Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: BO7HwKYeFAJOJxSaVrvEWH1Npv+U4dBMtLAGniTSa04=
Subject key identifier: EA:B7:36:9A:B0:C5:EF:7B:43:7E:71:EE:81:70:45:25:3F:EF:50:EB
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 0197B70E7A2CFA9B1E0091CD326EAE78A65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 0421
Signing time: Sat 28 Jun 2025 15:01:08 +0000
Manifest this update: Sat 28 Jun 2025 15:01:08 +0000
Manifest next update: Sun 29 Jun 2025 15:01:08 +0000
Files and hashes: 1: 59Mn6Fq_ztW3ZpObO3_epXiDhpk.roa (hash: cp+rR6j5Vo4FlHwAzBmhQ3KTx+zcyZnQHkQLzqefDBI=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: Qnt+tJ2trSsZ5FsRzkBXZl0X4F7Xw4YhxLzq5do7Ujo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7a:2c:fa:9b:1e:00:91:cd:32:6e:ae:78:a6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Jun 28 15:01:08 2025 GMT
Not After : Jun 29 15:01:08 2025 GMT
Subject: CN=eab7369ab0c5ef7b437e71ee817045253fef50eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:76:a1:b5:ca:7c:44:83:83:fe:1f:8d:dc:
44:2b:85:4b:77:12:2b:7a:90:17:4d:b0:c5:38:31:
79:42:87:0c:9a:c2:04:c1:7e:c0:38:95:ce:21:79:
da:f9:5f:08:43:da:36:f7:bf:4e:b1:d9:90:b8:a9:
cd:48:0b:e6:3c:2a:58:05:14:5e:a1:3a:67:65:a9:
0a:7e:de:83:e3:f6:09:b2:68:44:c4:f4:d9:17:3f:
09:5e:01:f4:52:78:f9:5c:ff:6c:68:da:9b:d4:7f:
0e:d7:6c:20:74:20:df:c2:1b:9c:34:81:d1:5e:56:
51:6f:b8:44:4e:b1:cf:df:df:40:11:f0:49:09:71:
42:ee:71:02:b6:6d:3b:6b:c1:fe:19:74:e2:46:fd:
12:56:15:30:4f:ec:46:e5:cf:9d:c3:ad:7e:e0:42:
8c:ab:47:58:8c:16:b2:06:fe:63:4d:85:ad:85:7a:
d9:9d:89:7b:18:30:1c:af:75:3c:1f:06:21:cc:1f:
0f:46:9e:cf:0a:5d:d4:46:bb:d7:a5:3a:cf:11:5d:
75:d0:42:08:94:45:a2:3c:03:00:e7:04:f7:6f:23:
87:4e:5e:92:bf:b9:42:4a:5c:88:0d:28:3a:b8:f6:
2c:8a:a7:27:7d:96:1a:af:fb:2f:15:34:f0:e5:1d:
af:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B7:36:9A:B0:C5:EF:7B:43:7E:71:EE:81:70:45:25:3F:EF:50:EB
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1b:8c:95:78:7d:94:6d:8e:b4:ae:55:a0:7e:4d:62:65:84:
5c:c7:ca:e3:8a:d4:7f:7e:49:57:3d:5e:2b:f0:48:ce:93:8e:
f8:a2:f5:28:ed:e0:e2:ec:bc:94:f5:98:c9:1b:fd:a5:ee:a5:
25:cd:c5:ee:b7:73:cd:d3:7a:0d:95:4c:93:76:98:55:de:e2:
b9:61:0d:ed:10:d9:14:ec:b4:b0:e8:9e:5a:e4:4f:11:0c:64:
65:4a:28:08:bc:f0:49:a3:77:be:ae:2b:ba:3a:92:52:46:cf:
b7:aa:d6:88:c6:cd:d1:48:29:40:5f:48:00:41:06:d8:ca:1c:
72:d2:56:65:d8:5f:44:ac:00:50:d4:bf:6b:88:e1:a9:6b:a3:
52:02:03:88:8c:a2:d0:47:f0:9c:b6:1e:23:6b:b6:b3:83:b5:
fe:09:02:f7:34:eb:07:c8:0d:da:f3:73:ee:c5:36:c0:aa:27:
a3:e9:9e:d5:25:09:70:3f:6a:a1:ab:21:d6:f6:e5:97:84:8a:
c2:6e:44:98:d2:bb:6f:6b:53:5d:91:1e:01:55:a7:ef:f4:7e:
ac:47:81:19:48:46:2a:ee:7e:22:29:d4:1d:05:09:c9:7f:46:
4c:18:79:dd:19:9d:92:50:ea:37:3f:d7:ad:24:65:b7:e2:c8:
1e:c2:e5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:50 2025 by rpki-client