Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
File: xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft (raw, json)
Hash identifier: LyCKnMO8MAFET1vvtFV+KRuwg+uISoftXvqYwwiIiBU=
Subject key identifier: F1:9D:14:7F:8C:5B:98:47:9B:0D:18:25:33:5C:D2:E9:30:95:8E:CB
Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
Certificate issuer: /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Certificate serial: 0197B8213713B7A2CBC456A52363C596C974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 20:01:13 +0000
Manifest this update: Sat 28 Jun 2025 20:01:13 +0000
Manifest next update: Sun 29 Jun 2025 20:01:13 +0000
Files and hashes: 1: p5qeM8pBglCmH9S_-by9le3dhdY.roa (hash: gGcCXxeFnJoe5nYFMp9atB7TAawQ8UzeF434Tg+y5lc=)
2: pzUgONhqi68QY0VvGpWltJYJNYw.roa (hash: Uq9NSVRaA6mFyoWNmYT8pc0z0L/fxwW0Qlau9RSv6Cw=)
3: xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl (hash: FTusl3xxsog7JPkB7Gu/7IN+aefAuNfzwESXrsIb0bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:37:13:b7:a2:cb:c4:56:a5:23:63:c5:96:c9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Validity
Not Before: Jun 28 20:01:13 2025 GMT
Not After : Jun 29 20:01:13 2025 GMT
Subject: CN=f19d147f8c5b98479b0d1825335cd2e930958ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:71:a5:c3:d7:73:09:19:bb:48:6b:14:0d:3a:
c1:88:9a:c2:f2:32:36:ed:f9:56:8e:54:12:6e:b2:
96:e7:e7:f3:17:a2:21:bf:a4:b0:77:7d:0f:a7:79:
3c:ea:81:62:06:ec:f6:7d:ca:22:22:b6:a0:fd:e6:
a1:84:22:73:48:ec:e7:4d:40:92:2c:82:a7:7d:71:
06:6c:74:ac:05:65:10:f8:81:3b:40:1c:f2:c6:8a:
b5:8b:92:d1:16:03:42:11:8f:4d:fe:57:cf:d8:7b:
30:ac:e0:d7:0c:4e:81:c4:7b:0f:a3:28:4f:fe:6a:
90:6e:6a:7b:f2:00:2c:fc:60:ac:31:76:d1:e5:5a:
f0:13:c4:e1:64:a3:8d:f6:dd:04:e4:a1:09:8c:32:
3c:a2:5d:1c:e3:85:a1:74:c6:68:60:d2:fa:7f:6d:
54:5a:ba:0c:fe:0e:d0:60:50:fa:61:58:37:f7:6a:
b7:cf:c0:33:c0:6c:40:35:40:4f:d7:50:b5:fe:aa:
8d:ef:93:38:7c:d2:ae:b7:a3:16:89:6e:78:2f:2b:
59:28:e5:ef:7d:62:bb:da:33:26:66:0f:49:ba:60:
0b:d1:c9:91:be:ad:70:6a:90:e7:0a:00:83:d2:66:
5e:3d:a1:d3:7e:7c:e4:58:fd:9f:23:b3:62:23:af:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9D:14:7F:8C:5B:98:47:9B:0D:18:25:33:5C:D2:E9:30:95:8E:CB
X509v3 Authority Key Identifier:
keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e4:31:02:15:95:84:26:f0:92:49:b8:47:9b:11:51:63:24:
75:04:9c:7f:a8:5d:6b:39:29:23:8d:07:43:42:e0:95:dd:e0:
