Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
File: XOsOvYeLd9QvLKndCPcMMjxdA9s.mft (raw, json)
Hash identifier: N7PbAHCXAZNGF9AdxWA/cPu2f1nx8tTv3bTtAdhLCMg=
Subject key identifier: 4F:C2:73:B8:95:34:5D:E8:71:B9:06:30:33:5B:D9:43:23:52:06:4B
Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Certificate serial: 01977E9FF154A4FDB87CF9EC132621431D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
Manifest number: 0EB6
Signing time: Tue 17 Jun 2025 16:01:40 +0000
Manifest this update: Tue 17 Jun 2025 16:01:40 +0000
Manifest next update: Wed 18 Jun 2025 16:01:40 +0000
Files and hashes: 1: RACkLgbLLbmOoJBt91BZdfyl6A0.roa (hash: MZ4vzxaGNc7jn7F682fp+i7yjq4zVlNk1kc4N8fk1T0=)
2: XOsOvYeLd9QvLKndCPcMMjxdA9s.crl (hash: EuVRFDtsK2MPy5R65Vwqi5ClQlOGXW94PZGLGxJemMQ=)
3: atQq239lyy1_USnx5HxIvR_xCQ0.roa (hash: 2VBlcsxe+dkdGVdmp9n4L26XGB1hz2kRzV8Tog1oGdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:9f:f1:54:a4:fd:b8:7c:f9:ec:13:26:21:43:1d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Validity
Not Before: Jun 17 16:01:40 2025 GMT
Not After : Jun 18 16:01:40 2025 GMT
Subject: CN=4fc273b895345de871b90630335bd9432352064b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:17:5d:19:19:41:c9:ba:0a:ae:d8:96:af:20:
e7:4f:83:5e:28:77:cb:bf:28:66:f3:83:3e:6b:0f:
b3:e9:0c:b1:9b:28:e8:d0:3e:fa:26:11:a0:aa:1a:
9b:bb:0f:35:03:7b:bc:fd:a7:12:93:66:2f:fe:8e:
ae:8d:aa:11:c5:a4:48:78:93:a1:c6:2d:1b:6f:66:
34:f4:f2:9e:e5:13:17:82:19:d7:d8:59:40:7f:7a:
a3:1b:11:58:24:bc:af:4a:29:dc:79:62:6d:41:e0:
e4:2e:d9:53:4c:3f:5e:61:f3:9f:db:71:3e:d9:e2:
fa:53:00:92:ed:09:44:73:91:6c:c9:f3:06:6e:89:
d4:28:db:6d:fd:67:13:f6:83:b4:78:1e:d7:69:2c:
5b:eb:30:50:6e:87:51:6d:e2:05:90:00:ca:18:ed:
e1:ed:27:c2:f2:de:0d:68:1e:61:02:7b:b1:a7:c4:
48:3d:d8:af:51:a6:26:00:a5:f0:9e:a5:cd:b9:54:
e3:90:48:c8:dc:f8:96:e8:2b:48:6c:b1:67:27:ab:
cc:2c:b5:6a:37:0e:e0:0d:d3:9b:c1:3f:bd:c5:1b:
5a:39:9b:8e:af:82:a7:65:81:4a:92:69:18:28:8b:
eb:6c:4e:e6:ee:ab:fe:0b:47:1c:5e:af:b6:24:47:
a6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C2:73:B8:95:34:5D:E8:71:B9:06:30:33:5B:D9:43:23:52:06:4B
X509v3 Authority Key Identifier:
keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9b:6e:b5:da:c1:28:a8:95:06:22:89:f8:8a:fb:79:27:3f:
a9:e1:34:8a:33:78:44:2b:8b:ec:f7:0a:d7:d7:8d:d2:62:98:
21:cf:55:2b:9c:92:19:8a:65:42:f6:de:d9:41:9f:11:9e:ee:
bb:a9:1b:20:28:25:5c:d0:2e:1b:54:6c:1c:40:c5:37:08:43:
0d:3c:e4:7c:d6:0a:4a:64:0b:dc:23:ea:0f:6f:41:11:ed:b9:
9a:27:1f:8c:b9:ce:13:11:eb:11:72:35:48:76:46:0c:93:c2:
79:2e:22:ea:fd:10:3d:c2:f8:ab:d4:8a:1a:d6:c6:e3:9a:c5:
86:62:ba:6e:35:1e:3e:44:19:ca:16:00:e7:73:80:d9:c2:2c:
f6:b9:59:ff:7f:6d:d3:1c:37:4f:ab:55:8b:09:69:45:d0:80:
e7:58:4e:a8:fb:6b:97:ed:92:83:30:df:99:34:82:70:f8:21:
e3:11:ce:a2:69:4d:15:06:58:1e:41:d4:0e:47:0d:91:99:5b:
64:2f:6b:e7:2e:c5:9c:eb:6e:fa:a6:d0:3e:cb:f5:09:6a:6c:
af:49:10:5c:9c:f1:0a:5b:6e:d6:8b:3d:36:50:5e:47:a3:32:
ba:27:81:d9:96:61:89:38:0f:71:cf:a2:11:2a:92:15:b2:a1:
7a:4a:e4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:01:57 2025 by rpki-client