Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
File: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft (raw, json)
Hash identifier: MBW74g0cZLXqnmTC1LKHQdc2dL0qR+693JA3F+hbaVE=
Subject key identifier: 74:8F:9B:02:72:FC:0E:54:07:61:E7:11:14:B0:A0:89:E1:0B:F9:A0
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Certificate issuer: /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial: 0197B632EBF4386F9674E6F22A3E9ACCF41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
Manifest number: 1072
Signing time: Sat 28 Jun 2025 11:01:19 +0000
Manifest this update: Sat 28 Jun 2025 11:01:19 +0000
Manifest next update: Sun 29 Jun 2025 11:01:19 +0000
Files and hashes: 1: 3Lwgv8G7H1M7aUpcEvNgmowlLx4.roa (hash: mpBdcgU7I+uQ5H1oVCfF7A1oXC3Ul6uCrit0pbGiORo=)
2: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl (hash: 7L2qq8QCyIHxR9XyQQ5Jx/CJPka9zJWXHJFVP8HjJFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:eb:f4:38:6f:96:74:e6:f2:2a:3e:9a:cc:f4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Validity
Not Before: Jun 28 11:01:19 2025 GMT
Not After : Jun 29 11:01:19 2025 GMT
Subject: CN=748f9b0272fc0e540761e71114b0a089e10bf9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:51:2e:57:ae:32:04:15:09:dc:e7:2b:c9:
0a:ce:19:47:f9:a8:6e:2e:8a:49:97:ca:91:37:9b:
4a:60:fc:ee:f2:e4:7e:b6:86:4d:d8:eb:b1:67:97:
ec:1a:ba:52:5d:fe:e2:8e:a7:7f:c7:da:ce:9b:d1:
49:1c:f9:42:6b:15:da:7e:4c:2f:ab:2e:c8:4d:4c:
8e:99:e4:e8:a4:8b:52:d0:da:5a:7b:5b:b4:2b:b3:
b9:fa:cc:e5:9b:9d:e1:15:8b:b5:55:9c:a9:de:06:
92:2e:4d:7c:99:cd:ae:a2:63:d3:74:54:3d:f7:04:
b2:b4:e8:37:07:a0:e9:0e:56:4b:50:af:b2:4e:2a:
3c:1f:53:72:7f:b2:05:6b:73:0f:f6:c6:0a:71:1c:
0a:27:9b:aa:65:e5:16:03:eb:50:be:a4:66:8b:85:
19:79:05:59:cd:c1:24:62:75:ed:7a:1e:14:54:8d:
64:b7:ed:bb:40:39:ee:a5:99:4d:4f:bb:e6:dd:f7:
ee:be:dc:63:4c:ee:14:9c:1c:e7:97:b3:98:be:43:
39:49:b9:f9:00:bb:81:e7:d4:2b:e8:c7:40:4a:82:
45:30:5e:83:51:c2:90:01:50:83:c4:d7:a5:c9:de:
37:bf:48:7a:5e:47:7a:20:53:23:74:f7:00:8b:23:
e7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8F:9B:02:72:FC:0E:54:07:61:E7:11:14:B0:A0:89:E1:0B:F9:A0
X509v3 Authority Key Identifier:
keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:da:b4:08:79:6e:bd:16:53:d5:b7:99:af:a6:d1:93:e9:61:
a5:cf:a9:bb:95:ae:c2:2f:63:a1:c5:ba:38:4d:ab:7b:e1:1e:
8e:0d:bf:f7:54:47:58:5d:96:92:d8:85:89:6b:cd:a7:87:8c:
f3:79:68:87:6a:ee:20:ea:40:c0:bd:74:0a:46:9f:b9:4b:6e:
6a:cc:28:5c:c2:68:88:34:28:34:80:7c:d5:92:15:6c:16:55:
53:8b:51:e3:a8:af:c0:5f:ef:7f:93:4a:b0:9e:7f:8f:58:e2:
ec:fc:ee:20:7b:b3:0b:00:26:9f:62:c7:dd:c3:bc:4e:c3:59:
87:c6:f0:86:8d:9e:05:6a:36:d0:f9:86:e2:00:c1:a7:a7:15:
40:ab:06:21:bf:76:2e:8d:8c:c2:7e:04:d5:06:da:96:23:3d:
43:12:bc:05:dd:1a:83:65:f7:ee:10:ba:5c:56:53:67:76:dc:
d2:06:c0:8a:53:bc:7d:65:52:47:cf:d8:94:1d:46:fe:f4:d8:
5e:ca:2c:f6:1d:c5:42:95:18:c1:2b:98:d3:56:cc:2c:c1:9e:
93:00:31:6b:d0:73:ef:d7:2d:e7:63:32:cb:ae:ec:b8:5d:1f:
1e:e2:12:29:8b:6f:2c:d5:56:b1:74:c3:44:4b:a7:4f:08:75:
8b:95:b4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:11 2025 by rpki-client