Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: 3CuJEV1a/3EvhkrfYZOs0Vyt38ymJztoO6Iz5jCMAZg=
Subject key identifier: 56:F4:75:21:F6:3E:A2:76:06:21:F0:77:06:19:52:92:6A:A9:A7:72
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 0197CB70CBE353932085C5C37AE00B443646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 15C1
Signing time: Wed 02 Jul 2025 14:00:56 +0000
Manifest this update: Wed 02 Jul 2025 14:00:56 +0000
Manifest next update: Thu 03 Jul 2025 14:00:56 +0000
Files and hashes: 1: BkoOf_uIORKFRdieYZeXGcLC6dQ.roa (hash: xIbcujmFBa2hNw0aSpYX+/p8gEohM1cZhtEYemHWSZY=)
2: wLU7Avpjwwyht_SeRmMxUJPBxKU.roa (hash: qyTPwsJWIqpmw5jM+jwATaIOl6TIhuH+//rg/QLmAbQ=)
3: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: mjWzECeDE4ZRGg4wQ0LbwQk++FRD36Q6OdGvQxXiwNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:70:cb:e3:53:93:20:85:c5:c3:7a:e0:0b:44:36:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Jul 2 14:00:56 2025 GMT
Not After : Jul 3 14:00:56 2025 GMT
Subject: CN=56f47521f63ea2760621f077061952926aa9a772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:49:bc:22:31:d5:ed:c8:ac:5b:7a:23:cc:
71:c5:49:a8:15:04:97:f6:9e:45:0b:6b:e7:40:ac:
80:bf:1b:f3:33:d9:a7:52:69:f9:6c:28:85:f4:a8:
5a:4c:f7:a1:8f:69:ce:75:0a:2c:91:ee:f9:7f:06:
b2:f2:cc:af:1a:09:ad:a6:10:b7:e9:80:93:ae:e3:
01:6a:9c:07:12:6a:c3:d6:88:d4:e1:6f:23:74:f0:
2c:f6:7b:ad:9a:32:df:34:96:d9:16:7f:76:e5:26:
2e:19:c3:8b:7c:ee:43:a9:9b:ee:a1:f9:95:f7:aa:
53:d4:fb:fd:29:be:c2:ac:58:5b:76:fe:1f:43:ac:
0c:04:68:2e:ca:71:9c:0f:b9:9f:67:27:54:01:0a:
9c:cd:e1:b8:b1:6d:31:a7:c8:36:18:9b:31:95:e5:
08:b9:04:e9:cf:49:d5:b2:60:85:57:37:aa:31:39:
99:e7:09:84:ae:70:4f:35:fa:82:37:d4:f9:e5:c1:
47:ed:11:f1:bc:25:21:7b:fb:55:c7:ba:1c:fd:95:
b4:40:41:5d:12:ce:2f:ae:82:59:eb:37:a1:fe:00:
80:d6:78:5c:77:d7:b5:be:64:a7:24:13:5f:bf:91:
eb:25:5f:bf:0b:33:e9:1d:73:58:cc:55:21:97:8b:
ce:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F4:75:21:F6:3E:A2:76:06:21:F0:77:06:19:52:92:6A:A9:A7:72
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:41:c2:7a:35:fe:89:e6:29:b5:04:f8:ce:65:bf:fd:c2:22:
38:94:71:58:b3:9c:a5:f3:52:c1:7f:f6:0c:a0:4e:7a:fc:28:
6f:fd:0d:f5:74:38:51:76:22:2d:48:39:4e:42:e0:4f:39:2a:
59:b3:24:a8:d4:39:70:b4:69:c0:6d:08:0d:0c:b9:55:92:56:
18:98:8a:ac:79:05:e5:2a:77:42:ac:f4:26:e6:fa:7a:08:23:
98:34:2a:cd:92:7c:38:58:b1:79:28:1a:2e:6a:6d:ca:90:6f:
43:b7:74:90:6c:ec:79:a1:7d:fa:8e:80:46:33:98:ce:49:90:
65:2f:c6:b2:92:c7:c6:66:7a:ca:b9:f3:2f:10:5f:dc:57:94:
de:75:d5:e2:92:19:03:66:82:5a:61:d4:46:ad:36:d1:35:d5:
58:4c:d0:73:b1:e4:64:0c:8e:29:10:86:b4:3c:9d:93:b8:be:
3c:58:08:28:c3:03:69:99:7d:29:3c:da:5c:9e:02:21:e9:af:
21:2d:cf:25:5b:57:36:4d:48:9e:f1:57:5b:d5:66:49:98:e8:
df:b7:09:c2:34:42:3e:c1:c7:fe:5f:f9:3d:3b:b9:86:d1:34:
ad:4c:d7:f7:25:11:ad:a4:f4:07:35:02:d2:ec:76:42:39:92:
ae:4f:dd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:06:04 2025 by rpki-client