Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: TOvh9dB1+7rJcup2WweIWHUqWQWvm4YGDLyG0iTBHB4=
Subject key identifier: C1:32:C3:8E:89:84:3C:7A:0A:60:34:15:B7:C0:0A:84:D3:B5:15:72
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 0197B6A04818CCE8851B7457239E2AA97804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 13:00:46 +0000
Manifest this update: Sat 28 Jun 2025 13:00:46 +0000
Manifest next update: Sun 29 Jun 2025 13:00:46 +0000
Files and hashes: 1: 1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa (hash: mKtZwD+iuzmAhkLKZ2UYytr92oY2lNBDkGBNEW7xkLg=)
2: Et3EjfyShVqsXEJ0-il-9h75pBI.roa (hash: 7NwgLcL7u8H9AHMShaODStUwLh9+b7vWHMW72q0np80=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: NqZ4kt33DD2FAgapA8fOLkFF8tx9SDQZ+6Hfc/ypeUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:48:18:cc:e8:85:1b:74:57:23:9e:2a:a9:78:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Jun 28 13:00:46 2025 GMT
Not After : Jun 29 13:00:46 2025 GMT
Subject: CN=c132c38e89843c7a0a603415b7c00a84d3b51572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:e9:0c:ee:32:f3:f3:74:60:70:44:dc:37:
0e:a4:96:e3:bb:33:16:9d:1c:b9:f9:a3:29:8e:4d:
8d:1e:fa:88:35:f5:5d:e9:67:12:63:d9:d4:03:61:
7c:77:18:3f:fa:a1:ed:5e:e9:cf:dd:a3:3c:41:97:
3b:6a:71:71:82:51:d9:4f:cc:d1:49:8e:36:1d:bd:
9f:d2:07:2e:7e:00:30:5a:fc:9d:62:4a:f5:51:ab:
20:74:96:6f:e1:f9:de:ff:1c:e8:a3:b9:08:00:46:
2e:25:11:92:f6:17:f0:64:86:8a:ef:e3:7d:3d:b2:
ab:7f:44:7b:64:21:7b:7f:bf:36:71:89:2a:14:6a:
12:e0:96:d9:6e:a9:fa:45:4c:7b:0b:b0:a9:42:c9:
ba:53:cb:89:da:77:10:c4:fe:f8:83:f9:c5:c3:bc:
e1:33:f9:02:95:8d:10:46:5d:57:c2:55:07:1c:12:
b0:56:39:2d:cc:6a:0e:f6:0a:aa:56:2a:a4:3d:a0:
ac:82:cd:78:e5:c0:40:b0:30:21:96:11:9b:e5:86:
9e:45:a4:44:0a:43:95:f1:da:cc:e1:67:93:79:c8:
e8:5e:9c:4a:6b:fe:12:20:c3:1f:cb:6b:65:a9:73:
6c:11:23:51:29:cd:c0:66:df:c5:dd:56:ad:94:3d:
5b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:32:C3:8E:89:84:3C:7A:0A:60:34:15:B7:C0:0A:84:D3:B5:15:72
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:56:cf:ff:ed:0b:fc:dd:05:fe:91:4c:5f:c4:a5:66:93:8e:
b3:b6:b6:86:c1:4a:ce:b0:e4:ee:ef:a8:a5:87:04:b6:6b:44:
43:94:96:da:2d:bb:3c:d1:99:80:a3:9f:b2:de:c3:13:74:1c:
93:34:f5:55:5b:f2:c8:21:1b:5b:fb:f9:e0:56:b7:a4:d7:09:
86:8b:09:34:d0:3e:be:46:13:0f:0c:fc:8e:06:09:c6:42:28:
d1:17:f4:92:a9:f2:0c:93:a7:70:16:13:40:60:0b:45:27:0b:
83:06:cf:6d:0a:22:5e:1d:6d:58:26:16:1f:10:f3:d7:16:a6:
c5:5e:bd:71:41:bd:cc:aa:64:1d:7c:f5:0e:c5:8c:9e:58:bb:
12:d1:85:58:7c:38:93:c9:9b:0c:04:a6:2b:9a:3d:3e:c0:fc:
d9:49:3e:10:76:fa:17:36:5b:62:9a:73:44:09:33:d7:3e:8e:
6e:b8:69:18:ac:46:0c:ee:92:3c:58:bc:e2:4a:c1:be:22:68:
c3:09:ec:f7:95:e0:b5:ba:95:cd:9f:cd:f4:cb:92:d5:7a:eb:
5e:8d:94:54:83:77:98:c3:07:ed:bc:62:ba:ed:18:dc:40:7f:
fd:1e:db:6b:14:c6:60:08:f5:3e:43:58:99:63:30:7c:8e:9c:
50:c5:dc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:00 2025 by rpki-client