Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
File: xEGuJhLSUnFnyD96_Bb15nTYiw8.mft (raw, json)
Hash identifier: XCPBv8tNw7aaxtdKKYOtEPtWcDswEU9PGSr+RhBCDWE=
Subject key identifier: B6:2E:42:28:68:6B:6F:B2:FE:E4:2B:E4:74:A4:81:71:DA:95:58:6F
Authority key identifier: C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
Certificate issuer: /CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
Certificate serial: 0197B96B07CD078E9635E01A5FA1C972EC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 02:01:28 +0000
Manifest this update: Sun 29 Jun 2025 02:01:28 +0000
Manifest next update: Mon 30 Jun 2025 02:01:28 +0000
Files and hashes: 1: Z27odeAw_NXJehyB-fy3FNRc6to.roa (hash: AQOZKpMALx7C9oCtz366eVXQquGIlXipPb9ncWEUe5g=)
2: xEGuJhLSUnFnyD96_Bb15nTYiw8.crl (hash: Pb33O62P1m/XoTPhsBpvrDlwRPG1ugpBoRay252MfX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:07:cd:07:8e:96:35:e0:1a:5f:a1:c9:72:ec:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
Validity
Not Before: Jun 29 02:01:28 2025 GMT
Not After : Jun 30 02:01:28 2025 GMT
Subject: CN=b62e4228686b6fb2fee42be474a48171da95586f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d8:3f:3e:8d:4e:8c:fc:fb:8d:b7:b4:50:d8:
f2:14:ae:e8:14:94:2c:95:dd:31:59:a7:a6:3f:2e:
17:0b:6c:69:7f:9e:c3:f5:4c:66:c0:00:8a:16:84:
cb:81:ec:e9:ac:40:b6:56:b7:82:8f:56:8d:7c:d0:
2f:8b:2f:eb:3c:d7:6e:fd:df:b6:86:8e:82:b1:e5:
4e:80:f8:5c:c8:1a:f4:75:0c:50:b5:7c:45:3c:dc:
e3:38:9f:c0:ad:72:36:bc:1a:1b:f1:73:18:65:71:
81:89:75:94:53:2b:ab:d8:23:e6:a9:d4:21:a8:3d:
9c:1d:6b:45:52:7c:f7:b2:c7:5a:b0:fb:39:2e:4b:
e7:77:82:f0:82:45:e7:fd:e0:59:c1:59:0c:9c:5e:
7a:09:1f:e6:b5:ba:77:d3:c6:3a:88:12:f4:7a:c1:
1c:e8:9b:c9:8d:75:d0:0c:4f:33:6f:51:4f:b5:59:
72:d0:22:12:d5:26:f9:3e:1d:6b:57:59:99:a6:e4:
85:54:56:f1:a3:45:d7:2b:cd:3c:5f:7f:e2:21:16:
57:f2:d1:5b:1f:6e:1a:fc:04:26:40:9f:96:fb:75:
30:6e:72:b3:6f:f6:ab:3b:53:fb:84:f8:72:1d:c9:
d5:26:41:fc:36:ad:66:cb:71:ad:a4:09:14:36:d9:
ce:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2E:42:28:68:6B:6F:B2:FE:E4:2B:E4:74:A4:81:71:DA:95:58:6F
X509v3 Authority Key Identifier:
keyid:C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a7:9d:df:cd:4b:ab:2b:6e:24:fb:72:78:00:4a:b9:15:5b:
ac:de:f5:46:db:b7:a4:c2:aa:2d:3e:45:67:e2:81:ca:fa:f5:
d5:19:15:e2:9b:e7:9f:9c:f4:38:46:56:64:6e:87:d1:5a:22:
a0:cb:a4:ee:d4:60:23:ec:47:fc:4e:c7:a2:03:c3:c7:cc:b5:
b1:bf:8a:9f:96:51:0e:02:41:1f:1a:d8:44:97:f7:0a:6d:56:
cc:45:d6:6f:03:cd:a8:71:ff:be:25:f9:b0:56:f7:2e:5d:77:
c1:50:73:61:6e:e2:49:da:91:5f:d9:90:2d:fc:b9:f3:c4:d8:
08:ae:cf:8a:3d:21:83:0e:0f:8c:61:6a:03:b3:7e:89:57:8d:
c4:7b:5f:21:90:29:ca:ba:c2:f1:62:01:25:16:00:32:63:a4:
44:dd:e4:df:5a:55:6c:e5:e6:8f:0a:c3:d8:a1:33:66:b8:df:
bf:28:5b:38:d6:1a:1b:3a:78:18:80:30:61:90:d5:65:c3:03:
dd:af:31:3f:d1:fc:2c:8b:0e:8d:44:51:4e:b3:7a:30:14:13:
c5:81:3a:4e:ef:d1:6f:12:43:97:52:f1:3d:68:b1:04:e2:ad:
80:56:f2:a1:0e:01:79:5e:3e:67:9a:ca:eb:0f:55:91:5e:d6:
f3:dd:8b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:01:34 2025 by rpki-client