Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
File: xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft (raw, json)
Hash identifier: l2hsoQJADk4nL7moT6Fg/fd8b1JD3k8L8ukYVbN94jY=
Subject key identifier: 82:D1:0C:D3:AB:B7:2B:27:F0:0E:B6:6B:BE:83:FA:33:1D:6E:DE:F2
Authority key identifier: C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB
Certificate issuer: /CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
Certificate serial: 0197B77C17C2A44455A2E701DD46D1840796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 17:00:52 +0000
Manifest this update: Sat 28 Jun 2025 17:00:52 +0000
Manifest next update: Sun 29 Jun 2025 17:00:52 +0000
Files and hashes: 1: OvOkWatHrFgmj60O6Cjij4Ojo9Q.roa (hash: vl4YZSTqxlbqeunj3GnUeIqLip/YzNXqb6yP9ApEp70=)
2: W_HszaJ5NOP0MnKr_gX_tIwwzrM.roa (hash: KBxuRHIVq96Z+ZSk6DOhyPHLuGESXEU5ZMYMHCDEzBE=)
3: xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl (hash: sCXTRRPmNosqnnvf06u6tsMuVqkYFAUL9RUlJPmMNh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:17:c2:a4:44:55:a2:e7:01:dd:46:d1:84:07:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
Validity
Not Before: Jun 28 17:00:52 2025 GMT
Not After : Jun 29 17:00:52 2025 GMT
Subject: CN=82d10cd3abb72b27f00eb66bbe83fa331d6edef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:b7:c5:f4:e2:98:8a:40:cc:f1:28:58:3b:
d3:ee:ee:19:8f:52:11:cf:30:b8:8b:80:fd:81:8f:
04:81:ab:2f:20:62:a4:54:fa:6a:7d:df:76:ef:ad:
c5:ce:86:0e:50:81:ba:9b:68:39:5e:33:2f:50:6f:
c3:36:6f:88:4a:2b:f5:1b:31:b9:27:e4:97:82:b4:
5a:e2:75:f1:d3:b7:65:4d:e3:9f:84:43:ee:80:c1:
a0:db:18:68:6c:10:d3:1f:9b:b4:5a:7f:08:f9:7e:
b7:5e:70:87:1c:b3:7d:45:ad:56:9f:e4:93:59:14:
93:7b:52:9e:63:6e:5e:24:94:b8:a3:60:6a:4b:08:
f7:45:56:a8:73:04:87:02:39:48:f6:43:09:a7:fe:
c9:10:14:19:bb:d1:87:7a:19:6e:12:93:46:c5:6f:
f5:42:ad:cf:f6:4d:23:57:4a:db:4c:4b:74:57:93:
a1:c0:5b:e0:d0:49:59:0b:70:c6:e3:63:92:49:89:
5d:4c:37:54:9f:70:e9:14:a5:af:ab:93:48:a7:32:
bd:2c:8e:d9:e3:51:78:cf:b6:6e:b3:bc:24:e6:4f:
be:a3:5a:2c:3f:78:c0:68:c0:11:42:45:24:de:c7:
11:7d:61:8c:c0:fc:a2:18:1d:c2:b0:f5:27:ef:db:
fe:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D1:0C:D3:AB:B7:2B:27:F0:0E:B6:6B:BE:83:FA:33:1D:6E:DE:F2
X509v3 Authority Key Identifier:
keyid:C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1a:e6:c9:48:5c:ca:42:ae:1d:e3:8a:74:0b:67:19:cf:a3:
1d:61:a4:4f:3c:03:ea:32:71:5b:55:2f:ed:97:26:4b:a7:fc:
08:e2:b4:27:9c:3d:c8:6d:48:b3:b2:ea:f9:d8:f2:ad:f3:0d:
2d:1e:0f:6b:89:36:3b:e2:4c:2b:de:fe:e2:7e:65:21:a6:12:
08:d5:cc:b9:80:cc:1f:1d:88:07:34:d6:8e:98:35:f3:fe:4d:
b2:7a:d0:cc:59:2b:21:75:5e:2d:31:39:e0:d7:67:cd:73:a2:
c3:95:78:26:13:21:5f:6b:94:e8:19:af:33:c5:b6:13:1b:36:
81:a6:78:3d:2c:d3:b0:a5:fc:9c:11:78:63:f9:cc:30:27:0d:
e4:c3:e8:04:a2:a1:d6:5f:a6:b9:7c:a7:48:4a:e9:d5:6c:15:
37:61:7d:c6:d3:84:b5:5b:3c:bf:27:49:84:a8:a0:e5:5a:1f:
d1:fd:1b:87:52:fa:05:dd:4d:9e:4d:b8:89:58:05:dc:da:33:
d2:9b:3d:8b:fe:18:b5:75:fa:e1:6b:99:c8:58:d7:cb:94:3c:
eb:e5:32:36:4a:3f:a2:72:68:46:3e:a6:6c:b3:70:ca:80:ef:
f6:d4:c6:97:af:98:0d:73:80:c1:2e:15:9b:92:69:fd:c7:a9:
f9:c6:28:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:38 2025 by rpki-client