Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
File: xGPDRgOpRpUv8nbgol_TYfys8lE.mft (raw, json)
Hash identifier: j9BoGtQDvHYdl7Pu2fI2Hq9VFrcCahEU5YCmLxU21cc=
Subject key identifier: FA:6C:16:E2:E3:77:85:CD:D5:6B:31:CD:C6:DE:C8:8B:B0:35:DC:64
Authority key identifier: C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
Certificate issuer: /CN=c463c34603a946952ff276e0a25fd361fcacf251
Certificate serial: 0197B77C7A71287362DCDB715BACEDA88864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:01:17 +0000
Manifest this update: Sat 28 Jun 2025 17:01:17 +0000
Manifest next update: Sun 29 Jun 2025 17:01:17 +0000
Files and hashes: 1: md0xmKCv-Yp-JRpqVfuJ2Ux3if8.roa (hash: 8054rmQS0LY7yY1rJuM5gJA2IaUlLbJ4rpwSB+nsZj8=)
2: xGPDRgOpRpUv8nbgol_TYfys8lE.crl (hash: mPDMkOJ0KnhhZnGb7E/82P7bTRby2DJv19zszQuxc+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:7a:71:28:73:62:dc:db:71:5b:ac:ed:a8:88:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c463c34603a946952ff276e0a25fd361fcacf251
Validity
Not Before: Jun 28 17:01:17 2025 GMT
Not After : Jun 29 17:01:17 2025 GMT
Subject: CN=fa6c16e2e37785cdd56b31cdc6dec88bb035dc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:fc:32:d9:fd:89:d1:0a:0f:49:66:48:bf:
7c:8e:83:bf:48:a3:19:c5:a0:ba:02:94:40:1b:6b:
bd:9c:70:8c:05:bb:67:99:d1:4d:43:98:7d:dc:a5:
14:68:a6:a7:43:fc:1c:f2:da:ff:c0:2d:47:a0:74:
96:26:6c:44:11:19:cf:72:6d:5d:62:7c:bc:93:8d:
93:92:29:84:4a:b7:5c:59:e9:f8:78:d8:3f:a5:f9:
1d:62:bf:6b:a5:30:ba:38:ed:e7:de:ed:d8:61:49:
b4:3b:43:db:cc:9d:25:a1:45:bf:43:7b:7c:38:84:
2c:45:8f:02:66:a2:b3:8d:73:b0:92:88:d7:d4:51:
a9:23:dd:c3:7d:7f:f3:2d:fa:2a:b7:e0:27:b8:88:
35:44:75:4d:95:63:57:29:cb:9e:52:1c:ce:31:1d:
a6:ba:8e:d7:37:3e:4c:f1:f2:3f:46:47:04:8f:f7:
6c:1e:81:6f:46:15:e2:96:dc:03:60:14:b9:bc:cf:
be:7f:c9:cf:1d:b4:6d:d3:f4:3d:55:ae:50:e3:59:
95:bd:4c:f4:cc:4d:e0:19:79:40:ee:9a:88:6e:26:
32:9c:07:94:87:22:b7:67:3a:e5:72:1c:4a:2d:f1:
54:41:b2:4a:31:70:7a:fb:e6:09:42:0c:df:e3:23:
11:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6C:16:E2:E3:77:85:CD:D5:6B:31:CD:C6:DE:C8:8B:B0:35:DC:64
X509v3 Authority Key Identifier:
keyid:C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7d:f8:64:f0:10:f4:3a:1a:19:4e:26:62:ab:1d:10:9e:3e:
8c:b7:15:70:0a:14:01:f0:e5:8c:27:df:3b:61:96:53:cc:b6:
ef:7d:6d:ba:6f:9b:85:21:3c:5a:e8:ef:31:fc:31:1d:c0:b7:
85:54:66:12:f7:f3:6c:db:f6:42:e2:04:a8:ee:54:64:e9:41:
be:86:1e:3e:e5:7c:1b:dc:46:fc:63:d5:a7:53:17:b8:9c:3c:
ce:ab:08:d7:62:a3:d5:ee:60:0e:97:67:ea:b4:8d:50:7c:a5:
9f:4e:fc:ca:64:43:c7:7b:6d:f1:fb:2a:fb:e9:70:0a:ca:1d:
e3:22:3a:4e:8d:71:97:74:1f:65:ec:71:20:7e:e0:97:3a:ab:
b1:4d:ee:6f:73:dc:db:1c:31:89:47:d2:54:ee:53:8f:83:04:
e6:27:0d:a2:88:c9:70:77:00:78:56:2c:2f:90:ee:21:c7:5c:
4f:6c:06:63:09:ae:87:f7:fa:6b:8b:9f:83:0b:72:b6:ad:34:
a5:2e:0a:06:1d:59:66:51:d1:d2:eb:b1:f5:4f:9b:b9:ee:91:
72:71:34:e0:95:65:ad:89:8c:17:bf:6a:4b:9b:ac:60:b5:8f:
0a:94:e1:46:71:90:6f:f2:8a:c7:9b:b5:d8:3d:82:2c:0e:29:
88:43:99:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:23 2025 by rpki-client