Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier: 4CqHcNNbcHtsIoL4RZdwBkt/XLKOMqYTg5bwkOu72c4=
Subject key identifier: AD:99:56:0C:C1:66:93:C9:80:78:FC:F7:85:AA:0F:5C:4B:D1:76:F9
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 01976FD0A6B6B527869F5C142133D39B5837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number: 0D5D
Signing time: Sat 14 Jun 2025 19:00:34 +0000
Manifest this update: Sat 14 Jun 2025 19:00:34 +0000
Manifest next update: Sun 15 Jun 2025 19:00:34 +0000
Files and hashes: 1: SKLs3SUJ6QhNbVJrjYVyYf81aEc.roa (hash: R9s9J4TIgAF+/QEDyhuyAA67g5wViBKHguVZOslEIHs=)
2: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: 2ow1QVh26cCaumJb0QGnvCOSxz8HFL2BfUUJ9vP45dg=)
3: rAM6r2SFYvSQGaseydRgOte_bds.roa (hash: RYGmm+YYhr7YTk+o6zMn3og3hxzFO1fF/P5WPNoHQX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:a6:b6:b5:27:86:9f:5c:14:21:33:d3:9b:58:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: Jun 14 19:00:34 2025 GMT
Not After : Jun 15 19:00:34 2025 GMT
Subject: CN=ad99560cc16693c98078fcf785aa0f5c4bd176f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1f:de:81:10:20:a2:70:34:9b:13:8a:b4:ff:
89:0b:77:fb:b4:a1:c6:ba:7c:ea:0c:f1:b8:9c:6c:
ec:0d:3b:04:f0:da:ce:31:52:62:e0:26:f1:8a:98:
0c:a1:4c:97:4f:a1:f3:33:16:46:90:f2:e4:cb:a2:
6e:d3:04:7e:36:89:b7:9c:3e:dc:b4:88:9b:87:c7:
19:50:92:67:44:ef:bc:df:5d:d8:ad:73:fa:61:dc:
77:93:d4:5b:d4:eb:1e:db:d2:b8:ec:40:2d:29:da:
4e:1d:8a:29:e0:5c:1d:35:e0:32:00:c0:b4:ff:51:
d8:55:a4:e7:d6:3a:1d:3d:5f:42:ee:90:c2:1f:bb:
66:f9:b2:7e:82:df:df:af:1b:6e:19:a2:e1:81:9f:
38:0a:15:41:de:4b:8f:95:1f:29:8e:ef:39:1e:a7:
fb:a4:e0:6e:9f:d4:14:14:d7:d7:f0:2d:7b:fd:cc:
8b:43:3e:c9:83:4f:d8:53:44:d3:39:ce:e5:a2:74:
6f:6c:7b:07:1c:93:05:1b:b7:df:be:53:d2:b4:d3:
29:97:b7:49:7c:d4:41:af:b6:e8:c9:0c:4d:94:fc:
0c:a4:82:cb:86:df:0b:97:35:68:a5:b2:ae:8a:e4:
ec:e3:79:7a:b5:bd:85:7d:2e:26:76:65:aa:7f:ee:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:99:56:0C:C1:66:93:C9:80:78:FC:F7:85:AA:0F:5C:4B:D1:76:F9
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:de:f6:e1:4e:37:4c:c1:bd:2f:10:b5:3a:b1:5b:09:a9:80:
f4:2c:e7:f4:6f:b6:41:ec:89:58:b8:ea:ce:d6:eb:a1:c5:db:
7e:ba:9a:0f:03:91:60:8e:92:54:b5:3d:28:5e:0e:ab:f0:ed:
6e:5c:74:d2:e1:7b:ae:29:99:d1:08:e3:8a:b0:f6:df:88:62:
9d:d0:d9:06:9f:5e:2c:2e:12:c4:72:b7:1c:3e:ce:d2:61:b7:
a4:4f:7c:90:7e:ce:ee:e8:e3:ea:75:2d:99:2b:ed:3b:e6:ea:
4b:df:95:94:4d:6c:65:56:d1:ec:16:1d:21:08:d2:92:dd:30:
4a:d1:8f:e1:a5:e2:0a:97:03:84:89:b6:78:9f:97:50:b3:62:
78:21:f5:0d:af:b7:c2:fc:ef:68:8e:08:54:45:c9:39:53:aa:
7d:68:fb:a0:a2:bd:fd:d0:7c:80:26:f4:a3:cd:1f:ac:0f:1b:
45:48:3d:d6:66:56:63:73:5c:a5:e6:bf:2f:1d:96:41:e3:7e:
80:01:37:b6:96:bf:d5:2a:d5:5b:5d:cb:06:81:44:6a:04:2b:
c6:3c:f6:75:6f:4e:f8:48:b7:3f:5d:5d:74:d6:86:45:66:d2:
e0:91:af:40:05:c1:ee:aa:41:f5:95:40:b6:8f:bb:04:52:d6:
d9:1d:81:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:44:46 2025 by rpki-client