Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
File: xrbwexczYPIV8VGMhxKksFTYXAc.mft (raw, json)
Hash identifier: BJvUZipJDuOIn2t9teBH32gbUcl90ojhq2F+MqNqRoM=
Subject key identifier: 9A:8A:FE:BA:C6:1C:50:2B:C6:0A:13:B1:52:CF:13:D7:F5:0C:DD:4E
Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
Certificate issuer: /CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Certificate serial: 0197C26D87CADA2F3DE636E4C25FAC3A9B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
Manifest number: 15BC
Signing time: Mon 30 Jun 2025 20:00:47 +0000
Manifest this update: Mon 30 Jun 2025 20:00:47 +0000
Manifest next update: Tue 01 Jul 2025 20:00:47 +0000
Files and hashes: 1: xg8lxjJPCVI2QjzHXxxw_4cHXSo.roa (hash: HY5QQYkL4OBC+/cJgD5NihIRGwwm0R3a0QruU+xabgs=)
2: xrbwexczYPIV8VGMhxKksFTYXAc.crl (hash: T4h4arnlT+d7u2PmJaZxO9XSFiCCcCOx5bGruOOA+wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:6d:87:ca:da:2f:3d:e6:36:e4:c2:5f:ac:3a:9b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Validity
Not Before: Jun 30 20:00:47 2025 GMT
Not After : Jul 1 20:00:47 2025 GMT
Subject: CN=9a8afebac61c502bc60a13b152cf13d7f50cdd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:92:ae:45:e7:5d:43:ea:76:ba:81:a9:b9:
e7:14:56:2b:09:82:36:0d:2d:6d:94:ef:7a:4d:ab:
a7:2a:09:87:e8:34:dd:d7:51:c3:27:89:bc:e9:87:
6b:08:6a:97:9c:84:68:9a:0e:ce:7e:70:0f:35:e2:
d1:04:e8:31:c9:45:73:53:a4:b9:cf:80:0a:01:10:
2d:b5:df:84:1a:1c:2a:b6:ff:9f:ff:36:01:67:42:
0a:0d:12:72:38:15:10:f9:9c:b7:aa:5b:10:e6:c8:
99:b9:05:ae:6d:b5:d8:e5:4a:d8:29:fc:73:fd:45:
4a:0f:00:0f:d7:e0:a5:69:16:72:f7:6f:ec:eb:53:
9b:62:25:5b:ab:9b:88:cd:e0:c5:c1:20:0d:9d:3a:
dc:aa:2c:84:3f:f3:d8:a8:52:35:83:73:b7:a6:8c:
ef:dd:68:1f:7a:ed:67:25:36:44:13:8e:c5:b6:be:
c7:30:2d:c0:de:7b:b6:0d:6a:3c:b5:03:aa:2e:8e:
95:c9:75:66:9b:0e:b1:7b:b0:86:d7:77:a7:5d:e6:
1b:6e:fd:4a:17:5d:8c:d1:34:4b:e7:ea:b4:be:f0:
75:1f:97:7b:bc:01:77:6c:c7:e1:71:17:26:75:3c:
d7:5a:67:57:e3:52:94:80:22:46:f0:62:98:c2:2c:
f1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8A:FE:BA:C6:1C:50:2B:C6:0A:13:B1:52:CF:13:D7:F5:0C:DD:4E
X509v3 Authority Key Identifier:
keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:af:d6:50:56:17:e0:85:6b:fd:e4:81:4e:79:5e:41:ec:0b:
c3:1d:08:2e:1e:6f:a8:3c:b0:9a:d0:2e:60:ae:2c:b9:f3:5e:
87:83:13:df:71:45:e0:13:8e:f4:13:ce:73:86:b2:39:7e:ab:
b1:79:72:d6:d8:95:1b:93:af:3f:c5:38:8e:b0:f4:3d:95:c7:
5a:ab:4d:04:9d:6e:ad:8c:33:4b:05:be:8a:43:2f:3c:77:47:
60:3b:43:6b:d8:f8:fb:f9:d8:df:11:15:20:28:5e:b7:26:f5:
d5:29:db:bb:1f:23:4e:1d:7b:f2:2a:23:c0:91:e9:08:1d:f3:
13:91:42:2d:74:f8:6e:fa:40:25:4d:1b:9a:74:10:00:24:69:
50:bc:20:d8:19:c2:90:de:42:6c:17:c0:e1:78:24:52:19:44:
38:d8:ef:93:62:90:d5:12:d5:a2:4d:f8:10:7c:68:af:75:12:
86:e1:a6:63:ba:c4:d9:cf:b9:b6:5a:9b:fc:47:9b:05:d9:93:
65:b9:c6:cf:b9:ba:0f:bd:da:ad:e1:e1:69:51:42:24:79:72:
ba:0e:15:e1:26:0d:f6:36:19:45:08:34:f9:e7:0c:16:29:7f:
62:01:13:ad:bb:cf:4f:68:f1:04:1e:a9:15:65:66:48:31:34:
8f:82:ae:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:12:42 2025 by rpki-client