Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
File: xTtM8KdHHwAPilagSbFjlnzDvZk.mft (raw, json)
Hash identifier: X9VWQ3QkXWr938r8/n9ShZN5rzPmKPTLSD8L8fi8560=
Subject key identifier: 64:91:EA:01:41:01:D3:76:FB:EE:CD:45:32:2A:D0:3A:58:8E:D6:0A
Authority key identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
Certificate issuer: /CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Certificate serial: 0197BA0FB40D10670394AA9D01DD9B0B5751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
Manifest number: 14D5
Signing time: Sun 29 Jun 2025 05:01:20 +0000
Manifest this update: Sun 29 Jun 2025 05:01:20 +0000
Manifest next update: Mon 30 Jun 2025 05:01:20 +0000
Files and hashes: 1: 602Z4NiRUVoUbtoD2a1_hKZKM5w.roa (hash: 3NgwOwVM6/UTanDsySZE3RJFx37z0Ri4EFGUt0jIqTA=)
2: xTtM8KdHHwAPilagSbFjlnzDvZk.crl (hash: T6R9dLCorHS5qwml17ztmqf+zoPcI6pwe9fDbgKLBwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:b4:0d:10:67:03:94:aa:9d:01:dd:9b:0b:57:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Validity
Not Before: Jun 29 05:01:20 2025 GMT
Not After : Jun 30 05:01:20 2025 GMT
Subject: CN=6491ea014101d376fbeecd45322ad03a588ed60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f6:34:46:46:d2:e5:34:ef:f2:39:54:eb:61:
5b:4c:0c:30:2a:e5:5b:a1:a6:d1:32:5a:d2:60:01:
73:2f:50:6f:3b:77:6f:a7:0c:fc:14:84:86:cc:c7:
60:2b:84:a6:e6:4e:7a:3d:14:33:72:0d:9c:06:ed:
97:40:e1:7e:9a:aa:5e:64:d5:b6:8b:2a:ee:34:a7:
79:90:68:69:6d:9c:5e:4a:d5:46:7c:14:99:a9:e1:
ad:63:c5:06:60:20:1d:ce:93:4b:22:c7:4d:87:0a:
2e:44:cc:f5:6f:74:8e:e8:dc:2d:e2:ae:b3:8a:da:
91:f6:5d:29:43:61:4f:7f:19:c4:67:ee:83:d1:ac:
af:07:92:4b:e0:f4:fc:70:a4:19:2e:68:5a:23:02:
6a:bf:44:8b:a1:98:9b:d0:ca:86:25:82:a0:95:e1:
3e:0b:7c:20:43:67:36:aa:16:79:2a:fc:99:f3:c5:
61:09:9f:00:3f:8d:a4:f9:09:94:b7:d8:e6:5a:b0:
89:82:b8:d5:48:c6:57:2f:68:90:ac:b9:64:6e:59:
36:f0:6c:90:75:30:c5:8e:9d:6f:45:8e:17:0f:f5:
40:ad:57:7f:05:db:10:3c:f2:83:58:a5:d4:e4:f1:
f2:bd:de:06:a6:7d:20:3c:2b:40:95:37:2b:42:c3:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:91:EA:01:41:01:D3:76:FB:EE:CD:45:32:2A:D0:3A:58:8E:D6:0A
X509v3 Authority Key Identifier:
keyid:C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cf:cf:9d:a7:f4:1c:f0:da:52:f0:26:99:d8:5c:17:e6:1c:
6a:87:6d:b9:49:dc:e4:3e:a3:f3:5d:5c:17:3f:99:bd:e0:21:
9e:d1:27:80:03:56:c7:89:64:a9:cf:6c:fe:99:b0:ef:b9:54:
e7:f3:45:d7:b7:97:99:31:dc:a6:e2:0e:e0:00:3b:1c:d1:e8:
c1:67:98:b1:a8:25:d9:4a:36:71:c0:5e:ee:6c:d6:6a:10:33:
93:b8:8e:ea:48:7c:cc:43:6c:43:70:d9:9b:6a:69:cc:1a:0e:
c9:e8:e4:d6:44:f5:87:73:87:59:01:97:5c:7d:85:75:bd:75:
d8:24:2f:c2:35:33:58:3c:d1:4e:1e:13:56:d5:b2:f4:d9:de:
ea:e2:28:c2:99:01:c6:fa:34:95:bb:10:9c:0f:e6:78:da:b1:
1a:73:50:6f:9a:82:0c:9d:28:74:7b:54:d0:dc:52:4d:87:63:
29:d0:f2:ed:72:64:1d:6c:20:c8:d9:7e:2a:fc:e8:2f:14:4c:
1d:8a:54:f9:9d:1e:45:45:d7:6a:66:0c:6d:41:c4:dc:ad:f9:
96:35:7b:5e:02:27:b4:5c:69:87:21:5b:3d:d9:e0:6e:eb:6f:
11:28:12:9a:a6:6a:e3:1b:e2:9a:f7:91:91:5f:0f:b8:ad:35:
4c:f9:de:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:45:18 2025 by rpki-client