Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json)
Hash identifier: tRGT0zKb6IWdtCR7Vl169AcObyp+n7zWcWN1/XLOepU=
Subject key identifier: F1:00:00:1B:6A:B6:0A:54:AB:09:57:80:91:44:0F:83:22:2B:D2:EE
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 0197B7EA8C5622DA43208E2C3F000F037360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 19:01:31 +0000
Manifest this update: Sat 28 Jun 2025 19:01:31 +0000
Manifest next update: Sun 29 Jun 2025 19:01:31 +0000
Files and hashes: 1: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: D05xtSiFlgRL7C6x/W8zkTNf47qQyXL7ZFerM5/beX8=)
2: hmvS4nDPTxWW6kYfDbr8j0yfqsA.roa (hash: lNR9K/eeK5h6bqGDhHsX+aTIDMdTknqLa5mK45GIX18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:8c:56:22:da:43:20:8e:2c:3f:00:0f:03:73:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: Jun 28 19:01:31 2025 GMT
Not After : Jun 29 19:01:31 2025 GMT
Subject: CN=f100001b6ab60a54ab09578091440f83222bd2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:b4:d8:30:8c:18:27:c8:83:f1:05:ed:5c:
18:37:94:7f:26:af:a3:e6:42:5f:11:16:8c:8b:7e:
1f:61:ed:97:e9:59:bd:aa:c1:97:18:65:13:97:49:
65:76:2f:05:65:0d:70:ff:53:69:24:82:50:7e:8d:
68:e2:4e:05:87:21:7b:8c:d1:05:9f:f5:18:80:5d:
9c:bc:29:8e:9c:33:6c:66:a8:b9:e0:17:05:37:6a:
55:a4:d3:c3:0d:01:92:ad:0d:7f:01:3b:3f:e6:13:
ff:2e:90:d5:eb:52:ff:5e:52:dc:f9:2e:26:9c:db:
c9:09:78:ad:bf:07:bd:6f:88:e5:48:a9:06:9f:2e:
d4:e6:c1:b4:52:c3:61:36:0b:33:cc:64:ec:70:24:
c5:c5:a9:c3:b3:7a:ed:d8:26:9a:7b:7a:90:54:c5:
46:01:72:58:0e:d6:b1:50:1e:a3:2d:3e:e3:46:37:
b4:da:74:67:0f:8e:62:46:8e:92:2b:9b:25:57:4e:
99:cc:2c:20:ad:e9:13:e8:52:f2:c5:89:01:af:11:
dc:55:85:37:f6:ec:bb:47:92:74:c8:76:2c:29:ca:
4a:78:93:b6:fe:c9:63:34:12:3e:a4:e9:4a:39:5c:
b2:4c:71:ad:fd:c4:db:f3:d8:80:1c:6d:22:f6:81:
dd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:00:00:1B:6A:B6:0A:54:AB:09:57:80:91:44:0F:83:22:2B:D2:EE
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:bc:3d:5d:d3:c9:6c:ec:63:77:e2:bb:b5:66:a1:a0:f7:ac:
38:f0:04:0e:af:63:07:35:ac:5c:ed:d6:a7:b4:88:14:6b:e8:
ad:db:17:5c:ce:7e:98:42:8c:61:5c:f6:1f:98:73:ee:b0:1d:
59:24:fb:84:8a:20:79:b3:b9:4a:0d:d5:cd:6b:40:2e:9e:af:
67:15:9a:c7:71:8a:68:ed:58:ef:d3:7b:b6:eb:be:db:eb:89:
9c:07:75:2c:0f:e1:73:4c:19:18:a5:3f:62:01:7a:a5:65:2b:
07:cb:78:ee:63:df:c0:b1:fc:ad:30:c7:cd:cb:03:01:e3:f9:
33:6d:d9:04:68:56:ec:a1:1f:49:5f:ed:9c:2a:fb:a6:18:f5:
99:b6:36:4a:4d:1d:d8:03:85:ab:d6:55:56:82:2f:38:83:79:
26:ac:a3:a6:10:2a:df:49:80:16:76:50:5d:af:38:d3:ce:35:
0f:24:cc:04:23:a1:1c:df:c8:22:7e:a4:1f:ba:7a:d4:d8:f6:
df:e6:48:3a:a5:18:e2:cd:48:b5:65:2e:1c:d0:e2:17:eb:92:
6e:6e:69:6b:56:b7:8c:99:95:8e:ca:80:e5:9e:8f:9e:2d:d3:
e9:82:ab:4e:36:62:0d:87:4e:17:4c:ff:15:62:08:77:cf:11:
f6:70:51:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:05 2025 by rpki-client