Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
File: xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json)
Hash identifier: EWaxYO3997mWsDYulv8G5KMtNlongRvdDTaT3KIxdys=
Subject key identifier: 7D:E7:9F:AC:E8:A2:78:21:BB:46:6F:D2:2B:B4:1D:98:9A:9A:BB:76
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial: 0197CC4C60126E4DF2134992B78774CB3362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
Manifest number: 01DB
Signing time: Wed 02 Jul 2025 18:00:46 +0000
Manifest this update: Wed 02 Jul 2025 18:00:46 +0000
Manifest next update: Thu 03 Jul 2025 18:00:46 +0000
Files and hashes: 1: _qWutZUYh7GtHc5BuqYExYnhc5E.roa (hash: coowkP6g5fodWA3YuMC9BEcTrYORzxDu9UeePR3fEmU=)
2: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: kuhlB6M5xAZ4NNS0d1qgNnzx5dYVEaMwz/+2FyV4FIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:60:12:6e:4d:f2:13:49:92:b7:87:74:cb:33:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
Validity
Not Before: Jul 2 18:00:46 2025 GMT
Not After : Jul 3 18:00:46 2025 GMT
Subject: CN=7de79face8a27821bb466fd22bb41d989a9abb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:41:06:28:87:63:76:6d:58:3a:9a:62:65:
b0:5b:a1:56:fc:f4:04:5d:b6:f6:9d:fe:dc:5e:92:
74:22:01:7c:9c:d4:fd:e5:e0:bc:08:ae:42:e1:70:
50:db:b7:93:19:e2:f3:c6:3a:ba:29:87:0e:d4:3b:
08:30:e9:96:b3:09:f9:0c:02:61:14:6f:f1:2f:b4:
e4:53:17:20:bd:da:99:7f:41:49:77:cb:bd:5d:35:
aa:4a:ce:eb:f8:5d:c0:66:c9:03:78:7f:9e:ab:e6:
0d:9c:68:86:56:c1:27:48:b0:14:40:ab:98:be:96:
78:61:9f:23:de:0d:0f:8e:be:0f:98:ec:7d:1d:76:
0b:6c:72:e1:e1:15:9b:1c:b2:9c:ac:8b:9e:19:08:
f5:fd:71:b0:03:49:cb:36:4e:fc:49:e5:40:40:31:
de:8b:a1:65:fb:89:e8:7a:8c:98:30:2b:d8:33:3d:
41:ff:b6:5a:11:47:2c:40:2f:61:96:00:c1:bb:db:
06:7e:31:f3:00:43:18:f6:7b:06:11:3c:2c:6f:72:
7d:e1:c4:02:c6:bd:0f:61:81:60:99:c6:a1:96:93:
61:13:f5:0b:34:6d:cf:a7:62:d0:2a:2a:be:cc:05:
1b:13:e3:14:e8:ed:ba:93:13:0b:a8:41:ff:d1:48:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E7:9F:AC:E8:A2:78:21:BB:46:6F:D2:2B:B4:1D:98:9A:9A:BB:76
X509v3 Authority Key Identifier:
keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3d:53:15:19:1a:13:9f:53:5e:02:c8:f4:6a:82:71:63:03:
5f:24:86:4e:f2:cf:c1:6d:93:6f:df:01:e7:ca:f6:d3:47:23:
da:d8:d8:96:89:86:9f:1b:a2:14:6f:22:8a:b5:45:86:47:90:
30:da:8f:52:5e:9f:bf:5d:64:48:e1:cc:52:39:f2:23:9e:ab:
40:d9:99:bd:7e:55:eb:a4:3d:ec:8e:0c:fa:ba:92:04:71:4e:
88:be:27:1d:c6:ab:98:93:93:f4:bd:84:8d:21:93:8d:8a:8c:
49:df:0d:8b:12:08:8f:7a:b9:9e:a1:c0:fc:fe:bd:46:d8:dd:
3b:51:44:79:2a:65:aa:b0:4d:88:9c:f1:18:7d:45:e7:72:37:
74:4a:2f:7f:9d:3b:85:b8:35:75:6c:bc:0e:07:2e:a6:b1:ce:
2a:6d:de:a1:f4:a9:1a:9b:03:a1:f7:d3:b2:7b:a6:48:8e:36:
1f:21:90:dc:bd:8b:53:7b:ff:eb:da:ac:02:b6:e9:ca:9d:a1:
6c:d3:1b:20:96:28:d1:7b:bd:19:36:01:4a:29:eb:3a:9a:b9:
17:23:22:f1:d2:37:c2:e4:e1:c1:29:ff:54:24:c1:95:3a:ea:
08:fe:d7:28:44:80:05:77:67:95:2c:9d:19:82:64:fd:8b:d5:
23:92:42:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:28:12 2025 by rpki-client