Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
File: x2oNsIMDONLSlh5Mj_sKtaA__l8.mft (raw, json)
Hash identifier: p8rq9oaGM9vXR+aQ2o9kAHzi1op5UFan9diIM4s9ZQ4=
Subject key identifier: 4E:C3:AD:51:E5:F7:E0:65:BD:93:40:E3:E4:FE:6A:3B:86:30:E8:8C
Authority key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Certificate issuer: /CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Certificate serial: 0197B9D8C8ECD5107BE322953711CE7C086A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
Manifest number: 1042
Signing time: Sun 29 Jun 2025 04:01:21 +0000
Manifest this update: Sun 29 Jun 2025 04:01:21 +0000
Manifest next update: Mon 30 Jun 2025 04:01:21 +0000
Files and hashes: 1: Ff3N8PO1mcQncsXGHiQUjQO2nRw.roa (hash: iiJaJiMdSghzZUoCo21ZColIpsI+U3kb/p0Er1rgouw=)
2: x2oNsIMDONLSlh5Mj_sKtaA__l8.crl (hash: DlXzo4hjReaHh2dX0BA9j4ON7hu75v9kaODg3HmU958=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:c8:ec:d5:10:7b:e3:22:95:37:11:ce:7c:08:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Validity
Not Before: Jun 29 04:01:21 2025 GMT
Not After : Jun 30 04:01:21 2025 GMT
Subject: CN=4ec3ad51e5f7e065bd9340e3e4fe6a3b8630e88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:70:c6:17:10:b1:ce:b2:95:7e:7f:43:89:
9c:93:2a:0e:3b:ef:a2:14:14:36:fb:1a:4d:b6:e0:
60:54:73:14:33:e3:03:44:c8:17:0e:9d:40:84:35:
8b:f4:ba:8e:c7:45:bb:8c:1a:a3:61:d4:c9:97:37:
7f:71:e0:59:b2:92:44:dc:07:cc:dc:cb:5d:81:87:
60:3f:d3:c8:60:3d:e2:bb:ad:b8:27:56:10:37:bf:
bf:0a:8a:38:a9:f8:7c:93:63:78:fa:9c:5c:e9:6f:
06:21:91:98:69:f2:dc:01:56:78:58:f1:65:5c:d2:
51:a7:99:f2:3a:cf:b1:a4:4e:30:ad:c7:52:c8:c2:
5c:2f:19:77:06:11:11:8b:d8:87:5b:09:74:35:ec:
a9:3f:44:4f:a5:e9:2f:29:05:5d:29:a6:bf:ab:b3:
65:34:ce:db:19:32:53:78:c8:f6:e4:af:74:f6:d7:
79:fc:35:3c:72:f4:3c:44:21:bf:02:4b:09:de:6c:
5f:10:27:dd:a5:5f:ac:54:ec:f9:da:2f:a4:21:bf:
55:05:70:bd:07:da:14:f5:bf:e6:02:d9:66:1a:8c:
4f:4a:d8:07:73:cf:ce:4c:0b:8c:c0:89:db:34:87:
49:c2:80:7d:00:81:62:a8:e8:20:b9:3e:99:9d:2b:
ce:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C3:AD:51:E5:F7:E0:65:BD:93:40:E3:E4:FE:6A:3B:86:30:E8:8C
X509v3 Authority Key Identifier:
keyid:C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:82:03:07:fa:c9:2b:73:95:7c:79:d0:31:58:5a:bb:1a:88:
cf:65:9c:30:98:a7:81:fa:b9:48:6d:fa:37:27:29:28:74:ea:
97:8c:0c:62:fe:dd:ce:f5:7f:6d:27:63:59:6e:df:1e:0f:74:
3a:70:5e:61:14:ed:10:30:2d:83:a7:45:47:6e:eb:3d:94:54:
a3:8a:54:f2:49:0f:09:58:43:48:03:85:03:8f:2e:ce:01:a0:
06:c1:20:04:ec:f8:94:81:16:7a:7b:00:69:1a:ce:a4:4e:bd:
06:4f:57:8e:cf:3f:c9:8e:03:7b:d7:06:56:08:26:4f:74:55:
b0:00:1e:2f:99:84:86:13:6e:89:84:b2:5c:7a:a0:b8:86:c5:
b0:f6:22:7b:24:be:81:13:54:8f:e4:b4:fb:35:52:48:06:9e:
2e:44:a9:cc:ed:57:4f:f3:85:3f:05:f8:ad:81:d8:1e:69:c0:
ef:dc:8e:93:82:0f:7a:d5:b2:8b:06:14:4e:05:bc:ce:51:bf:
8c:eb:83:8e:68:2c:b1:91:58:7e:1a:81:e8:63:91:2e:99:ea:
34:e7:61:be:e1:63:7f:62:1c:ff:f6:69:fa:6e:4b:08:cd:45:
57:5b:b3:a4:c4:66:a2:60:23:fe:8e:91:bb:3f:97:6a:4b:9c:
03:11:e0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:07:26 2025 by rpki-client