ac:5e:70:51:e3:13:8a:80:14:d4:bc:9d:ca:7a:f8:24:66:7c:
de:46:e4:fb:c5:34:76:34:59:93:ef:55:42:54:08:2b:8c:18:
03:04:db:17:76:04:fd:e9:3c:bf:3d:d3:24:83:5f:bb:4e:de:
d0:2d:8f:64:b7:43:1f:d1:82:ec:fb:36:fc:2d:e5:78:91:05:
18:f1:de:d7:fb:d7:2f:2c:3a:72:68:73:33:29:2f:79:b4:13:
62:e7:da:f5:5c:3b:ea:7d:07:fa:f2:57:7e:77:3e:bb:84:e1:
51:cd:3e:d9:4e:ae:53:52:a9:ce:2f:d5:2a:72:8b:64:7a:c6:
af:45:96:c2:cc:32:0e:f4:d7:01:90:a9:39:81:a7:ae:f5:4d:
7e:40:0d:29:91:6c:86:5a:3d:2d:3c:58:31:d2:4f:87:80:ed:
87:aa:85:54:68:17:3f:93:7c:6c:e7:9c:55:3b:e3:00:2b:c8:
f5:fa:0e:c0:61:5d:63:80:6f:3e:a4:50:14:f0:a3:e9:3e:39:
c6:6d:07:1b:af:26:dc:21:b0:7d:f1:ed:d4:57:1e:6b:76:91:
7b:d6:27:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4ITcTt6LLxFalI2PFlsl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OWNlYjEyNDA4NDRjZGU4YTE2ODg5N2U0N2MxZGY1ZDZl
Y2JmMjEwHhcNMjUwNjI4MjAwMTEzWhcNMjUwNjI5MjAwMTEzWjAzMTEwLwYDVQQD
EyhmMTlkMTQ3ZjhjNWI5ODQ3OWIwZDE4MjUzMzVjZDJlOTMwOTU4ZWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXGlw9dzCRm7SGsUDTrBiJrC8jI2
7flWjlQSbrKW5+fzF6Ihv6Swd30Pp3k86oFiBuz2fcoiIrag/eahhCJzSOznTUCS
LIKnfXEGbHSsBWUQ+IE7QBzyxoq1i5LRFgNCEY9N/lfP2HswrODXDE6BxHsPoyhP
/mqQbmp78gAs/GCsMXbR5VrwE8ThZKON9t0E5KEJjDI8ol0c44WhdMZoYNL6f21U
WroM/g7QYFD6YVg392q3z8AzwGxANUBP11C1/qqN75M4fNKut6MWiW54LytZKOXv
fWK72jMmZg9JumAL0cmRvq1wapDnCgCD0mZePaHTfnzkWP2fI7NiI6+vpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGdFH+MW5hHmw0YJTNc0ukwlY7LMB8GA1UdIwQY
MBaAFMac6xJAhEzeihaIl+R8HfXW7L8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHB6ckVrQ0VUTjZLRm9pWDVId2Q5ZGJzdnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8wZmJkOGQtODIwZC00OTc5LTgxYTMt
OGJlOTU3MWViMTBkLzEveHB6ckVrQ0VUTjZLRm9pWDVId2Q5ZGJzdnlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8wZmJkOGQtODIwZC00OTc5LTgxYTMtOGJlOTU3MWViMTBk
LzEveHB6ckVrQ0VUTjZLRm9pWDVId2Q5ZGJzdnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuQxAhWV
hCbwkkm4R5sRUWMkdQScf6hdazkpI40HQ0Lgld3grF5wUeMTioAU1Lydynr4JGZ8
3kbk+8U0djRZk+9VQlQIK4wYAwTbF3YE/ek8vz3TJINfu07e0C2PZLdDH9GC7Ps2
/C3leJEFGPHe1/vXLyw6cmhzMykvebQTYufa9Vw76n0H+vJXfnc+u4ThUc0+2U6u
U1Kpzi/VKnKLZHrGr0WWwswyDvTXAZCpOYGnrvVNfkANKZFshlo9LTxYMdJPh4Dt
h6qFVGgXP5N8bOecVTvjACvI9foOwGFdY4BvPqRQFPCj6T45xm0HG68m3CGwffHt
1Fcea3aRe9YnFg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:16 2025 by rpki-client