Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json)
Hash identifier: 12nPf+/4Yf113R9/G5wKiOdL0wfo6cYDPxS3AusZ6UE=
Subject key identifier: 11:27:F6:40:ED:9C:2B:5A:CF:E7:AE:0A:33:69:E1:8E:EB:0C:6F:38
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial: 01976DAB7854029C907458D213FF32181A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
Manifest number: 05DF
Signing time: Sat 14 Jun 2025 09:00:43 +0000
Manifest this update: Sat 14 Jun 2025 09:00:43 +0000
Manifest next update: Sun 15 Jun 2025 09:00:43 +0000
Files and hashes: 1: gO1QQzQ8EJSK1sz9QVMIVflw4Is.roa (hash: XHDVuSMRNZ8ZK68EQ/rZiQRsF4JaubC5jLA4NaC8LBM=)
2: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: bmsDq2zTopNXExH7oKkjss192Szb1n50+7zZGHVENvo=)
3: z5AaUIsCUfsHWnAtqAIr_d8n8do.roa (hash: rmzyF9COLH0iNSyMo0DleMzCkcEN6+9Om4xVkdPkL6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:78:54:02:9c:90:74:58:d2:13:ff:32:18:1a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Validity
Not Before: Jun 14 09:00:43 2025 GMT
Not After : Jun 15 09:00:43 2025 GMT
Subject: CN=1127f640ed9c2b5acfe7ae0a3369e18eeb0c6f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:82:55:a2:b2:d0:33:ce:3a:28:4e:ec:7a:
ce:54:ae:e6:5e:0e:48:f8:bc:f0:f3:0a:59:78:c8:
d8:70:a6:72:ec:ee:29:81:14:6a:2b:78:bf:43:2e:
aa:66:d1:25:7f:65:3e:02:5d:12:07:c6:2f:dd:f9:
c2:63:f9:eb:c9:8b:b3:73:78:0b:ea:4d:d5:12:ad:
2c:8c:01:2e:95:4b:dd:15:3d:6f:a6:d8:16:6e:8c:
01:39:16:16:85:e9:8c:23:b2:2d:0d:0a:b6:7f:c3:
4a:53:5d:09:55:f1:64:df:cf:6e:95:f1:f9:f1:7f:
19:2c:f4:ad:dc:50:b5:28:34:63:b5:f3:fc:81:b7:
3a:01:13:4f:1e:b9:1d:88:33:50:6f:58:d2:35:7b:
a7:b3:26:74:f4:34:44:79:23:75:bf:aa:1e:b0:33:
3c:2c:44:77:49:1a:7f:34:22:43:44:65:ba:40:6c:
e9:ff:fc:22:56:22:bc:38:70:8c:5a:90:80:b5:f2:
d0:51:f7:27:94:cc:cc:9f:7c:f2:cc:a3:f1:82:57:
93:26:ca:e6:bd:61:af:f8:79:99:95:38:d8:65:2e:
7d:15:c3:82:04:2b:bc:23:cb:cf:28:7d:8d:ee:6d:
71:18:2f:05:f0:10:a9:f6:be:97:77:2a:14:23:6b:
6a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:27:F6:40:ED:9C:2B:5A:CF:E7:AE:0A:33:69:E1:8E:EB:0C:6F:38
X509v3 Authority Key Identifier:
keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a6:6a:ab:ab:67:38:98:0c:8d:fd:6c:3e:c3:ee:79:c8:d7:
45:5d:dc:fe:cf:fa:c0:2b:ab:b6:95:53:f5:08:4c:f6:9a:44:
50:b6:02:11:ab:35:bc:43:71:89:8e:2a:db:43:e6:5d:00:81:
16:18:8f:58:a4:42:fa:fe:c8:5a:8a:9e:a6:ed:e8:05:1f:cd:
e4:32:1c:34:f9:5f:c1:0a:32:af:1f:59:70:4d:52:b4:6a:3b:
f2:b6:ab:49:67:0f:8f:de:82:5b:aa:25:9c:b9:46:ad:02:28:
e6:5e:6e:23:c0:45:75:d8:64:81:2b:d5:02:62:23:de:01:3c:
7c:d2:22:8b:fb:c3:77:53:4f:21:96:fd:6c:27:35:11:5f:d5:
01:0e:0e:76:02:b6:3a:e5:27:d8:de:bd:90:24:46:3a:3a:b5:
de:a7:ba:6a:16:49:d3:35:6b:1e:c8:c8:af:d0:d0:22:b5:df:
6c:4d:d2:59:aa:4c:bf:fe:78:7e:60:79:a8:13:a3:c5:8b:77:
f4:cb:bc:92:c0:e8:40:ed:45:58:d5:ec:71:ec:c1:44:35:33:
dd:f0:a3:26:16:6d:0b:fe:41:ff:eb:5e:19:60:a2:cd:c5:ce:
e9:05:a2:17:ca:78:d5:d5:bc:f9:dc:0f:b8:9c:5d:c7:85:5e:
8c:bb:81:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:05:35 2025 by rpki-client