Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
File: xW0hVO1TtinYcrKjjZzQQb20sSg.mft (raw, json)
Hash identifier: 0492B7sjiDzLrWN9KCSUwiGIg6OXe6fAXrevl/zFAAg=
Subject key identifier: F2:27:B3:0F:B6:5E:84:40:6B:68:DF:79:0A:73:65:03:28:CC:FE:32
Authority key identifier: C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
Certificate issuer: /CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Certificate serial: 0197CBE03765E6C17B01BDF852B6BB81E19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
Manifest number: 0933
Signing time: Wed 02 Jul 2025 16:02:38 +0000
Manifest this update: Wed 02 Jul 2025 16:02:38 +0000
Manifest next update: Thu 03 Jul 2025 16:02:38 +0000
Files and hashes: 1: LGIjR37T32om32PNGVlywqITYQM.roa (hash: PDrBaXBEFkBMQXE+r+pZdqQOvhiNvqlNo622ZzA4QS0=)
2: h3E3zuaVe9Fd-K2eeSfreUoqzxE.roa (hash: zkBB1N0MG6XqITCSMbDyxtWFtXhvrbfgV/J1jxkBcRM=)
3: xW0hVO1TtinYcrKjjZzQQb20sSg.crl (hash: KS1dClNalN76jjeqkN17Y6O8zKr4svXkaRgfp/cr/Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:e0:37:65:e6:c1:7b:01:bd:f8:52:b6:bb:81:e1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Validity
Not Before: Jul 2 16:02:38 2025 GMT
Not After : Jul 3 16:02:38 2025 GMT
Subject: CN=f227b30fb65e84406b68df790a73650328ccfe32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:04:6a:11:e4:3e:8c:ef:48:76:95:18:46:
2f:bb:c5:67:f5:65:ef:fb:12:bc:38:d1:a0:e1:47:
8a:67:a1:51:47:80:ff:1c:d0:91:d4:e4:e6:e1:11:
34:04:ec:07:c7:42:df:40:6a:97:f9:54:9d:91:81:
73:54:a5:9e:b2:be:6f:1d:a0:0f:ef:7f:d8:d5:c8:
11:e3:11:41:17:ef:d0:c1:39:41:18:8e:04:37:0c:
e0:05:47:cb:fc:4a:d1:7b:4c:87:87:08:0f:55:8c:
8b:64:74:71:b1:d0:3f:62:46:72:4a:19:ea:80:94:
35:46:5a:4e:86:7a:a3:2c:0c:09:e0:94:bc:e0:84:
9e:47:43:9c:8f:02:f2:f7:cc:0d:2b:92:d4:55:26:
4e:c1:46:4b:5d:cb:a4:4c:4a:13:f6:5d:96:40:94:
ea:82:9a:82:5b:1b:86:4f:a2:35:90:c0:fe:2c:22:
78:5c:74:e5:4a:3a:e8:8f:0e:5e:18:d2:8f:e6:8f:
5d:47:be:05:a9:52:05:ce:24:79:05:a8:5a:b4:d6:
4c:d9:aa:4d:f3:8e:db:c2:eb:f1:86:5f:dc:6f:45:
a2:ca:b3:4c:19:95:ca:d7:8f:4e:d8:01:b0:29:fe:
be:ae:d2:31:dd:e6:58:30:31:fe:00:ee:a8:dc:c0:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:27:B3:0F:B6:5E:84:40:6B:68:DF:79:0A:73:65:03:28:CC:FE:32
X509v3 Authority Key Identifier:
keyid:C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ed:36:6f:c1:98:85:d1:9f:3a:c1:eb:3e:d8:25:7d:03:6a:
b0:7a:25:e5:57:8a:da:0b:8a:4f:57:8f:6a:88:e7:52:5c:11:
3b:cc:8f:62:fb:71:17:78:7a:a0:69:29:9b:f0:c3:2a:46:ae:
e6:c0:20:4e:aa:a8:92:69:ec:a4:c8:3a:c8:89:5e:af:69:d2:
f5:5d:cf:9d:18:c7:1c:b1:24:e9:8d:3f:4f:5e:98:af:be:50:
e0:be:d0:66:42:1f:c6:fc:fa:1a:a8:d4:a6:5d:04:69:63:45:
b0:2e:84:b9:ea:51:27:b1:bc:ab:be:57:ab:8e:dc:6a:1e:7a:
16:19:ab:ca:c1:8f:19:91:96:6a:91:a9:96:8b:ef:1e:42:6f:
7d:3b:3e:f9:04:8a:4e:18:c8:f2:bd:af:8f:1b:07:92:e6:62:
e8:39:37:1e:05:c4:ea:21:b3:a0:1c:83:d3:1b:55:aa:ba:c1:
1e:7e:11:8f:93:67:f5:a8:fd:21:d1:93:80:64:44:5a:47:0e:
fa:38:d6:4d:5b:b8:fe:12:7f:b7:6c:a1:aa:e9:cf:cb:3d:6e:
bf:40:6f:44:28:35:62:31:17:fa:f6:cd:15:d9:85:a6:08:6f:
22:cd:ad:51:33:20:3c:9a:4c:ae:b4:ec:1f:7b:6a:ef:30:e0:
3f:1a:97:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:15:15 2025 by rpki-client