Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: BZnTZQrI6zfC34zMPp0AtxrXiXUGmS3HRRJMSFS1Fc4=
Subject key identifier: 86:3F:36:66:76:4F:C1:80:84:8D:45:4F:AE:66:5E:CC:B8:97:64:F4
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 0196C4CC425BE4C3F5B7B35564D5787A9C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 14:00:42 +0000
Manifest this update: Mon 12 May 2025 14:00:42 +0000
Manifest next update: Tue 13 May 2025 14:00:42 +0000
Files and hashes: 1: BkoOf_uIORKFRdieYZeXGcLC6dQ.roa (hash: xIbcujmFBa2hNw0aSpYX+/p8gEohM1cZhtEYemHWSZY=)
2: wLU7Avpjwwyht_SeRmMxUJPBxKU.roa (hash: qyTPwsJWIqpmw5jM+jwATaIOl6TIhuH+//rg/QLmAbQ=)
3: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: 7ly9DLqM/nbmhD5Lvm/MyWWKQufQ58Y7doPsDOq9m3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:42:5b:e4:c3:f5:b7:b3:55:64:d5:78:7a:9c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: May 12 14:00:42 2025 GMT
Not After : May 13 14:00:42 2025 GMT
Subject: CN=863f3666764fc180848d454fae665eccb89764f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:a2:76:62:97:36:ca:1c:ec:a9:9d:6c:a3:
a6:91:92:68:15:86:21:0d:8b:0f:0b:82:b2:f1:1a:
33:be:7c:cf:d7:cf:01:b6:44:55:dc:63:75:6a:f3:
16:c2:7b:f1:7e:a4:16:c4:0c:6a:73:d2:6a:53:9f:
97:74:3d:3b:7e:e3:fb:18:2a:df:c4:f2:82:b8:2b:
fd:5e:de:10:ca:b0:56:44:d6:ee:aa:e7:30:da:31:
be:ea:b7:5f:5e:0d:b1:a6:c0:19:e4:f2:24:f7:cd:
7f:eb:bd:82:ab:55:ca:ec:8c:a2:35:89:5f:fd:fb:
d6:3c:b0:20:1f:b8:61:06:ed:62:ef:9c:97:f5:02:
2e:79:29:9c:9a:d4:66:17:74:33:87:7e:e5:ae:1f:
20:35:1f:1c:92:e4:dd:4b:99:38:ed:62:77:e7:91:
da:e7:e0:dc:b4:b1:10:89:df:99:8b:9a:b3:c0:a9:
59:7f:1d:a8:5d:71:fc:52:62:92:66:cb:fe:bb:04:
f2:3e:6a:f0:48:ae:94:46:13:f6:55:13:6f:ce:8e:
9e:fb:02:8a:eb:16:25:3c:97:2d:99:e1:53:ea:d7:
d6:3a:9b:d1:2e:1b:59:56:4b:03:ef:ea:49:19:30:
98:b5:cb:d7:13:2b:d3:ff:6f:2f:3c:68:a9:e8:7c:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3F:36:66:76:4F:C1:80:84:8D:45:4F:AE:66:5E:CC:B8:97:64:F4
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2f:aa:2b:1c:5c:7b:9a:ca:ce:ef:bf:cd:56:84:6a:ca:40:
46:51:36:39:6b:77:1d:13:73:bc:86:dc:b2:69:b4:17:1e:50:
52:f1:b2:78:06:1b:64:e1:39:b5:ed:81:d3:0e:5d:41:fb:68:
f3:fe:cf:d4:9f:a3:40:d2:6c:9a:cf:a6:6e:0c:c6:ad:ed:72:
4c:85:df:a8:09:7e:bb:6e:5e:3f:06:1d:eb:88:4c:75:c8:cb:
76:fa:24:04:a6:9f:16:07:ba:d0:2b:17:72:b1:8a:9b:d6:c7:
6b:57:1a:4f:1c:94:87:3c:2c:5f:2e:3f:2a:c1:5b:bb:d4:ad:
7f:58:87:78:5a:8b:7a:f6:b0:fc:17:67:92:a5:49:03:37:3f:
49:04:13:80:6d:b8:2c:dc:04:d3:87:41:16:da:8a:91:43:ef:
57:10:53:5c:3a:15:e4:0b:74:17:fc:a2:5d:67:f4:da:3a:95:
2a:16:5c:a0:0b:23:e7:f3:72:07:2f:92:78:ee:eb:b1:c4:1a:
22:5c:87:fa:5e:5a:dc:4d:20:7a:49:71:fc:36:79:43:1d:58:
4a:8b:27:89:39:79:b0:4d:90:6a:48:30:86:4c:a6:ff:c3:f3:
1a:ea:16:aa:d6:4f:58:30:ef:81:4a:af:80:34:c0:e7:a5:05:
a9:5c:e9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:52:30 2025 by rpki-client