Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
File: xMAyk16WM9-LGZJd8L0luBxoY7c.mft (raw, json)
Hash identifier: tYdBgSuQ+A+IW2gW6ILXkfEk6K2OKl6ft7qsZ6pYhRs=
Subject key identifier: 0E:95:18:64:25:D8:DF:90:E2:06:74:D0:7F:D1:DC:9F:DC:8C:AD:00
Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Certificate serial: 019771F6658127A288B678C79B4D464B382D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
Manifest number: 1590
Signing time: Sun 15 Jun 2025 05:01:02 +0000
Manifest this update: Sun 15 Jun 2025 05:01:02 +0000
Manifest next update: Mon 16 Jun 2025 05:01:02 +0000
Files and hashes: 1: ghEtezlgRxtM8_A6BWhHBoi7MAA.roa (hash: XbPqTVhQ0C1rkf6WQ+W7x28ipcXojyuCGKdg2k0Xwvo=)
2: xMAyk16WM9-LGZJd8L0luBxoY7c.crl (hash: TT0JDZlz34RixXHUO8OrkfK4KcOocq3zgwnatdvzWf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:65:81:27:a2:88:b6:78:c7:9b:4d:46:4b:38:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Validity
Not Before: Jun 15 05:01:02 2025 GMT
Not After : Jun 16 05:01:02 2025 GMT
Subject: CN=0e95186425d8df90e20674d07fd1dc9fdc8cad00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:57:f7:66:5e:b1:48:55:03:c4:55:90:a3:b3:
57:58:2e:b3:2f:c6:15:ef:23:eb:8e:29:80:88:7e:
f3:9c:8c:9c:f0:a7:6d:1e:1e:48:99:3e:3a:27:7b:
74:98:e6:bd:b9:1e:8b:ae:2a:88:df:ef:6a:b5:1a:
95:2d:9a:54:63:94:37:3d:e2:b4:c6:13:b4:0e:9b:
2d:29:16:f2:e5:c3:fb:6e:2b:4c:88:9f:31:e8:54:
cf:ea:9c:6b:d1:be:7a:11:55:41:4d:f3:c9:c2:b3:
ce:da:ba:85:94:22:00:a1:01:12:4a:4a:d2:5d:30:
5e:8e:54:78:b6:43:30:07:ed:43:42:2b:8e:e6:4e:
50:b2:d4:a4:a2:b2:a5:bf:cc:48:ac:37:ed:ba:63:
18:b9:d2:84:00:3a:f0:67:95:ce:d1:bc:8c:7e:ae:
78:46:5b:26:32:64:43:7b:45:fc:05:91:e4:9e:37:
99:47:44:51:60:e2:17:8b:ce:e6:05:ed:5d:45:3c:
ff:83:2d:18:36:17:c2:a0:20:bd:09:a5:af:8c:80:
6c:d5:36:c1:36:a3:a9:2c:91:b0:01:75:86:fd:00:
f2:e5:29:eb:a4:80:92:e0:62:9c:69:b4:96:11:0a:
89:c2:d4:b7:60:20:57:b0:53:b4:3a:2c:71:08:21:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:95:18:64:25:D8:DF:90:E2:06:74:D0:7F:D1:DC:9F:DC:8C:AD:00
X509v3 Authority Key Identifier:
keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:25:c7:ac:78:66:a3:57:92:40:93:8a:1f:c8:d8:20:0e:a5:
2e:e2:47:94:c6:8d:06:1e:c2:4b:46:5c:40:66:be:d8:6f:5d:
57:da:6f:55:a7:a0:7e:12:7a:85:b1:fa:fa:7f:fd:b5:3d:81:
3a:f1:82:44:83:44:b9:cc:e0:59:25:3f:fc:43:df:dd:0d:fa:
42:87:55:94:c9:ed:92:91:cb:09:e2:c7:09:b7:88:45:24:b3:
a1:02:47:d2:68:e6:8c:c1:53:f5:ec:da:23:28:11:66:47:34:
c1:65:49:15:c0:a3:e4:69:b4:13:85:63:59:9d:b7:52:77:d9:
5d:48:ac:32:1d:1a:ef:24:e9:3b:0c:42:3a:f4:2a:de:1d:ac:
4d:8e:d1:21:78:40:cb:48:77:5c:32:f0:1f:d7:0e:be:06:5e:
86:43:aa:f1:13:00:96:3c:e5:0b:ca:d9:40:4a:96:df:b4:9a:
df:1f:78:67:96:32:1e:c0:39:cd:09:dd:33:e0:8a:26:61:82:
b8:a4:bc:76:b9:2f:ab:bc:3d:3f:40:c0:70:10:2d:0b:b7:5e:
2b:82:01:dd:e2:02:f9:31:af:4f:46:66:5c:f5:97:eb:53:15:
67:b0:73:b0:f6:cc:6d:48:6d:2f:0b:4a:dd:57:87:57:51:50:
e8:d3:d7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:06:43 2025 by rpki-client