Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
File: xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft (raw, json)
Hash identifier: fgtvPoGucKWsdMCDbUumTz5bP02JjKhtKXHMvU96jrE=
Subject key identifier: 24:01:7F:25:2D:F7:AA:11:A3:82:2E:34:FB:AA:03:02:AD:09:41:59
Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
Certificate issuer: /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Certificate serial: 0197B7B32C13DCB57B72870C13B8E8CE9A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
Manifest number: 150D
Signing time: Sat 28 Jun 2025 18:01:02 +0000
Manifest this update: Sat 28 Jun 2025 18:01:02 +0000
Manifest next update: Sun 29 Jun 2025 18:01:02 +0000
Files and hashes: 1: C3xZoR3LtseXs9YgZ15-hhPr18E.roa (hash: 1WbsEFbzKO5s8iSa/8CXV3aiHCeUKDOXCmds/8JgsxY=)
2: xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl (hash: 45DGSYmsVb3txXJruU4luxp3XsuTxfYMgjQirm53WRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:2c:13:dc:b5:7b:72:87:0c:13:b8:e8:ce:9a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Validity
Not Before: Jun 28 18:01:02 2025 GMT
Not After : Jun 29 18:01:02 2025 GMT
Subject: CN=24017f252df7aa11a3822e34fbaa0302ad094159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:81:df:b1:3a:b4:ea:e5:dc:30:e2:80:3c:7d:
46:8e:9b:2f:11:1c:0a:41:a5:03:34:76:34:48:07:
70:7d:85:44:38:e4:26:33:c1:cc:88:3d:65:f0:a2:
bd:37:0f:67:5a:d9:f5:83:01:2e:e2:d8:74:30:31:
a3:df:b3:e9:74:24:33:b6:e2:7b:0d:da:bf:ee:4c:
5d:25:07:12:ab:bc:1a:ad:80:0a:6e:c6:b1:0c:30:
76:b2:3b:dc:95:a7:42:e4:f9:e5:a1:a1:d8:e0:7d:
66:76:10:96:ef:b6:23:90:a2:4c:df:de:f8:68:1d:
7f:3b:72:1f:6a:c4:f1:c2:cc:03:ce:15:40:2b:0b:
0a:ee:bf:4a:f6:1a:1a:87:08:ac:d5:49:d6:13:b7:
31:ba:0f:89:8d:cb:cf:de:d9:ff:a5:da:6f:34:d8:
05:27:72:aa:b8:33:ee:07:73:33:e4:99:87:06:ea:
ff:9f:26:d9:16:87:b0:ec:a3:cb:d8:f4:5c:40:51:
6b:f5:e0:60:9d:35:10:ad:fc:1e:20:09:1d:ec:b8:
6e:bd:af:d6:42:73:b6:75:22:23:98:0d:b3:96:96:
51:ce:b3:cf:74:a6:9f:83:64:25:ba:93:a9:4a:d7:
aa:9f:9e:ec:e2:af:c0:d6:fb:3d:9c:9d:34:46:3b:
e7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:01:7F:25:2D:F7:AA:11:A3:82:2E:34:FB:AA:03:02:AD:09:41:59
X509v3 Authority Key Identifier:
keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:6c:1b:ed:e2:20:75:d3:c5:cd:b5:0b:f3:03:29:13:e1:bc:
fe:2e:ea:85:a7:75:10:91:96:c9:0c:d6:c9:19:a8:3b:b5:03:
d0:bd:3d:73:ca:4a:ff:fd:41:83:e3:58:ab:35:f5:b0:11:ac:
af:42:e4:dd:9b:cc:5e:5d:29:45:3f:fa:1f:60:73:9e:24:b5:
93:f9:58:39:8a:69:48:1c:c1:44:15:66:34:d9:6c:a1:81:5d:
a2:65:c9:07:0c:14:d3:21:03:81:c7:67:e6:2a:b3:85:bc:16:
94:54:20:bd:1c:a0:78:71:02:ba:f7:21:b9:30:35:f3:aa:fe:
6b:6a:ee:b4:a9:d8:64:de:83:8c:4f:f1:2e:a8:07:8d:08:5b:
c2:4c:ad:73:e7:1a:f4:af:b3:38:47:50:c1:62:87:23:9e:9d:
e1:09:db:be:26:84:e6:8a:7e:4a:ee:19:ec:60:70:21:2b:38:
7d:28:ff:3b:6d:1e:85:ca:c0:93:12:7c:94:4e:9f:9d:73:7e:
d5:41:17:b7:bc:6d:31:a6:15:de:bb:35:19:24:b6:19:60:dd:
fb:35:bf:62:ee:8c:76:ba:06:ae:c5:b1:c3:48:da:7e:da:c3:
05:21:77:7c:d0:a6:98:3a:55:f9:a3:e5:c0:d8:2c:cb:5d:38:
2c:d1:9b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:42 2025 by rpki-client