Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: RdxFWOdJTbGhSEIY4tsUNeBbAy8oZ8IXzVMbqGlSREU=
Subject key identifier: 28:2E:85:35:D0:AD:EA:51:82:84:95:3D:23:EB:A2:AE:F8:0D:50:62
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 0197B7451399B81B2635DEBAA20B1CDC3A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 16:00:46 +0000
Manifest this update: Sat 28 Jun 2025 16:00:46 +0000
Manifest next update: Sun 29 Jun 2025 16:00:46 +0000
Files and hashes: 1: LllBFDs2gYBZI_Py2Vbfk71EYWc.roa (hash: jTm21xMBscMU1inWn9X97hwUinpmwWspFNpJiHwAkIk=)
2: wreINdEXrzvFl4TS78nixyXhWT4.roa (hash: BY0i1f9j/EXwIFUv/m6UVc3+37fV7YdiWDXciFmQ0+g=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: mekZmi74O7k8LjR99DBKuHl5BGrEDPA4miobha/RF5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:13:99:b8:1b:26:35:de:ba:a2:0b:1c:dc:3a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Jun 28 16:00:46 2025 GMT
Not After : Jun 29 16:00:46 2025 GMT
Subject: CN=282e8535d0adea518284953d23eba2aef80d5062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0e:d2:0f:6c:14:da:a8:1f:ae:db:f4:fb:2c:
03:39:12:4b:7f:8c:fa:6c:cd:4f:f9:a5:9a:ff:08:
34:c9:d7:f4:e3:e7:6d:6b:6c:cd:ea:60:04:61:61:
ab:82:e5:52:38:fe:1f:45:af:8c:2a:61:ab:68:d5:
ba:54:e3:aa:db:91:dd:82:a3:79:f6:22:47:a5:08:
7d:4f:de:8f:1a:19:54:5d:13:ca:b6:a7:2d:dd:ff:
e4:e2:56:e2:25:97:ec:ce:56:76:ba:68:89:c5:0d:
32:03:35:3b:dd:0a:a8:65:2d:ca:ce:f8:f8:ea:f7:
22:b8:6c:22:28:59:db:a6:e4:40:f9:da:d5:58:f7:
c3:43:ff:9f:fc:32:54:b2:94:50:a3:4e:ca:21:bb:
eb:f0:ac:56:e1:a8:3e:2d:af:a6:77:16:e1:9d:71:
31:bc:7b:2f:fa:e1:0e:6d:c0:9a:d5:8d:ed:b2:ea:
e2:3b:3b:06:9b:dd:7c:20:99:00:0b:c1:ce:e3:81:
85:6a:68:a3:51:43:29:c3:27:25:d8:54:20:b2:0d:
91:f6:a5:45:e8:cb:56:bd:ac:6f:94:42:56:c0:0d:
54:b1:d9:fd:c3:da:4a:13:7e:aa:23:bd:8a:b9:b1:
0c:9a:89:ed:50:f6:8b:fe:4c:cf:e7:ce:38:ea:68:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2E:85:35:D0:AD:EA:51:82:84:95:3D:23:EB:A2:AE:F8:0D:50:62
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ae:58:ce:ec:e0:26:23:94:25:de:03:0e:e1:05:91:21:83:
af:e5:7f:e7:d4:34:94:5e:3d:02:92:fc:0c:6a:e1:93:94:e4:
46:c2:96:a5:b5:c8:5e:1d:73:2c:c5:bc:42:3e:f7:91:c1:33:
22:3c:af:03:41:f0:e1:b0:d2:1d:af:ea:07:c1:95:e4:2a:6e:
ec:5e:03:b3:77:ac:79:61:1c:48:8b:9d:5c:39:1c:23:1c:e7:
f4:9e:ed:59:10:8c:f1:16:e6:9e:33:84:d1:2d:7d:15:bf:2b:
50:7c:92:d0:bc:93:6d:c7:90:9e:2d:98:04:84:a4:85:e4:30:
d3:dd:65:78:ed:0b:1e:c0:8d:01:b6:54:1f:d3:35:24:5f:e2:
99:97:48:75:7d:62:81:ad:a2:2e:98:5d:ab:4e:70:55:96:d1:
e5:f9:8a:b0:30:4a:20:c3:23:db:f3:3e:98:08:62:01:11:1b:
8a:a1:bb:81:d8:2a:01:0b:26:b2:ce:4d:8d:79:ad:3e:88:c3:
23:44:ea:ea:a4:07:08:8b:f9:e6:93:f4:01:2a:ad:85:cf:ea:
2d:dd:8a:d1:9b:dc:c6:96:fa:20:61:04:01:f0:42:9f:80:d6:
f8:48:9e:0b:45:f6:ab:c2:88:f1:4a:fe:1a:6b:e6:3e:f3:89:
98:89:0a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:10 2025 by rpki-client