
96:63:c3:5b:b3:63:f0:ad:ca:e3:e6:1a:d6:02:61:9e:bd:b3:
59:31:a0:aa:c4:bc:d4:fc:18:7f:d3:46:25:49:4a:94:43:d0:
12:da:16:71:7e:d9:df:a2:a0:9f:ab:03:04:88:02:9d:a3:7a:
13:16:41:9f:ff:f2:19:32:aa:a1:64:47:b9:72:b4:e6:b4:39:
2e:8b:30:be:3c:e9:9f:be:c5:d3:df:cd:89:d2:c2:88:43:f5:
7c:14:3e:80:59:b3:de:59:e4:80:1e:97:f9:73:fd:87:86:17:
5d:2c:ce:69:ef:ce:42:d1:14:ee:91:f6:11:db:8e:ec:b7:15:
dc:46:ef:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:06:40 2025 by rpki-client