Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
File: x0yghVF4oM3XGRS88iOqMa9jaaQ.mft (raw, json)
Hash identifier: VJE5t9FrnjeXADCjjvFxvtqb53A+Ev1+dFSgU3jgq/c=
Subject key identifier: F9:85:A3:0B:7B:59:33:55:41:5D:97:0E:C0:D7:42:39:EA:2D:15:8B
Authority key identifier: C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
Certificate issuer: /CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Certificate serial: 0197BA7D6EEB873A0832D0D77391A025F2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
Manifest number: 0E22
Signing time: Sun 29 Jun 2025 07:01:11 +0000
Manifest this update: Sun 29 Jun 2025 07:01:11 +0000
Manifest next update: Mon 30 Jun 2025 07:01:11 +0000
Files and hashes: 1: w61tMnNeHDs_V8XDRBjX0VmxQLs.roa (hash: zbcmX4twBgLQPIU3RR2PPgPgWTG3cAdbD9etQBxxLBE=)
2: x0yghVF4oM3XGRS88iOqMa9jaaQ.crl (hash: jA5U8KKTR+Bf88DG62ntEdjCoZ86WCLx86QH8TpC/h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:6e:eb:87:3a:08:32:d0:d7:73:91:a0:25:f2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Validity
Not Before: Jun 29 07:01:11 2025 GMT
Not After : Jun 30 07:01:11 2025 GMT
Subject: CN=f985a30b7b593355415d970ec0d74239ea2d158b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:66:c1:a7:d4:b9:b1:e3:93:09:44:29:b6:26:
bc:d5:2b:86:af:9b:e6:20:d6:d4:b0:f8:96:10:82:
37:34:53:9b:30:c5:3e:ca:08:a7:c7:04:c6:0c:55:
14:6a:17:46:40:8b:1a:ad:20:19:11:65:5b:47:6a:
60:35:75:ef:49:c2:b1:f8:c6:0e:d0:4f:eb:b5:25:
81:de:93:c5:64:36:ca:b7:ac:16:25:a6:e4:a1:b4:
bf:2b:9f:9e:d8:f3:05:e0:87:2e:43:70:c2:63:b8:
5f:56:2e:34:60:cc:b4:f4:e9:71:50:7a:99:c8:62:
e4:de:9f:e4:2b:6c:9b:74:9f:9a:93:52:6e:cb:fd:
30:35:be:dc:65:9a:11:0f:a2:c8:0c:1f:04:f9:fb:
35:37:75:14:20:ee:9f:2f:5b:ea:91:90:84:d7:da:
88:4d:9d:45:0b:be:56:6b:7f:de:7c:cc:6a:b6:2c:
1c:3a:fc:d1:ee:b2:19:61:eb:2e:93:a3:55:50:53:
70:f6:80:68:ea:45:73:8a:69:80:85:f6:18:bb:b4:
36:81:49:6c:08:f7:6f:6b:33:b9:99:df:b3:58:7b:
df:81:db:16:3f:af:17:ab:a6:08:b0:32:2d:3c:81:
55:0c:9c:53:43:77:09:11:c6:3d:97:15:65:7e:f5:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:85:A3:0B:7B:59:33:55:41:5D:97:0E:C0:D7:42:39:EA:2D:15:8B
X509v3 Authority Key Identifier:
keyid:C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7c:46:22:82:05:2d:a1:15:48:51:aa:81:8a:7f:09:47:b1:
68:57:ef:18:6e:9f:6e:b7:0c:99:0c:19:17:aa:90:f8:52:19:
ca:29:50:94:39:05:2b:9c:12:50:dc:3d:3f:13:bd:3a:e7:ac:
ca:4f:38:37:12:ec:fd:9e:31:01:46:80:4d:0b:d7:af:02:7a:
a2:f3:15:c3:ce:79:88:6c:c1:2a:75:00:36:2e:ee:ab:b2:06:
87:1f:da:f6:f5:ac:24:4f:73:e3:70:c8:15:d0:9b:9d:8e:f8:
60:43:8f:05:f9:90:e0:87:a6:8f:52:47:51:15:7c:31:9a:f5:
b5:2c:fc:f8:83:9c:5e:0a:46:e0:7c:2e:f6:ba:48:1b:a3:00:
8e:18:e0:fc:19:98:c9:a9:2d:ee:4a:97:25:b1:8a:d2:30:4d:
46:f7:81:92:ae:a0:63:bb:8b:85:b6:26:57:1c:8d:61:6d:47:
36:88:35:46:2b:d2:00:ec:36:86:b5:2c:5a:9f:57:1b:8c:86:
a8:74:d9:4c:2c:2f:9e:45:74:7e:c1:8c:09:34:1d:f0:f5:84:
c6:4a:d3:7e:bd:92:47:53:71:2e:f7:3d:11:ef:68:79:64:eb:
a1:ae:22:30:d9:22:df:ca:f3:4d:40:cb:12:4d:82:03:1d:fe:
3e:1d:2b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:48:22 2025 by rpki-client