Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: QZrMSLtf3PJtvMXjM88B4hCuimP+V8YKSBy+3rdF6Fw=
Subject key identifier: AD:49:50:04:3C:82:A7:6C:49:EB:79:56:13:C8:E7:B4:4D:1D:5A:4F
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 0197C4263D367D35EBADF3A6F8A5073BDBF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 15BD
Signing time: Tue 01 Jul 2025 04:02:09 +0000
Manifest this update: Tue 01 Jul 2025 04:02:09 +0000
Manifest next update: Wed 02 Jul 2025 04:02:09 +0000
Files and hashes: 1: PbaQDOw99sbMqST1_6GFgBuET80.roa (hash: z/Z68ylDK98w4Ux4hRpw7BRYSr2koQbXP7ZWYLEFwCQ=)
2: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: nzAPUc86dVnrJce5nUV8fOKzr9C9BNksljD0EXVLfr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:26:3d:36:7d:35:eb:ad:f3:a6:f8:a5:07:3b:db:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Jul 1 04:02:09 2025 GMT
Not After : Jul 2 04:02:09 2025 GMT
Subject: CN=ad4950043c82a76c49eb795613c8e7b44d1d5a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:15:2a:48:a2:87:67:c7:f2:06:a9:61:40:
f9:fc:be:3c:5d:95:17:8b:34:68:a7:6a:88:c2:42:
78:ea:10:d1:f8:7f:e5:89:88:58:54:be:3f:48:71:
c8:32:15:93:6b:0c:d1:c1:7b:a1:d1:39:c6:4c:5a:
87:f5:e5:1f:14:fd:74:72:3f:e6:87:35:cf:e2:31:
76:9c:5f:79:f1:d8:1a:43:e7:1d:f3:ef:ab:dd:32:
36:32:1f:a9:4c:30:c6:64:8c:2e:68:de:f3:a4:57:
49:aa:69:28:58:de:89:56:c2:73:be:44:05:76:d9:
f9:0e:9e:c4:d3:bc:54:23:f4:d5:38:0c:12:8c:7e:
cd:f7:9f:4a:b5:b1:2f:3b:68:2e:d7:5a:68:3e:5b:
7f:b0:65:97:20:47:73:eb:90:1f:55:78:75:da:e3:
10:8f:42:9c:fb:f4:d6:d5:a3:67:ca:14:59:69:05:
a0:96:77:58:e2:39:ce:2a:4b:f8:e3:15:00:fd:f9:
98:75:f4:a4:6c:c5:27:ea:ef:cc:73:4c:d3:4e:69:
5d:ed:6a:fe:32:60:9c:38:55:7d:32:49:05:e6:1d:
df:af:ec:d8:a4:e1:7b:a5:00:09:36:8a:23:12:01:
f7:05:df:cf:c7:db:5a:47:e8:c1:33:25:ac:1c:e1:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:49:50:04:3C:82:A7:6C:49:EB:79:56:13:C8:E7:B4:4D:1D:5A:4F
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:05:0e:d2:9b:2a:0e:83:9d:ed:9a:b8:31:03:64:86:8d:36:
b0:fb:18:23:0e:8c:2b:40:28:85:a2:12:1e:d4:6e:65:94:88:
67:0b:4a:5f:b5:34:f7:c3:83:25:b4:05:59:3b:8b:b8:82:76:
fa:93:dc:58:f9:2f:04:26:a7:c9:e9:09:92:b2:bf:a2:8e:4f:
55:69:8c:94:fd:49:54:ba:17:b7:7e:33:0f:34:41:cb:b1:63:
ff:27:98:81:3a:61:1b:df:56:62:3b:3c:a2:09:07:86:d3:cc:
72:30:e2:f5:86:b6:db:6d:a1:e7:59:5a:71:1b:42:20:83:4c:
d2:3c:9a:12:23:53:f2:8c:ad:35:71:f6:60:8e:7e:e9:48:de:
42:7b:ab:b5:dd:a6:79:50:b7:1d:61:5f:b0:a7:e2:33:c5:b8:
89:cd:81:f9:c8:f4:f6:99:de:63:cd:b8:8d:8b:57:e8:07:92:
8b:3a:17:2c:b2:16:91:a4:89:9e:07:4a:e2:80:d8:97:5a:1f:
f2:0d:06:18:4a:32:41:cf:b8:5f:79:58:67:ab:04:21:88:6e:
ac:db:6c:d6:68:ca:ad:b5:9a:ab:b3:1c:b9:64:84:c4:4b:a6:
53:36:4e:dc:83:26:4a:ae:e4:f3:b3:a6:6d:bb:e3:3b:fc:68:
fb:d0:a2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:49:03 2025 by rpki-client