Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
File: xtGGU_v7b9VzLclAwdZdd6sLv6M.mft (raw, json)
Hash identifier: 2lmlXbGJiF6esS9sI+C/vXVR6HHu5szhA5IfQMuTTfk=
Subject key identifier: B1:0F:60:6F:A7:F4:14:D7:F1:1F:AB:44:3C:0A:9C:AF:C2:36:32:EA
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 0197B6D77BB4B719670C155500EEF86EBFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 14:01:04 +0000
Manifest this update: Sat 28 Jun 2025 14:01:04 +0000
Manifest next update: Sun 29 Jun 2025 14:01:04 +0000
Files and hashes: 1: SxFF3ZURcZJdwD8_1vGA3WdUL0g.roa (hash: RJe7dDjJagaac3SQE7MDMwaxQL/mMnlWG9ytHOYHflM=)
2: uun5L09jXYEGXJtFrgW0cvRe_KQ.roa (hash: WnN/CnTVkPE7SxyO4PbdiYAhklcuoQlzHVaZbDdUOFQ=)
3: xtGGU_v7b9VzLclAwdZdd6sLv6M.crl (hash: MCEDY8j4qQHbC6BneclyrV43VaFxI4ZYULWy+XBDGww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7b:b4:b7:19:67:0c:15:55:00:ee:f8:6e:bf:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Jun 28 14:01:04 2025 GMT
Not After : Jun 29 14:01:04 2025 GMT
Subject: CN=b10f606fa7f414d7f11fab443c0a9cafc23632ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:e4:cf:00:22:99:06:53:18:fe:c9:18:87:
08:67:7f:a2:ec:0f:51:72:97:6d:de:22:b0:ed:4f:
f8:3e:f8:8e:20:84:90:02:b0:9e:b6:f6:b5:89:da:
66:10:4c:04:43:0d:07:98:5e:20:05:79:c1:be:0a:
5d:30:54:d8:46:e8:44:72:58:d7:3d:a9:73:b9:eb:
7e:c3:e6:78:1b:be:ac:bd:38:33:c3:f1:2b:5e:e0:
71:f7:8f:37:81:b5:33:4b:8b:60:22:71:16:81:39:
fd:47:e6:50:00:90:67:78:2e:8a:ad:5b:b0:d7:9a:
18:85:d5:c1:b2:2b:54:ef:46:00:74:06:4f:a6:12:
4f:81:bf:d4:1a:3f:e7:c8:36:e9:d7:52:4a:0c:3c:
8d:a3:df:ef:a8:79:c1:62:1f:8c:bc:14:12:bd:b9:
cf:14:36:87:64:bf:76:3e:e8:0d:f6:52:83:07:3c:
a7:d5:9a:02:6b:2e:eb:4b:46:5a:c1:5f:19:66:c6:
94:6a:69:a2:d2:b4:62:65:9f:0b:28:98:3b:9d:bc:
26:46:d7:11:1a:6b:ee:bb:70:14:2d:ad:d0:7e:be:
12:a6:a1:86:23:84:27:13:29:bf:15:93:2f:2e:b9:
fb:9e:23:45:48:92:17:06:82:5d:b0:7e:76:a1:c5:
39:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0F:60:6F:A7:F4:14:D7:F1:1F:AB:44:3C:0A:9C:AF:C2:36:32:EA
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:03:d0:65:58:f6:a8:ec:89:49:b1:4f:ab:f2:54:c8:e6:04:
08:04:5a:5b:19:f0:b1:48:f4:b4:bb:8e:99:7a:ab:98:b5:de:
f7:42:7b:a1:74:4b:63:fb:6b:52:af:35:e2:b4:2a:12:fc:fb:
17:ab:33:68:a6:d8:6c:9b:f4:36:aa:ef:6e:3c:c0:88:1a:0c:
5b:22:e3:b3:11:98:72:bd:2b:e2:d2:c8:4f:80:de:53:ca:a1:
22:75:57:ce:54:94:e8:d2:02:1a:b5:8b:39:0e:5c:8c:55:44:
18:3d:82:27:5f:ad:d5:25:f1:c1:4e:f5:c9:82:59:57:0a:7f:
a9:d1:1c:72:72:04:4c:bc:51:db:ee:31:1f:27:b3:f1:b0:96:
c1:a9:81:5d:46:c4:2e:5e:15:ce:a0:b2:42:3a:72:20:81:ca:
29:bc:ef:3f:af:63:74:bb:8c:8f:a4:04:1d:a0:c4:12:37:aa:
98:ff:76:3d:a9:eb:1d:1b:d4:30:4c:b4:4e:0c:92:f6:51:5a:
dc:d9:b1:53:1c:a5:b1:7b:63:59:14:2e:15:f4:7b:b6:22:6c:
0a:f9:0c:66:eb:85:f8:fd:7e:38:ae:cf:b8:a6:99:57:f8:bd:
c1:61:e5:d6:8a:bf:01:e0:1f:8f:0f:44:d2:c6:a7:47:67:52:
19:d6:07:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:30 2025 by rpki-client