Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
File: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft (raw, json)
Hash identifier: OPGiQTehqWoxyS1DvkntZl1L/IiPJZGJuiZHbeFFLsw=
Subject key identifier: D5:C7:FE:EE:82:F1:A5:CD:E4:1F:15:4A:CC:C3:11:37:79:E4:CD:8D
Authority key identifier: C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
Certificate issuer: /CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Certificate serial: 0197BAB46B08FDCCD3705125C1213B788B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
Manifest number: 04EE
Signing time: Sun 29 Jun 2025 08:01:15 +0000
Manifest this update: Sun 29 Jun 2025 08:01:15 +0000
Manifest next update: Mon 30 Jun 2025 08:01:15 +0000
Files and hashes: 1: IiIPmmM-nxlvi6X_BDwclVK8nN4.roa (hash: 70bCr4c8aponltkSleoGsfNe8bySTBqaNCakdvrbnEM=)
2: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl (hash: o5Mc02jqSoQuYaZaeF+b/fDncLuk9rvq2XO/QBAlHLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:6b:08:fd:cc:d3:70:51:25:c1:21:3b:78:8b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Validity
Not Before: Jun 29 08:01:15 2025 GMT
Not After : Jun 30 08:01:15 2025 GMT
Subject: CN=d5c7feee82f1a5cde41f154accc3113779e4cd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:55:6e:e9:8c:30:c8:90:16:0b:aa:63:1c:
77:4e:51:65:ef:86:bc:ab:35:74:a3:a2:5a:27:f2:
ec:0f:68:89:4a:aa:dc:3e:e9:b6:62:dc:f2:56:66:
11:f2:43:8f:33:e3:8e:2c:87:0a:a6:78:fe:39:7f:
b6:fb:4b:d6:66:d2:00:c2:7d:cc:2e:6b:1b:09:85:
34:58:bb:55:72:aa:ed:51:a9:5e:2e:2e:42:85:50:
e6:a9:ca:e1:cd:7e:d9:9c:09:cf:45:c9:c6:fd:de:
ee:07:2d:c5:18:8e:bf:f2:7b:51:6c:62:4c:04:bd:
78:72:7c:4c:0d:43:8c:b3:81:9a:3e:0d:d1:f2:e7:
53:d8:2e:24:26:35:52:0f:67:72:7a:62:c7:5e:a3:
4b:8d:fd:d2:e5:25:a8:f0:cf:96:3c:93:7a:51:83:
7e:34:5f:71:18:9a:fd:20:70:59:d3:cd:48:2c:3e:
01:d7:ea:f3:bc:cf:a6:de:ce:ee:2d:af:e2:4d:8f:
d9:47:a3:f1:c9:b2:6d:40:8a:dc:78:2a:05:fc:07:
79:cb:09:37:ab:a7:db:18:ef:37:66:2e:28:32:ab:
4b:62:ab:05:9c:8c:ec:fd:5d:43:e0:75:58:26:e2:
02:c2:eb:83:68:41:52:c0:1e:c5:05:c3:fb:1c:b1:
63:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C7:FE:EE:82:F1:A5:CD:E4:1F:15:4A:CC:C3:11:37:79:E4:CD:8D
X509v3 Authority Key Identifier:
keyid:C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7f:3d:d6:b2:a2:26:5f:df:74:74:ac:9a:41:eb:7b:a1:31:
2d:22:d5:1f:f0:51:b4:dd:8e:32:f3:1d:9a:80:19:00:78:5a:
83:96:92:c4:75:78:04:28:9b:49:ba:2b:57:03:f5:5e:04:6c:
f7:43:19:7a:18:af:97:94:9e:f4:c8:ce:3c:8c:fe:99:09:ef:
7d:d4:52:86:30:be:3d:13:95:59:5a:cd:cf:3b:0d:86:b0:e4:
82:f4:f2:4c:e4:a9:8e:38:b9:96:b0:5f:e0:e8:c8:b7:26:a5:
b1:05:ec:19:b5:cb:8e:49:ad:ef:1d:3a:38:74:88:75:4e:f9:
d1:1d:cb:f2:23:1b:9d:fb:48:22:ae:cb:ca:19:da:b0:9e:27:
df:0d:dc:34:55:07:37:51:92:b6:99:4b:2e:a0:55:60:cc:88:
4f:cd:b5:92:0e:8c:3d:e5:41:69:97:ba:f4:5d:2d:70:8c:71:
23:dc:a5:f8:26:79:92:7b:99:80:32:e8:60:a2:69:41:af:87:
d4:81:ee:3e:28:36:74:7b:07:a6:57:b4:e5:02:02:4c:b2:9d:
3c:f5:2e:0a:29:72:21:b3:4d:dc:06:71:03:36:7c:b8:18:ab:
7c:3c:2e:bc:9c:cf:d1:e7:59:61:9b:8e:d6:a9:5c:9d:fe:ed:
57:6a:fd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:57:51 2025 by rpki-client