Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
File: xk0ihrXMe-Qviuuutqrlfnzn2is.mft (raw, json)
Hash identifier: FgM1j1xYDkBomRGI2BOelKzjAEA2ReT8oz+X9/q6Meo=
Subject key identifier: 9C:8D:BD:1D:27:D7:64:54:B9:75:58:6F:2D:86:C6:FF:6F:6D:9D:2E
Authority key identifier: C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
Certificate issuer: /CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Certificate serial: 0197C75D5B08680B93F27D36873C81601AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
Manifest number: 12BE
Signing time: Tue 01 Jul 2025 19:01:13 +0000
Manifest this update: Tue 01 Jul 2025 19:01:13 +0000
Manifest next update: Wed 02 Jul 2025 19:01:13 +0000
Files and hashes: 1: kR9L0FG1sHus996EjzOxHeu0FXE.roa (hash: UCFmwyRMlD4Wx3VXNW0aEuOECURhEH5R/h4nsdT+Qoc=)
2: xk0ihrXMe-Qviuuutqrlfnzn2is.crl (hash: hXBZSk4IPy2jE6LKPdXElCZzxsn2SOSFayiZUnXqcGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5d:5b:08:68:0b:93:f2:7d:36:87:3c:81:60:1a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Validity
Not Before: Jul 1 19:01:13 2025 GMT
Not After : Jul 2 19:01:13 2025 GMT
Subject: CN=9c8dbd1d27d76454b975586f2d86c6ff6f6d9d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:fc:58:b4:c7:47:b6:72:c7:db:62:b9:31:
12:e9:cf:eb:2c:ed:78:ec:20:eb:6b:0d:fb:e7:53:
60:4d:f0:ce:98:b1:f8:1e:fa:77:0a:df:da:8f:f1:
0c:ea:d0:b2:41:ae:0d:6d:dc:95:fc:bd:41:4c:38:
9b:40:1c:fd:64:dd:32:e1:8d:33:ad:7e:07:bb:1b:
39:39:d5:df:9d:fd:7f:e8:f4:c7:27:33:1b:7c:07:
64:7e:e9:73:e3:e5:11:1c:89:b0:f1:29:85:5f:59:
96:1a:52:f1:b7:97:4a:7a:e3:a2:cf:7c:b8:79:6d:
e4:e2:e9:01:6f:34:30:f1:c9:06:a3:79:c2:4b:c3:
2e:85:63:54:ae:4c:e5:8a:47:83:6d:ae:c8:d7:b5:
96:d6:f1:a6:ac:70:1b:59:76:ce:d1:78:79:7a:e8:
29:e2:29:75:b4:cf:96:59:d9:35:d3:62:6f:92:c1:
cb:9b:51:89:ec:7f:1d:09:1f:60:15:3e:5f:1d:62:
56:84:45:32:82:ea:6f:9d:14:39:d6:a0:16:88:11:
43:0d:2c:cf:0a:29:bf:d4:a2:05:2e:d1:b8:3e:3b:
33:d8:99:3f:a2:9b:66:5a:98:6e:d4:84:09:3f:10:
38:43:d6:6b:c3:26:ab:f2:6a:1d:94:54:0e:72:53:
bd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8D:BD:1D:27:D7:64:54:B9:75:58:6F:2D:86:C6:FF:6F:6D:9D:2E
X509v3 Authority Key Identifier:
keyid:C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6e:be:40:ba:d8:a4:9f:dc:08:e7:50:7c:b1:34:c2:bb:4c:
df:91:eb:31:25:df:d8:13:ca:5c:96:4d:ae:d1:19:f5:25:0c:
c4:67:46:49:d7:c0:8c:cb:17:54:09:3a:e7:44:41:07:9d:52:
45:4a:57:7e:86:d1:fd:a4:6c:22:43:89:48:45:41:a3:8c:7e:
91:2f:a3:06:75:f3:be:16:84:55:84:0d:dc:09:20:2d:28:31:
5d:cd:56:23:87:cf:8f:31:9f:01:af:21:21:98:d4:f0:43:e0:
45:88:b1:a3:c2:59:32:f0:5e:e0:a0:a2:ea:10:f6:04:7b:b0:
2a:57:0b:32:c8:2b:f8:bf:d9:51:1b:7b:56:85:2b:24:b1:8b:
62:6a:37:ec:75:9d:11:7c:94:0a:5b:b0:eb:02:14:a8:6e:69:
6a:c2:82:8b:0c:66:6c:b1:19:8a:5a:53:da:4a:40:fc:6e:d1:
74:9b:99:40:19:95:6e:33:ce:61:98:80:49:64:dc:ce:33:eb:
af:86:39:e7:bf:bc:0b:5e:78:64:0a:0b:7f:2a:f9:7f:b8:66:
28:fc:f1:79:22:52:5c:5f:7b:9f:6b:e1:46:78:5e:c9:b7:57:
f2:66:e4:e7:72:b3:7f:93:42:5d:4b:69:e2:96:a8:e9:88:41:
fb:d3:13:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 02:19:58 2025 by rpki-client