Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
File: xMO8BapSq5610YT1CInx_wyQzng.mft (raw, json)
Hash identifier: /3vVlR7Oaiq2o/ueUtEzwox5hYU7HynoniFLioek/iw=
Subject key identifier: 3F:D8:D6:52:AA:1C:2D:72:A4:81:B1:55:DC:3D:F6:C7:BA:FE:1E:F7
Authority key identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
Certificate issuer: /CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Certificate serial: 0197C2A5392E0444FE6EADE18A347A5AB1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
Manifest number: 0C22
Signing time: Mon 30 Jun 2025 21:01:37 +0000
Manifest this update: Mon 30 Jun 2025 21:01:37 +0000
Manifest next update: Tue 01 Jul 2025 21:01:37 +0000
Files and hashes: 1: 3Krd3X8gM6K6uQN1pZPs1zNdYR4.roa (hash: fGcfj1MLOHaxsx+wYEI+CaMKulrmVPv7+yNp06XKMSk=)
2: xMO8BapSq5610YT1CInx_wyQzng.crl (hash: IHbyaPUkRaPptXlytq4kMDHn9tTGlnBWQSs5KFvk5E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 21:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:a5:39:2e:04:44:fe:6e:ad:e1:8a:34:7a:5a:b1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Validity
Not Before: Jun 30 21:01:37 2025 GMT
Not After : Jul 1 21:01:37 2025 GMT
Subject: CN=3fd8d652aa1c2d72a481b155dc3df6c7bafe1ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:17:50:d7:99:f2:27:b8:95:c9:59:54:eb:b9:
60:70:21:f1:78:2d:c9:43:52:e9:59:da:02:d7:c0:
d0:6a:2c:2c:e9:f2:86:2e:46:f6:20:d1:ed:52:e1:
d6:d0:36:de:0a:18:51:d5:59:05:7b:23:29:a7:53:
fc:c1:af:2f:fb:30:52:91:d6:61:7f:53:7a:43:7e:
3e:00:08:0c:ed:d8:54:d9:5c:ca:56:09:d5:4b:58:
ac:f2:98:e8:80:88:dd:cb:a0:32:61:96:13:a7:ad:
d3:f3:73:15:c6:86:80:a6:de:db:d9:7a:35:27:7d:
06:d6:7c:71:18:20:57:da:44:b2:be:3b:ab:71:79:
42:a3:7e:c5:5d:5e:29:a2:8d:65:f9:2c:a1:2b:93:
54:93:ec:4b:e2:9e:9e:d8:30:8c:6c:8d:5c:88:bf:
11:7d:10:1f:f1:e2:29:2c:07:ad:d1:bc:c9:7f:af:
c6:46:2e:0c:40:39:06:7b:77:95:27:c7:1e:d5:c8:
f3:a9:74:41:07:44:43:e7:04:00:15:4a:87:86:b8:
00:88:ad:95:db:58:e4:d2:e1:47:e4:53:ae:a4:7a:
b5:31:70:99:ec:eb:f1:e0:29:ab:52:c9:12:60:ab:
55:75:98:50:25:53:00:6a:36:bb:2c:35:be:fd:26:
fb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D8:D6:52:AA:1C:2D:72:A4:81:B1:55:DC:3D:F6:C7:BA:FE:1E:F7
X509v3 Authority Key Identifier:
keyid:C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:bb:19:71:0e:7f:60:84:3a:af:f3:4b:01:61:65:a0:eb:8a:
e3:88:ac:91:2a:36:2a:f1:c2:e5:ec:3f:6e:65:35:ac:ef:7e:
2f:f6:ff:96:91:25:d2:40:18:1f:a7:dc:13:6b:97:25:92:f2:
94:4f:15:42:54:28:5e:64:f6:60:58:93:52:e2:5d:ff:eb:b3:
67:71:94:ac:2c:b1:3b:53:35:bb:3d:35:22:5e:8f:a3:5a:73:
d4:13:f2:85:e4:69:86:e5:bf:0f:f2:73:d1:4a:28:a1:35:3d:
7e:4b:39:13:e1:85:ab:5c:71:1a:49:39:5e:ff:e5:67:af:2b:
ea:47:00:86:a3:19:1a:36:7c:2e:bd:7c:2c:52:7e:73:60:5f:
fa:6d:2a:39:0e:34:f9:36:2e:95:2e:3f:fe:7e:20:4b:5e:44:
53:3a:7e:ff:32:74:2d:10:0d:01:42:7b:f2:33:87:ea:03:fc:
9b:f7:b2:59:3a:e0:09:80:b0:70:d6:32:d3:2b:63:d6:c4:30:
02:68:8f:4f:cb:e5:a6:8b:6f:f2:e8:f4:f2:67:58:6f:e4:ee:
a4:ce:7e:b2:f5:cc:68:2a:3c:d2:ae:04:77:80:9a:2a:74:18:
7a:e5:e0:51:4a:13:17:8b:c8:58:2d:a6:e4:01:98:98:f1:ed:
86:9a:e2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:16:08 2025 by rpki-client