Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
File: xVCFAF0ORJ07r6McXLQp_4nSxLc.mft (raw, json)
Hash identifier: mGSmzIYGJw38+TPaY4g97TjJeE+V2ayWyEcLQ29Z2L0=
Subject key identifier: DB:E0:85:F0:40:F8:BF:AF:A8:5A:F2:5A:E7:B1:C7:2A:3E:27:3D:D7
Authority key identifier: C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
Certificate issuer: /CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Certificate serial: 0197B7EA7DFC9BFAEEDDEAD1FFB38B0B4A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:27 +0000
Manifest this update: Sat 28 Jun 2025 19:01:27 +0000
Manifest next update: Sun 29 Jun 2025 19:01:27 +0000
Files and hashes: 1: qW8p1VoO0rmUxSBMMtwtZyhbaDM.roa (hash: qyIGTJ6GSXvozvgOJxEgitWAj9Fu7yaT8GLFsC9Ti8Q=)
2: xVCFAF0ORJ07r6McXLQp_4nSxLc.crl (hash: KgSwMYNgmfJPVXmfBFR0C67+fqv652k3sRrIdRKpDV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:7d:fc:9b:fa:ee:dd:ea:d1:ff:b3:8b:0b:4a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Validity
Not Before: Jun 28 19:01:27 2025 GMT
Not After : Jun 29 19:01:27 2025 GMT
Subject: CN=dbe085f040f8bfafa85af25ae7b1c72a3e273dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:6f:13:77:1f:7d:c8:c1:6a:e7:26:c8:85:
5f:aa:13:15:ee:20:ea:eb:67:79:ae:1b:5c:c2:10:
57:b1:c0:3d:53:df:26:79:4b:3d:7f:c8:ff:0a:05:
f6:69:00:c1:b4:79:44:ee:ef:26:43:f6:ce:6c:d7:
9d:2e:26:2c:4e:e5:4e:cb:8f:f1:96:ed:e2:0f:be:
37:c4:66:cf:a1:d2:40:39:8b:4a:cc:f0:ba:7a:b4:
24:9f:8b:40:8d:0a:4c:5c:25:79:c1:77:6f:60:b2:
72:b6:8b:ef:56:62:9a:85:76:46:18:43:b9:37:a6:
ab:f8:91:35:11:83:f6:e8:66:8b:d7:fa:e0:71:43:
f5:ba:cb:24:ae:52:b1:84:45:e3:8a:02:8c:16:7b:
b1:11:50:19:9c:98:38:c3:78:10:cd:68:67:8a:cc:
8b:c3:67:df:02:83:d3:5a:5e:44:ae:74:9e:26:2f:
69:ca:52:88:f6:94:d0:61:01:4b:35:f7:1c:f6:7b:
c3:fc:fd:19:a4:e5:c0:70:9a:ef:dd:78:e8:9a:3b:
85:f2:ee:46:45:90:b4:1f:53:02:02:f0:6a:20:8e:
b8:dd:76:9d:43:3e:38:d1:32:bf:c9:e5:da:12:6e:
f4:52:24:24:62:db:c8:17:b7:2d:54:9f:a8:a2:3e:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E0:85:F0:40:F8:BF:AF:A8:5A:F2:5A:E7:B1:C7:2A:3E:27:3D:D7
X509v3 Authority Key Identifier:
keyid:C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7c:fb:83:af:31:ac:bd:45:2c:85:54:c2:1f:23:6e:f3:40:
5b:15:c2:c0:8f:69:34:73:30:d1:bc:35:ab:e8:a0:b1:39:06:
d1:f5:74:8a:d2:46:16:f2:a3:b7:86:bb:cd:16:c6:c7:c2:ea:
7e:1c:d2:e7:e2:be:01:4d:b6:fe:6c:0b:d0:b2:6e:16:37:55:
c8:9e:ba:1e:32:2f:9c:59:b8:f9:99:93:73:9d:6d:43:2c:72:
9e:99:3b:df:06:16:e1:97:3c:4d:7c:94:94:70:77:37:44:5d:
c2:70:89:e7:c0:af:52:61:d2:3d:67:94:d9:3b:52:99:47:3f:
3b:53:10:22:0f:d9:2a:01:85:da:10:50:76:d2:5f:9e:3f:9a:
79:a1:02:28:e8:77:87:4e:ed:c0:5e:69:bb:5b:3a:60:7c:4d:
0f:34:4b:91:50:87:a7:ed:ba:c5:3c:7f:3f:c2:41:58:fe:bb:
5f:51:7b:95:25:df:eb:c4:3b:f9:e6:27:d7:88:09:84:5a:30:
8d:51:03:52:33:9d:04:66:eb:68:3a:12:56:0f:af:40:01:ef:
4c:cb:0f:5b:52:7c:61:d2:f0:99:09:3e:ef:9a:db:aa:c7:3d:
9a:67:11:ef:57:8e:c6:c5:34:cf:f8:8e:2d:66:af:64:95:0d:
ab:26:a2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:53 2025 by rpki-client