Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json)
Hash identifier: fA17JfuBPpqE7mrCqa681P+OA7sXVoUCmyLvcmnDMqU=
Subject key identifier: 9E:C7:5A:A1:64:73:90:96:88:E1:8B:9F:3F:D8:FF:D1:BA:52:39:5D
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial: 0197CDCD2DD0A4A03AC4DA9B391AC0804753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
Manifest number: 15C0
Signing time: Thu 03 Jul 2025 01:01:05 +0000
Manifest this update: Thu 03 Jul 2025 01:01:05 +0000
Manifest next update: Fri 04 Jul 2025 01:01:05 +0000
Files and hashes: 1: jsXee12bvu-ZP57QT85jN04UL6E.roa (hash: SgymiTyUTEyWZzfgt2pHDPt0K6rPB+UsNgaHx3jCAao=)
2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: r3t13j2eF0dGG+TLTqmGalPyv0LNP8URTjluBEL25qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:2d:d0:a4:a0:3a:c4:da:9b:39:1a:c0:80:47:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Validity
Not Before: Jul 3 01:01:05 2025 GMT
Not After : Jul 4 01:01:05 2025 GMT
Subject: CN=9ec75aa16473909688e18b9f3fd8ffd1ba52395d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fb:d7:d9:57:fd:58:ec:54:5e:b8:65:81:f1:
ef:e0:94:d0:2b:e5:09:78:63:c8:a2:4d:08:e6:c1:
4d:82:f7:f3:48:d5:4a:f5:6b:df:70:83:29:d1:39:
02:ba:ef:68:ec:08:61:ba:1d:fa:0b:9a:34:3f:b6:
8f:15:26:04:43:2b:94:9b:f8:47:e5:75:ac:e1:9f:
88:3e:f5:8c:8f:49:f4:bc:7b:c8:b5:90:18:3c:51:
d5:ff:e0:78:f5:e9:e6:93:60:1c:4b:d0:6b:ad:e1:
77:b6:c9:5f:96:26:7c:34:be:32:0c:ac:52:cd:86:
15:74:6f:4f:7a:f2:62:c8:9f:60:fd:17:02:c2:2c:
8d:3d:c8:d6:6f:23:a2:91:4a:50:dd:66:95:f4:f8:
54:9a:fa:92:ec:c3:70:f7:08:19:1a:d2:16:9c:27:
db:b2:06:b5:f9:65:82:54:5e:bc:a7:4a:b3:85:f8:
0a:77:98:26:2a:b0:41:2c:da:e8:1d:83:9f:b4:0b:
3a:03:59:47:89:81:28:df:8f:50:ed:73:98:a2:cf:
80:aa:c1:d3:17:e7:cb:ce:19:35:ac:bc:13:a4:5e:
fa:21:43:64:a7:e2:15:af:d7:5b:42:43:99:ae:c6:
90:1b:2b:91:f1:a8:2a:3e:50:e5:86:97:32:8b:1f:
e9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C7:5A:A1:64:73:90:96:88:E1:8B:9F:3F:D8:FF:D1:BA:52:39:5D
X509v3 Authority Key Identifier:
keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:89:ff:e6:a1:cd:96:94:46:5c:0d:b0:e5:fc:a2:a3:ab:b6:
0f:bf:ee:ea:ef:7d:d8:04:c7:c0:a6:44:e9:a7:3d:87:6f:55:
68:56:e0:de:c5:81:06:14:5a:3f:73:36:56:61:80:f7:11:6e:
88:ec:95:7a:ec:29:97:63:6f:be:df:2b:ca:b3:a1:75:02:75:
31:78:36:42:52:66:c3:dd:fc:63:dc:8c:ca:5c:95:32:7b:de:
74:3d:ef:08:3f:2b:ec:ca:54:05:c0:cf:77:08:82:5a:37:f2:
d8:b1:16:43:66:6b:71:24:34:04:ea:ca:8e:e1:8a:38:70:20:
e0:b3:52:49:d4:36:50:74:41:23:b5:d3:11:3f:d4:48:f9:07:
a4:38:30:2e:a6:66:0a:3a:40:ab:a2:e1:cc:d6:ba:75:b6:a6:
ba:f3:42:34:51:5d:34:55:7e:53:35:0d:5f:70:33:67:25:a6:
f6:c5:59:df:74:5c:c1:bd:c3:32:2d:b5:ff:99:8d:24:45:3a:
82:bb:4a:d3:5f:b5:c4:eb:92:89:de:e4:b9:35:41:54:55:ed:
15:fe:1b:f1:05:98:bc:31:d4:ea:73:55:cf:a3:4a:55:ea:2b:
da:24:bc:84:11:8e:16:52:31:dc:2f:ef:fa:b5:6c:16:3a:db:
7a:7c:a7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:51:47 2025 by rpki-client