
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
File: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft (raw, json)
Hash identifier: lCFUGPEGh1tfDanph7n3sOREFBawJNAfs0MvDiWUab0=
Subject key identifier: 45:77:C4:29:D7:EC:A9:1A:0C:0A:25:44:7F:AA:D0:03:F2:7C:56:34
Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
Certificate issuer: /CN=5ece10f13c46806926a67946cc6a1102aa09031a
Certificate serial: 019771888FB08810CE0E258F58D80FB1018F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 03:01:04 +0000
Manifest this update: Sun 15 Jun 2025 03:01:04 +0000
Manifest next update: Mon 16 Jun 2025 03:01:04 +0000
Files and hashes: 1: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl (hash: P6EgViVV66+mu3TItWnoUW8uO16zt2oiw6IghpAtUS0=)
2: da7wWDdQpE5i6DJox7FoD-QEnrA.roa (hash: 93ok4fdBSnjw6qTtlazVRgZjQmCRM/yDSLFq6NFZNeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:8f:b0:88:10:ce:0e:25:8f:58:d8:0f:b1:01:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a
Validity
Not Before: Jun 15 03:01:04 2025 GMT
Not After : Jun 16 03:01:04 2025 GMT
Subject: CN=4577c429d7eca91a0c0a25447faad003f27c5634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:5a:9a:d7:91:d6:54:74:1b:ef:d3:61:83:
4e:f8:11:97:3f:48:fa:8c:d6:75:b0:41:b3:75:6d:
ef:67:09:b0:d1:05:08:25:d7:a7:19:16:ba:5d:1f:
9e:12:65:89:15:d2:42:1f:79:e5:ba:10:54:bb:d7:
5d:25:69:40:af:0b:71:45:5f:ff:ad:8b:0a:52:be:
0f:aa:db:f6:01:ce:32:74:a5:e8:a8:41:60:94:e8:
a1:bf:de:e1:5f:52:bf:53:64:c8:e2:94:15:3d:37:
47:99:f9:2d:41:a4:24:94:09:cf:37:5a:d2:14:fc:
48:59:1a:2a:0d:fb:7b:e6:c1:19:15:f3:93:41:37:
ce:88:79:11:e7:d4:55:ba:48:bf:ac:9b:3a:92:d0:
2d:75:8b:1f:22:5f:32:62:8d:69:07:10:dc:9a:df:
51:1a:28:c6:d7:a7:8a:5d:ea:cd:7e:f1:78:2a:68:
83:2f:96:35:ef:05:fc:f2:60:d0:24:88:1d:72:42:
bd:aa:bb:fe:2e:89:9c:cc:ba:d2:9c:9c:b8:e7:8f:
36:5a:34:5f:24:79:01:55:a3:19:29:6b:bd:5d:d3:
67:39:78:33:eb:1c:e8:d0:ec:a9:1f:20:b7:3c:da:
ca:03:33:4e:cd:e4:7b:cb:0d:21:a5:c2:36:42:e0:
8d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:77:C4:29:D7:EC:A9:1A:0C:0A:25:44:7F:AA:D0:03:F2:7C:56:34
X509v3 Authority Key Identifier:
keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:29:b1:93:33:8d:2d:1c:8a:53:2b:7b:9c:8e:05:18:b3:c3:
e0:96:67:51:18:a6:44:8f:ef:14:0a:3d:ea:91:c9:3f:e4:6e:
18:29:80:e1:87:d0:f3:31:02:31:f9:cb:a3:ed:8c:1f:62:65:
2c:ae:50:cd:ca:30:cb:16:30:d4:49:9c:91:af:ee:9e:78:82:
31:35:ab:d7:84:ef:f3:83:f6:53:93:0e:96:aa:42:36:72:18:
80:77:57:94:87:5c:a1:9a:61:22:91:58:72:3f:ec:52:1f:40:
ab:f5:20:73:61:24:b5:d4:1a:da:ca:9e:cc:0e:91:94:69:f3:
23:fd:a4:1f:c7:f3:1c:e5:ce:33:d5:4a:d1:8a:6b:df:1e:b0:
f4:b1:a9:57:76:ae:35:00:96:64:d7:6f:31:5f:bc:9c:b5:d0:
8c:75:f9:cf:44:07:c2:e9:f4:94:cc:c3:46:bf:83:32:aa:1e:
d7:ce:0a:e6:7e:aa:7b:c8:6c:02:0c:69:f8:c1:45:bc:f1:2a:
31:c5:53:30:fa:76:e9:c0:5f:a4:6f:09:d1:57:54:af:71:cc:
73:2c:d2:79:10:51:f9:ce:59:05:62:53:0c:aa:78:80:06:f9:
42:f4:36:16:ae:10:45:78:e3:7f:28:2c:a9:8d:96:dc:38:3f:
c5:7a:6d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:47:19 2025 by rpki-client