Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
File: xVfBn2xy2JAMTYnsers11PqSEUs.mft (raw, json)
Hash identifier: UTwl81wG7s+8zlGu+PG5tyzZJHfie4ptmjWP4Pn9Snk=
Subject key identifier: E1:49:84:7F:61:13:E6:AA:5B:64:64:9E:35:A2:56:9A:E2:64:02:C2
Authority key identifier: C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
Certificate issuer: /CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Certificate serial: 0197B745890730562C19908C8784F2FB42D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:01:16 +0000
Manifest this update: Sat 28 Jun 2025 16:01:16 +0000
Manifest next update: Sun 29 Jun 2025 16:01:16 +0000
Files and hashes: 1: Edf4BRC_SQM6caxUC9bnztO-Qtw.roa (hash: jrSFQj+uOrtwJVK8tmCsyrdBIOLOL0+D+bgHO+lUMkU=)
2: xVfBn2xy2JAMTYnsers11PqSEUs.crl (hash: PL2zYTKZwWaPfHfD/Wrd3q4IlOUN/ukgGclKiC96ZAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:89:07:30:56:2c:19:90:8c:87:84:f2:fb:42:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Validity
Not Before: Jun 28 16:01:16 2025 GMT
Not After : Jun 29 16:01:16 2025 GMT
Subject: CN=e149847f6113e6aa5b64649e35a2569ae26402c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:be:b0:d9:1d:e6:6e:8f:10:09:b7:0b:7c:cc:
b8:6e:9f:e6:b2:88:0b:a6:b9:fa:95:58:9d:09:74:
bd:cc:87:f5:35:39:9e:55:cb:8e:93:15:96:6a:81:
5f:88:84:c2:57:dc:0f:dd:2d:4b:69:b7:6c:8a:b0:
6e:a2:73:3a:ee:92:c6:8d:fc:19:ab:24:dd:8d:c5:
73:9e:6c:a8:89:f3:e1:ea:ca:9a:ea:e2:a5:4c:40:
ec:6d:7f:f6:9a:18:86:3b:86:56:63:94:5d:f3:81:
eb:bc:6b:9e:a5:65:c5:4e:a5:ae:be:04:24:d2:0d:
ec:75:06:7e:b1:19:fa:5a:24:d2:a6:56:52:e9:1a:
ae:e2:65:67:ff:1c:4e:cb:d3:2b:20:11:cb:19:89:
b1:7f:c8:ce:5b:ca:a7:73:18:5a:d9:35:66:b8:68:
67:90:29:dd:99:8c:68:3a:28:28:e6:5b:33:a4:89:
65:5c:3c:e4:bc:f2:e3:2b:4c:f6:b3:14:7f:25:70:
71:84:44:0f:8f:fe:f4:3d:72:17:df:3b:2b:15:b3:
9a:f5:d3:55:5b:0a:e8:a1:e2:28:6e:57:54:14:63:
b4:24:c7:4a:22:5f:85:b1:05:07:0f:35:14:49:ca:
5a:80:c8:03:03:aa:60:02:e6:89:86:35:78:36:41:
b3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:49:84:7F:61:13:E6:AA:5B:64:64:9E:35:A2:56:9A:E2:64:02:C2
X509v3 Authority Key Identifier:
keyid:C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cd:1c:37:66:1e:88:7f:9f:22:96:52:33:19:0e:d7:c9:d8:
a9:45:27:13:90:66:c2:49:58:e4:89:d7:09:0f:28:00:a7:6e:
85:79:df:92:3e:67:ff:13:63:7f:d0:6c:9f:0b:37:ca:55:f7:
d0:38:d3:03:23:e1:b1:0e:55:6c:93:1c:03:2d:36:bc:04:a5:
70:fc:44:cd:88:dc:81:ca:6c:4f:0b:7c:2e:bb:8a:1e:76:34:
26:83:ce:a1:ce:99:35:b3:b7:f4:6a:ce:2d:28:03:bf:dc:ab:
c0:f1:d6:99:ce:ca:95:7b:5b:91:37:e8:e8:85:e0:24:00:9c:
e8:0e:a7:dd:88:4c:44:44:46:4a:4b:84:3c:6d:9f:9d:58:df:
8d:54:c6:2d:a2:8a:da:ac:12:77:98:8c:1c:df:b7:ce:a6:d3:
97:bf:3e:4c:ba:dc:b1:13:25:3a:6c:39:d7:88:ac:4d:71:e8:
8a:15:14:f7:16:70:be:f9:1d:35:1f:fb:c8:98:27:e1:42:a0:
46:cc:a9:05:e0:a1:31:a5:98:a9:63:22:2b:1e:c6:a0:04:2b:
e1:a7:6b:58:6e:18:c1:b8:08:fd:7d:cd:e6:2f:e4:19:a2:fb:
1a:1f:c0:16:0d:8d:39:11:ba:c2:30:fc:92:78:4a:70:f3:e5:
10:48:95:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:26 2025 by rpki-client