Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
File: p_xcZck6dAQIaxelTn4NqWCpspM.mft (raw, json)
Hash identifier: Fp9A+Bn6SbT61rcRZwrhdkUwjElIJEsnHP6CutnoVMk=
Subject key identifier: 65:EF:D7:1C:8E:C0:C1:3B:51:30:2A:B9:2F:5E:7C:5C:80:86:5A:40
Authority key identifier: A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
Certificate issuer: /CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Certificate serial: 0197B70EF7DF1D7BE28DEAEF032705FE48EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
Manifest number: 1138
Signing time: Sat 28 Jun 2025 15:01:40 +0000
Manifest this update: Sat 28 Jun 2025 15:01:40 +0000
Manifest next update: Sun 29 Jun 2025 15:01:40 +0000
Files and hashes: 1: 8-SPB1FRD1dqgSwieEEafk1GdQA.roa (hash: vazRE5ylOn6vVMnXFU4rXRZh7sO8QjAU8zOnvhOztXo=)
2: p_xcZck6dAQIaxelTn4NqWCpspM.crl (hash: QQ4aaawe0HkNOIHECan4Vt9DclbD8cD/715Ev1extxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f7:df:1d:7b:e2:8d:ea:ef:03:27:05:fe:48:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Validity
Not Before: Jun 28 15:01:40 2025 GMT
Not After : Jun 29 15:01:40 2025 GMT
Subject: CN=65efd71c8ec0c13b51302ab92f5e7c5c80865a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:78:e8:70:26:35:3d:7b:e8:74:86:1e:aa:4d:
ae:78:36:0d:85:87:5c:0d:5d:67:d1:a3:39:91:3f:
6b:e8:c2:28:f7:d1:1b:37:6a:a4:60:18:9b:7d:f4:
e2:ca:f4:41:20:1f:40:9c:0e:d0:ae:42:14:1d:03:
9e:4e:76:5f:a2:eb:06:02:ff:dd:b8:92:b0:bd:e4:
50:b3:7b:6a:0c:ed:38:23:80:44:4a:99:b2:ee:ea:
32:5d:b1:5d:d6:ad:44:c3:6d:dd:84:93:bb:8f:95:
69:12:58:e2:c0:f2:b5:cd:1d:3a:a3:5d:0d:de:6a:
ff:e0:43:b9:48:e3:c9:7e:bb:61:ad:4b:44:a2:18:
e4:ce:32:9e:31:d1:a6:90:e2:50:a7:c1:b4:28:a2:
a4:e6:27:51:d7:cd:3b:91:b0:60:d6:f0:b0:91:24:
12:56:56:ba:9a:be:f4:99:f9:b6:bc:80:0b:0a:b8:
91:0e:50:84:31:d6:36:6a:55:72:46:c4:bc:75:16:
f6:3c:24:4c:bc:17:ab:2e:9a:68:f4:e2:50:63:50:
da:d3:6e:d0:6a:22:31:90:24:60:86:30:02:0a:5a:
55:6b:68:db:90:09:c0:f7:cb:f6:7d:79:0f:bf:ae:
90:17:6e:2c:9c:97:b2:23:15:96:b3:8e:3a:e4:9e:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EF:D7:1C:8E:C0:C1:3B:51:30:2A:B9:2F:5E:7C:5C:80:86:5A:40
X509v3 Authority Key Identifier:
keyid:A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ee:85:2e:55:4d:68:4e:9f:90:0d:b6:92:14:a6:22:11:70:
82:18:0b:45:cd:90:57:bf:c4:76:f2:2d:b2:9e:f3:87:ee:09:
8c:d0:62:b5:e6:5b:08:60:40:e9:7f:af:74:19:45:b5:77:b0:
64:d2:8f:6e:b3:14:42:ae:d1:bf:30:2e:d3:9a:28:9e:f7:43:
78:cc:76:33:89:8a:d7:99:42:77:56:2b:6a:23:ba:99:c7:64:
fd:5e:30:da:31:62:10:f2:da:6a:b5:bb:7f:dc:9f:eb:4f:69:
a0:3f:50:d4:2f:9a:81:18:29:2e:1f:af:80:4e:f3:02:e1:f7:
d5:e4:59:b0:ee:a4:98:7a:0a:12:a0:53:fb:53:98:f3:cd:48:
b4:47:2c:31:7d:eb:13:f9:6e:86:97:c8:b7:b7:be:41:2e:dc:
e4:1c:7c:2d:15:93:85:10:ee:08:fa:a4:74:e3:a3:37:ed:78:
dc:db:4f:97:a2:d5:ec:e8:52:fd:95:d5:c9:9b:a8:6a:e7:d3:
d5:21:96:ae:a0:83:d3:1e:3f:e5:db:95:4a:93:b0:26:f4:ab:
48:a6:ae:6d:ec:e3:50:a0:c1:c0:ae:7d:93:37:af:eb:35:19:
18:65:eb:4d:ed:02:b4:f1:81:02:b6:eb:3c:48:a7:bc:d9:e5:
71:c8:ff:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:24:05 2025 by rpki-client