Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: yoQaRixaDMTzCy2mGPz5JGNlOJLXf9aS1AjAAbLpoqo=
Subject key identifier: 35:3F:8A:B4:C8:E9:76:2C:79:C9:CF:05:3C:CA:AD:77:88:8C:F2:AD
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 01977F0D0B034438558530C431366F144DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 0B7D
Signing time: Tue 17 Jun 2025 18:00:50 +0000
Manifest this update: Tue 17 Jun 2025 18:00:50 +0000
Manifest next update: Wed 18 Jun 2025 18:00:50 +0000
Files and hashes: 1: 1-4QYL3zSIvubO19_zc5_sPHbtmM.roa (hash: RSu12j4NBBmo2Fros21N8BPczXB3VUvZpIMKKBoV+WA=)
2: GVUHIfvKpJdOHNnRnG93-HDINEI.roa (hash: /GunX5DVAaqCLeh5vLqdmjbmgKNjplZucj4LzeQ5W4Y=)
3: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: Hb9hVF3NRfIuVHAhEz1aXtrHxxBAdbK36BrCLAR8Vnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0d:0b:03:44:38:55:85:30:c4:31:36:6f:14:4d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Jun 17 18:00:50 2025 GMT
Not After : Jun 18 18:00:50 2025 GMT
Subject: CN=353f8ab4c8e9762c79c9cf053ccaad77888cf2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:9a:0b:67:44:64:9b:e8:4a:84:14:f1:5f:
0f:bb:b6:16:b8:16:53:95:32:d1:4e:56:73:f9:f8:
e4:4f:4c:1d:74:e6:84:bd:20:ec:e2:7b:6d:c2:be:
ae:f6:2d:89:7b:a4:b3:d5:dd:68:28:7e:64:56:6b:
7b:31:74:68:1f:22:39:a8:bb:73:d9:c0:aa:85:ea:
4c:db:5d:03:44:94:9f:fa:53:ad:8b:90:32:27:94:
eb:18:c3:ec:80:99:0b:88:f3:90:cf:5e:47:92:b2:
d7:0a:c3:db:99:27:ea:5c:ed:a3:0c:10:d1:91:9f:
a8:aa:43:8a:7f:15:59:5a:88:4c:97:f0:fb:4c:a0:
a5:57:75:d3:20:54:82:cb:78:14:8b:27:49:42:12:
6b:d9:5c:60:bf:13:cd:d1:37:bf:40:3b:19:1c:2f:
1a:0d:29:75:a6:09:0b:a7:0f:b6:34:68:b6:cf:98:
66:4e:5b:e4:4c:5a:4d:0a:c6:12:2c:b8:f9:21:82:
9b:26:4f:15:ce:db:cc:4b:23:e7:43:d5:fa:84:76:
1f:fe:31:98:88:7b:28:b8:6b:21:e5:af:e1:5c:61:
90:7e:49:e7:33:13:00:ad:53:f6:eb:9a:cb:02:ec:
ef:3c:52:49:a7:fa:ee:e4:4a:07:8d:12:20:24:50:
0f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3F:8A:B4:C8:E9:76:2C:79:C9:CF:05:3C:CA:AD:77:88:8C:F2:AD
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:85:a0:a8:a2:cc:03:f8:55:b2:09:9d:0e:37:ae:e6:80:8f:
9f:73:db:15:b6:70:e5:67:3a:69:9e:2a:b3:4c:c2:1f:10:ac:
84:e3:c5:52:74:95:09:10:13:be:a4:6a:cd:4c:62:67:60:17:
a5:30:fa:c0:74:c9:bb:fc:1f:73:d1:5c:51:29:62:2b:15:2f:
f4:59:d3:34:31:17:ef:c3:c9:94:7b:e8:04:0e:1b:14:bb:01:
e2:46:02:16:7e:7b:f4:a9:57:ca:66:2e:57:2a:c8:42:d1:2d:
a3:f2:4e:91:09:22:0a:ae:8b:85:84:a0:3e:b6:22:9a:25:37:
de:8b:77:45:98:ff:0f:b8:3d:a9:01:c7:c0:0c:c7:90:5d:f7:
9c:9a:f0:b4:dd:ed:31:b3:10:5b:f2:31:81:33:7e:b0:03:10:
c6:69:10:5e:4b:67:61:e1:fb:37:f9:7e:66:d2:cc:2a:2c:1b:
9e:3c:e2:65:e0:9e:83:6d:66:d6:64:f8:96:37:11:53:ff:bf:
40:bf:47:43:75:d1:f9:64:93:16:e9:3c:e4:62:89:9e:b9:94:
98:dd:ee:72:31:47:46:7f:9e:21:1c:3a:47:0c:57:60:1e:03:
3e:0f:35:f2:15:f5:db:ed:1a:9a:c0:16:f6:15:e3:ae:a6:20:
3d:ce:70:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:23:58 2025 by rpki-client