Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File: X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier: hh4ZjwmzWo8mpA6ub3FfgQ1GHbAUDJFT8KvdQx33MGw=
Subject key identifier: F8:5B:7C:60:E9:BC:BC:8B:C4:DF:FD:50:83:D7:FD:03:73:EB:F9:43
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 01976A0580F42E0E884FA1D3437DF80C228A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number: 1594
Signing time: Fri 13 Jun 2025 16:00:34 +0000
Manifest this update: Fri 13 Jun 2025 16:00:34 +0000
Manifest next update: Sat 14 Jun 2025 16:00:34 +0000
Files and hashes: 1: 2N_bsVB0KvO9RyGjzRLMSxh2whM.roa (hash: hwDDM8IuPT+bKKqC9g8Bom6jz4+b+lZbDkkn2LwwNsU=)
2: JvK-cLcIjgxCJ_K14_FWFEfc7vQ.roa (hash: 1p38hpbTbOTu95nT8/nMNcs2xO2ksXr8ZuGwpDzXer0=)
3: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: WVKeh6vjEw2jSURwUt6K9mkB0uhCA/Q4zGBfvWBngVo=)
4: t_DIdqaN6y2JKMbW8hZqlx5pBLI.roa (hash: sTPX3pfoCgx/hl/X8Ze0rx/7BembW5p7LcW8LP/fL7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:80:f4:2e:0e:88:4f:a1:d3:43:7d:f8:0c:22:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Jun 13 16:00:34 2025 GMT
Not After : Jun 14 16:00:34 2025 GMT
Subject: CN=f85b7c60e9bcbc8bc4dffd5083d7fd0373ebf943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e6:18:28:e1:bd:b0:a1:71:b4:27:9b:65:d6:
89:85:cf:65:dc:60:9d:5d:ee:c1:c9:2d:75:c1:d5:
d3:87:99:7d:cb:6a:68:29:65:37:3c:87:03:27:c2:
d3:a4:cc:5e:88:ab:25:23:d7:29:87:1f:07:ea:3b:
38:c9:13:2b:63:0d:d4:4f:89:89:04:0e:45:33:1e:
5f:07:d4:0c:23:54:f7:36:bb:92:4f:a5:81:ae:94:
17:41:c6:8e:2c:6f:bd:4f:9e:a4:61:97:eb:32:78:
4d:56:b7:ad:85:d1:2a:79:eb:ad:c5:fc:cc:24:d0:
a4:35:b7:c0:a4:f8:c8:7e:e9:35:81:02:d3:49:8a:
2c:f7:8c:db:f5:85:ff:d9:db:66:c7:ee:a0:51:3d:
28:9a:10:c0:17:ed:e8:fa:84:f5:44:30:9f:55:dd:
7d:35:65:cc:4e:04:bd:fb:f7:30:1a:22:16:32:9f:
ae:67:db:05:3c:80:4d:66:16:a7:37:ba:e6:39:dd:
06:91:ea:e3:38:0c:5a:b9:da:88:47:74:c8:ef:ca:
cc:8f:a6:56:0d:70:bb:7a:6f:77:38:dc:dc:db:4b:
87:e1:4d:ba:bd:ee:d7:7d:67:2c:5e:0d:8b:d2:78:
11:a1:d4:73:e1:52:ce:8e:86:02:50:12:19:df:82:
2e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5B:7C:60:E9:BC:BC:8B:C4:DF:FD:50:83:D7:FD:03:73:EB:F9:43
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a6:30:df:8d:ae:f4:23:7b:19:80:c8:4d:f6:8b:a0:17:04:
ef:39:88:54:bf:08:16:2d:f3:4a:92:17:0a:48:7f:75:3b:1f:
d8:55:90:a2:08:d3:77:1a:66:21:fa:a7:e7:9c:29:9f:3f:8f:
1b:c7:86:3e:0e:95:40:08:b2:f8:a8:87:ee:d2:6f:7f:bd:a7:
8b:67:d8:46:ea:e4:33:f6:fe:99:a8:d3:40:2c:73:44:8e:c2:
50:70:f4:2b:27:45:74:bf:f5:b5:d5:59:9f:d9:32:62:28:3b:
c0:b4:5c:cb:59:64:44:b8:33:d6:4a:23:83:0f:4d:ee:56:bf:
62:b7:e8:be:a2:a1:db:85:93:58:5b:3d:fc:51:13:e9:3f:c4:
a2:bb:c7:5a:01:62:2f:d0:a6:c9:9c:d1:fa:05:36:e5:a4:69:
65:40:f8:84:da:a2:e0:0e:e9:72:f7:01:96:45:b0:6f:10:e0:
df:9b:f4:15:c0:07:ef:b5:1c:a3:7a:90:4e:90:f2:3b:e6:c9:
c2:d6:80:44:ee:71:6f:22:b3:58:af:eb:1f:8b:73:6b:b7:9a:
00:91:a5:98:7a:ca:19:13:e8:0f:39:f0:a1:7a:58:fb:f0:42:
fd:63:6b:b1:fe:e4:1a:c6:22:b7:3a:5a:72:88:40:63:3a:60:
2f:2d:0a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:07 2025 by rpki-client