Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
File: x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft (raw, json)
Hash identifier: XKnQQW6e6WnJpfUT2OZp589WMiskZE3EEejk/V+lV14=
Subject key identifier: BC:90:49:45:7E:2C:63:67:20:22:B0:77:D2:05:3C:77:B8:79:C2:3C
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial: 0197B6A243E20261465BA8746FFCE36208EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
Manifest number: 13B8
Signing time: Sat 28 Jun 2025 13:02:56 +0000
Manifest this update: Sat 28 Jun 2025 13:02:56 +0000
Manifest next update: Sun 29 Jun 2025 13:02:56 +0000
Files and hashes: 1: BmvH7Z7uqcJeleMQ8G7clQImys0.roa (hash: lHLdYcAsPsm30xzIk5bUgfaHNZnvFrDG5BK0e9ZCPyo=)
2: x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl (hash: Z5rTXBgs2iJ56Z/2c1NlkOtLmj+o1YPmN7WR1vpJy50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:43:e2:02:61:46:5b:a8:74:6f:fc:e3:62:08:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Validity
Not Before: Jun 28 13:02:56 2025 GMT
Not After : Jun 29 13:02:56 2025 GMT
Subject: CN=bc9049457e2c63672022b077d2053c77b879c23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:5e:00:d3:93:9f:ff:a2:e1:1a:63:00:e9:
15:07:5f:1a:3b:64:97:f9:5d:08:d8:e2:c9:57:2b:
85:27:48:1e:d5:32:54:78:1d:56:fa:80:23:cb:cf:
e5:62:2e:ce:35:b3:94:88:a9:b4:24:b4:f8:85:42:
5e:a4:5f:71:e4:ff:03:34:55:41:c2:b7:34:d1:08:
90:5d:3c:53:f6:98:29:50:b9:a5:5d:70:18:12:ed:
93:47:02:52:c0:90:9e:2d:49:9f:52:b2:15:6d:17:
88:35:8c:21:c3:9c:e2:dd:88:98:7c:22:aa:36:7f:
d1:ad:cb:05:74:4c:c1:2f:66:42:d5:a3:b5:d3:5c:
f2:44:99:18:9c:a7:2d:97:7e:f0:b9:5e:2e:a2:a0:
c4:07:1f:87:cd:d9:69:77:05:0d:56:7d:d1:da:b5:
b1:92:44:25:ec:7a:d2:2b:32:7f:af:35:29:0d:4d:
75:ad:48:ce:ff:35:5c:fd:85:09:fd:b4:b1:06:38:
b6:2a:16:aa:f1:b7:71:61:5e:78:a2:5c:a4:70:cc:
de:b6:c4:48:6c:7a:90:90:57:6d:b0:c1:a5:46:fb:
31:ea:8d:6c:6f:4f:0e:a8:e7:f0:5f:ee:94:37:d3:
d7:77:24:48:14:e6:49:54:57:1c:f9:a2:bd:2e:31:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:90:49:45:7E:2C:63:67:20:22:B0:77:D2:05:3C:77:B8:79:C2:3C
X509v3 Authority Key Identifier:
keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4b:79:71:3e:b6:b1:80:c5:ae:76:81:3c:1d:45:a5:2b:75:
cc:ef:bf:44:dc:50:81:b1:b2:a3:fc:ef:6a:a7:e6:57:dd:0c:
02:ef:e9:05:d0:0e:86:7b:71:ce:4e:ed:9d:24:58:df:bf:b9:
20:3e:f1:9a:6e:41:cf:df:64:2e:32:06:86:0d:a1:7f:f4:be:
c8:42:a5:cb:61:2d:ee:9d:08:62:46:7f:1f:75:4e:93:fc:a3:
29:00:7c:46:25:93:ea:0d:1e:0c:14:70:b9:9e:5e:62:c5:83:
85:d4:e1:6e:60:80:9c:79:33:4e:df:aa:b6:de:65:af:52:15:
03:52:38:f2:4d:73:d7:80:6c:f1:7e:58:52:fb:b7:5a:69:7b:
38:fc:ff:5c:06:13:d1:b0:ee:79:27:e5:33:c8:ce:36:80:84:
07:35:8f:fd:fe:47:27:9c:27:aa:0a:3e:70:75:c9:81:08:07:
8e:ba:c7:a0:69:0a:e5:5c:10:94:96:5c:e1:9e:78:b8:28:ff:
84:54:70:a8:3b:c6:75:80:3e:49:97:a3:a1:01:ec:9e:d3:28:
92:65:3a:92:41:65:e3:fa:a7:d9:8f:59:bf:a5:01:17:b9:37:
c3:35:b4:ba:23:e5:f6:1b:45:8d:4f:2e:61:d6:25:b8:9d:5f:
83:40:be:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:02 2025 by rpki-client