Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json)
Hash identifier: rTuOohmO1FLm1CZAho4/z9qVSL3iY15UHPQrdd7XhHs=
Subject key identifier: 0A:4F:57:34:E7:7A:B4:F6:B5:51:CB:F0:86:34:70:6A:44:46:A4:D1
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial: 0197CC4C9018D4E449AC2AAD0382C4E3EF36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
Manifest number: 1415
Signing time: Wed 02 Jul 2025 18:00:58 +0000
Manifest this update: Wed 02 Jul 2025 18:00:58 +0000
Manifest next update: Thu 03 Jul 2025 18:00:58 +0000
Files and hashes: 1: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: nXfTEhUKfP4hD8rbUMvTsIjgNatime3FnUYBP2dcS48=)
2: zUVgbIXYeTGVKXvGEymmIIswak0.roa (hash: byi69vgfiULR5t5etKbYt0ap14VdTPxIUc5JBAXpbBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:90:18:d4:e4:49:ac:2a:ad:03:82:c4:e3:ef:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Validity
Not Before: Jul 2 18:00:58 2025 GMT
Not After : Jul 3 18:00:58 2025 GMT
Subject: CN=0a4f5734e77ab4f6b551cbf08634706a4446a4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f5:b8:6e:0a:e7:40:f6:df:19:4e:e4:eb:f2:
ac:8f:3a:e0:64:bd:f9:62:53:b8:93:9e:0e:bf:00:
7f:f0:43:9d:7d:1a:89:a2:89:7f:a6:1d:8d:70:cc:
e6:cd:33:70:c9:e8:8d:b1:b2:41:80:09:5d:db:8c:
82:9d:f2:3f:be:d1:ec:be:6f:05:2b:2c:0e:ff:e7:
59:9e:9a:87:c7:1d:23:33:81:d0:6c:5f:ab:69:4d:
b2:e3:cf:bb:36:0b:71:7c:46:f8:83:16:55:db:8e:
a6:7b:aa:12:53:08:f6:b9:03:95:3c:25:31:ff:2a:
f1:24:0b:61:b8:9b:0c:2f:f8:83:5d:a2:91:f5:8d:
26:87:00:94:6c:9b:4b:88:b3:b5:55:4c:f9:c4:c8:
53:04:65:6e:85:08:ef:f5:18:6e:7c:6f:86:46:dc:
d1:b4:60:ff:8c:a5:a2:69:88:2d:bc:3c:4a:a6:e1:
66:f9:90:7a:5f:ab:bf:a8:f2:41:37:68:c5:5d:2f:
17:e8:8b:8d:cf:76:90:1e:ce:d4:d4:2f:40:f5:61:
e2:6d:27:08:2f:b3:7c:7e:78:94:e4:72:79:96:76:
f7:25:17:b0:c8:a1:ae:4a:91:44:1c:08:c6:1b:02:
07:3f:06:80:fa:1b:2b:bc:15:95:59:58:bc:ad:7c:
e5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4F:57:34:E7:7A:B4:F6:B5:51:CB:F0:86:34:70:6A:44:46:A4:D1
X509v3 Authority Key Identifier:
keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:23:9a:4a:ec:8c:3a:43:ca:06:ae:3c:1c:42:8f:45:24:7f:
9c:d6:be:cc:9b:aa:9a:0d:13:84:c3:20:7f:e7:24:f9:1c:8d:
03:f4:ad:74:cf:c2:f0:f1:f5:dc:77:49:d2:55:62:ac:07:1e:
50:d4:bb:51:23:58:af:5a:cd:29:25:39:8c:e9:40:c9:d5:a0:
00:b7:c8:3b:f6:0a:78:f8:ee:8d:3d:7e:b0:cc:00:86:be:da:
3c:0d:9b:dc:94:58:bc:be:75:84:96:19:02:74:1e:4d:c3:6b:
88:00:0a:be:d5:7b:f1:58:f5:09:4a:31:e7:a6:bf:66:fe:92:
35:26:f6:8e:e9:c3:8f:15:fb:71:23:a1:1f:30:b8:8a:17:09:
e3:7a:d6:1b:a1:8a:71:19:b4:fc:08:5b:db:3a:86:eb:95:49:
68:a8:53:0d:9e:da:7b:dc:cc:3f:39:7e:9a:7a:3e:7d:88:13:
e0:ae:95:7c:eb:a9:5e:33:13:9d:2d:54:59:ff:47:e7:b0:fb:
4d:82:4f:b6:16:f4:2b:37:a4:45:0f:c6:ab:12:0f:ad:b5:56:
3f:d8:46:11:4e:d6:4b:a0:b6:9d:ae:84:d7:3f:a0:d7:28:f0:
cc:02:4a:56:2c:b5:58:7b:ab:96:af:c4:21:6f:8d:9a:2c:f2:
45:b8:c1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:40:10 2025 by rpki-client