Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier: WU21JXH9xKzCKIKG2PfaV9g4d8W5Uw1vEeqJL1jtOzA=
Subject key identifier: 12:0A:50:1C:1F:FE:39:5A:D7:01:2B:6F:5E:C1:84:2A:A7:33:23:6F
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 0197C8039A3E4363BFB27BF4FE1D0FAD501D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number: 04B2
Signing time: Tue 01 Jul 2025 22:02:48 +0000
Manifest this update: Tue 01 Jul 2025 22:02:48 +0000
Manifest next update: Wed 02 Jul 2025 22:02:48 +0000
Files and hashes: 1: dL6NU49k6HbeSIU7QVDGoeBlKvM.roa (hash: D8I1MGPzQuGFKjsxT8JBT5WNbzUdy6FOkd6uHqQy/oo=)
2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: AkqEZdSi1QHFLjt2hNej5cNJaIrY9iXHFTId1mZ+OFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:03:9a:3e:43:63:bf:b2:7b:f4:fe:1d:0f:ad:50:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: Jul 1 22:02:48 2025 GMT
Not After : Jul 2 22:02:48 2025 GMT
Subject: CN=120a501c1ffe395ad7012b6f5ec1842aa733236f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:4a:e6:4a:69:11:b2:2d:e9:16:75:d1:d1:
31:78:45:f2:90:cd:48:9e:dc:78:ce:60:5c:01:ab:
1d:8e:21:e7:7c:06:6f:ed:d4:7b:09:3a:27:75:0b:
1a:55:7d:79:6e:e4:05:cb:80:d2:bb:02:aa:ad:0d:
58:59:b0:cc:86:46:70:68:ae:bb:31:79:e6:f9:0f:
0a:ac:01:cd:f1:8b:e0:1a:25:04:ab:28:79:79:c2:
a8:04:81:88:6e:7e:21:9f:ce:0f:d1:12:c8:ac:50:
52:67:1e:74:ce:a4:6f:8e:9a:03:1d:f2:94:6d:65:
61:6b:f6:a6:b4:93:04:e7:09:ec:49:d6:e6:07:d2:
dd:d2:30:58:b9:08:49:74:cb:87:c1:53:34:12:d3:
47:2d:68:44:79:93:37:25:f7:c4:ee:95:bb:fd:47:
50:1f:39:b1:4f:a8:5d:84:d4:1c:2f:2e:9b:2d:91:
37:07:ca:54:52:f7:0d:1a:49:23:49:36:88:21:94:
4b:fd:d0:f1:01:8d:04:ce:e3:3e:bf:45:b4:d1:4e:
8d:7f:77:33:86:23:9c:5a:71:db:74:cd:68:c2:7a:
78:c3:2b:b6:d3:ff:02:ef:12:2f:11:ab:55:45:57:
db:9e:ef:6c:4a:4b:dd:ac:6e:6e:04:d9:42:4e:e4:
d3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0A:50:1C:1F:FE:39:5A:D7:01:2B:6F:5E:C1:84:2A:A7:33:23:6F
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1e:68:3f:56:42:14:05:0f:b5:94:53:55:73:ca:68:55:d2:
49:dd:f7:84:7f:71:54:71:a8:4b:0e:e2:a6:31:44:94:7b:2a:
67:75:c3:45:6b:01:e4:32:dd:a1:3a:47:f8:1b:ab:5d:39:fa:
dc:69:ac:30:94:eb:49:9c:59:d2:97:ab:22:0b:ef:02:77:a3:
c0:31:7c:42:7f:bd:b6:98:b7:00:50:98:91:53:28:2f:d9:31:
99:f7:2f:29:cc:d4:3c:7d:78:cd:6b:5f:45:0b:cf:5d:ed:c1:
8c:47:8f:48:e3:ba:2c:d1:11:5e:86:d8:d6:ee:c6:bc:ea:12:
a9:94:72:3d:a1:ad:b1:69:03:75:4c:a1:d8:da:52:6a:33:52:
fd:3c:fd:50:55:76:3f:56:ed:c9:c8:a6:38:59:56:50:a1:07:
01:60:d9:49:2a:9d:6f:92:15:18:da:43:37:e0:29:4d:3e:81:
ce:5e:f3:e5:62:e8:5d:e9:9f:92:98:4f:e6:af:88:bd:87:1d:
a0:39:bc:69:e5:14:48:05:48:91:63:a8:d4:86:9d:78:36:4d:
ae:38:e9:6c:68:5c:1f:49:14:73:23:84:d8:f4:a6:93:44:8a:
2c:0b:dc:b4:5f:70:98:c0:f1:6f:db:3f:ea:f3:d6:05:bd:b7:
85:a9:e9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:53:24 2025 by rpki-client