Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
File: 1XgxwfXmACVCvOut7yQSithG6vk.mft (raw, json)
Hash identifier: vnigPb0bhS2ukkuO+YlKeKAEzopAm0OzRr+Ffjr5vuQ=
Subject key identifier: BC:FB:D2:EA:E2:F7:90:C5:C3:6D:36:98:56:FC:1A:F2:AF:C4:57:DA
Authority key identifier: D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9
Certificate issuer: /CN=d57831c1f5e6002542bcebadef24128ad846eaf9
Certificate serial: 01976FD10E37701899CC4D7CBA992BBC3A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
Manifest number: 50
Signing time: Sat 14 Jun 2025 19:01:00 +0000
Manifest this update: Sat 14 Jun 2025 19:01:00 +0000
Manifest next update: Sun 15 Jun 2025 19:01:00 +0000
Files and hashes: 1: 1XgxwfXmACVCvOut7yQSithG6vk.crl (hash: T5tCfsRaVVrN1/KUqIRBFNtJZPS3S4IFtUX09BmWD6Y=)
2: GLKnJ3LTIabZeoGVzMCaJjFByNY.roa (hash: +WAt95sFiKCWSXPNQeYrpYryf9q0NJaDtl61QpO/UCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:0e:37:70:18:99:cc:4d:7c:ba:99:2b:bc:3a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57831c1f5e6002542bcebadef24128ad846eaf9
Validity
Not Before: Jun 14 19:01:00 2025 GMT
Not After : Jun 15 19:01:00 2025 GMT
Subject: CN=bcfbd2eae2f790c5c36d369856fc1af2afc457da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:fa:ea:b2:68:65:26:60:14:7b:ca:91:46:
42:57:22:92:c7:6e:e8:5e:75:c3:70:20:fd:be:c5:
40:ae:1b:0f:b2:46:96:03:71:b2:dc:ac:97:41:c7:
3b:19:38:72:b4:4d:32:51:1a:df:8e:20:9b:ca:4a:
2a:01:d1:3d:a1:b8:56:ad:7c:a9:28:b4:e5:42:5f:
14:4b:0b:9d:5a:6c:9a:f9:16:04:bf:3e:26:1f:02:
83:62:02:5a:7d:1c:66:d0:35:7b:c8:a6:ce:1e:77:
66:55:58:df:a3:e4:71:09:8c:31:42:6f:a5:8b:6a:
db:cf:2c:68:0d:25:f8:b4:91:ec:b6:bb:f8:65:8d:
cb:fb:8f:e2:b9:18:8f:75:2f:02:60:d8:20:e5:6c:
57:f8:4f:07:24:25:f5:b7:81:16:69:f2:f9:26:4c:
a3:f7:9f:de:fc:6e:a9:9a:30:84:30:a2:bb:e8:6f:
8c:35:98:5b:2f:b5:fe:c6:4d:5f:fb:40:ce:98:6f:
9a:04:17:5e:8f:9f:6a:5e:a8:dc:e5:09:62:f5:f8:
28:79:7c:9c:02:25:bf:91:92:63:61:b5:a2:9c:4c:
e2:f5:94:fe:73:de:4a:c0:94:f0:ec:09:fb:8d:c9:
3d:b5:b8:49:f9:1c:eb:1e:86:eb:ed:76:cd:2c:a2:
78:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FB:D2:EA:E2:F7:90:C5:C3:6D:36:98:56:FC:1A:F2:AF:C4:57:DA
X509v3 Authority Key Identifier:
keyid:D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:38:26:ec:e8:f7:2d:ef:dd:34:df:f1:c6:e8:8d:2e:b7:ca:
dd:2f:f4:24:61:b3:c0:63:63:80:1d:d8:85:99:2e:cf:3a:c9:
81:bd:cc:e3:0b:cc:9d:5a:15:28:1e:e3:87:9d:75:9c:40:15:
c8:28:a7:0a:d7:d9:e8:6d:c7:6e:77:87:b1:df:66:d6:9a:37:
60:da:fc:84:95:14:ab:71:32:79:9d:98:22:dc:14:75:fd:bb:
4c:04:0a:52:3d:7c:91:49:52:73:da:93:d3:2d:c3:17:fe:97:
1c:c3:eb:71:7b:e3:69:15:b6:30:10:4c:0f:41:3e:1a:c4:91:
ca:a9:87:6a:d7:2d:64:e9:30:3c:e6:81:96:f6:28:4a:aa:a8:
b2:27:a1:58:64:b9:1b:db:ee:7c:d4:b0:54:98:35:76:bb:8f:
42:5a:05:96:80:fc:56:be:8b:32:92:2d:41:14:33:20:fc:f2:
65:04:34:e2:cd:5a:4e:00:f3:eb:38:3e:f9:85:b4:49:9b:a2:
30:6e:8d:76:f1:8e:7d:46:32:a1:57:ab:17:c9:30:bd:2a:ca:
b1:54:46:d5:6d:9e:ce:82:fb:0e:e9:6f:06:e3:51:78:ef:84:
4a:39:6a:cd:6e:98:06:0a:72:f9:b2:ba:f3:87:dd:c8:81:26:
bf:5f:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:21:02 2025 by rpki-client