Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
File: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft (raw, json)
Hash identifier: cNUp8PzEHBsi93vYvgMyrVd+a+nnUCH2ksNII/E69YA=
Subject key identifier: 53:55:C6:88:1D:E6:B2:80:D8:01:91:0C:37:68:F0:11:1F:1D:71:9E
Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
Certificate issuer: /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Certificate serial: 019776E5F00509BC19F8508EBA8AA2E296B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
Manifest number: 0F8F
Signing time: Mon 16 Jun 2025 04:01:09 +0000
Manifest this update: Mon 16 Jun 2025 04:01:09 +0000
Manifest next update: Tue 17 Jun 2025 04:01:09 +0000
Files and hashes: 1: 6CdL4NVEnOP6dX0O4aaaSJqjuEw.roa (hash: opstI2GGEuXqVjNMZSKfqsaiPjOYL/Qa7H9RA+r+awI=)
2: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl (hash: 0tfu6D9N6nqETkCv0yn+It1VK8f909NM/4iis6o7KY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:f0:05:09:bc:19:f8:50:8e:ba:8a:a2:e2:96:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Validity
Not Before: Jun 16 04:01:09 2025 GMT
Not After : Jun 17 04:01:09 2025 GMT
Subject: CN=5355c6881de6b280d801910c3768f0111f1d719e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:a7:74:13:77:a1:29:ee:99:0e:d7:86:28:
0e:0b:a3:1d:b5:b7:98:ad:d2:2b:e1:99:ef:5d:5a:
ec:d9:5e:85:8e:ec:2d:fb:58:1b:76:58:32:00:6a:
72:8f:34:5f:c0:a5:91:e0:63:e0:0b:c1:32:bf:6b:
86:41:9b:b8:75:0a:fc:c2:b9:d2:7c:2a:36:2c:69:
b0:97:7d:da:30:13:e3:4e:e1:e7:72:9e:a4:69:5f:
77:2a:e6:04:c5:21:e2:c0:65:23:01:95:ab:d5:06:
44:b2:e2:ef:80:bf:73:ae:a6:59:a2:5a:0a:2d:39:
cf:15:fd:c3:de:46:0b:bf:b2:80:10:8c:cd:ae:9b:
c0:b8:d3:21:d2:2b:44:28:91:f0:7e:a0:7e:a4:b7:
e6:74:d5:ab:76:7e:56:54:c7:8a:b4:61:26:6c:cf:
9f:e5:15:7b:b5:ee:c3:89:96:82:7d:e0:1d:ff:ba:
3a:98:9d:bd:88:65:b6:52:bc:50:a5:12:31:74:fc:
37:d0:fb:c5:8b:32:fb:e1:71:fa:e8:17:70:58:37:
ee:3d:92:1a:a2:2e:c0:81:bf:2f:6e:05:70:db:dd:
3a:09:cd:8e:9f:f1:83:b9:be:6f:eb:7a:78:08:54:
81:69:2c:ce:3f:ea:da:cc:29:a9:18:6e:fa:cf:bd:
bd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:55:C6:88:1D:E6:B2:80:D8:01:91:0C:37:68:F0:11:1F:1D:71:9E
X509v3 Authority Key Identifier:
keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:20:eb:dd:89:b3:86:a8:7e:c5:17:f9:7c:0a:b5:06:02:06:
5f:6b:53:be:bb:42:49:b9:06:ca:c4:3b:42:1a:72:7c:1a:1a:
4b:bb:35:e9:a0:41:91:77:fe:36:cb:bf:9b:65:ff:43:71:88:
d1:96:02:1e:d0:8a:46:b4:45:97:02:94:35:de:a2:ff:8f:5b:
0f:e0:ca:99:ca:8a:bc:8d:db:65:44:63:c3:26:fd:b1:ba:28:
ee:32:fc:69:d8:6d:5c:28:28:91:29:59:b0:41:27:b6:9b:95:
d9:6e:8d:16:00:1b:09:c6:50:e6:01:bd:5f:25:4e:fa:67:a9:
6d:15:6d:63:5b:65:79:88:93:8b:00:23:56:8d:58:77:df:6a:
35:2f:6b:0f:bf:31:30:a0:15:31:73:1a:f4:2b:78:27:de:da:
71:e1:28:13:d3:da:cd:28:e6:e9:4f:1a:a4:e5:67:68:58:47:
84:25:e1:03:bb:00:c3:5c:41:98:5e:d6:28:52:2e:aa:af:04:
a8:bc:56:1a:4a:3c:22:a2:4c:53:df:94:39:91:0a:5b:19:6f:
40:f6:f9:9a:8c:4b:a1:8b:39:d3:f4:f4:88:49:21:79:05:d5:
dd:9d:e9:00:af:e7:02:95:13:b2:10:84:bb:87:78:d5:c1:c3:
13:6d:d4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:40:46 2025 by rpki-client