Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: 5IMFDXEEOFhLgY50cSbvc/Kb0iWKjB6gI30Y2Po2vkA=
Subject key identifier: 63:25:65:65:F3:7A:F1:1E:07:E1:1C:AE:3C:2E:54:25:25:F6:2B:BC
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 0197B70F0D230BA1E835D39D7A4B21A1C592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 0E3C
Signing time: Sat 28 Jun 2025 15:01:46 +0000
Manifest this update: Sat 28 Jun 2025 15:01:46 +0000
Manifest next update: Sun 29 Jun 2025 15:01:46 +0000
Files and hashes: 1: 5stymyV2VXExRNfPDRHs0SsKv84.roa (hash: LAJy81D8Y1W3Al27GIYu76cE8aqvZvfTwIjGsrUN8O8=)
2: wX4zTXXZMo2WWHOKinMvyAiRYeE.roa (hash: dkBnWGmwxThQE3RCE6xz1EoswQLwUBpuloKrWzo2tUE=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: l8/UGnHM7Au/lComu901j1u78r4OidxpLj8IL3aMHKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:0d:23:0b:a1:e8:35:d3:9d:7a:4b:21:a1:c5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Jun 28 15:01:46 2025 GMT
Not After : Jun 29 15:01:46 2025 GMT
Subject: CN=63256565f37af11e07e11cae3c2e542525f62bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dd:88:28:4b:2a:8d:c5:8c:9e:ba:eb:a2:aa:
93:3c:2f:7a:24:db:67:be:63:7f:89:cd:26:c3:29:
20:97:61:a6:cc:3b:bf:57:34:62:74:76:33:75:7c:
37:8c:9f:24:70:b8:bf:76:42:2b:0b:fe:14:d8:7e:
ea:97:20:5c:5d:0e:64:ad:cf:54:6b:05:c7:dd:54:
e3:66:77:1a:05:23:36:87:be:a7:c1:94:f1:15:8a:
89:7d:99:26:d3:86:cf:e2:62:7b:05:28:6f:5a:f8:
be:e3:10:d0:f1:b6:d5:ed:69:9b:43:94:14:5d:92:
10:a0:5d:b2:d1:f8:28:3c:6a:03:2e:6c:40:5d:8b:
aa:16:ed:30:ec:65:9b:dd:b9:4c:35:91:25:c3:d6:
70:52:c3:b2:61:cc:2c:6c:a7:fd:3d:0d:30:03:69:
ba:d6:96:82:6d:4a:89:43:5e:05:a4:56:a0:08:7c:
12:4a:36:69:7b:5e:82:1b:ee:16:51:e0:69:28:d6:
01:1d:fa:1f:50:16:7d:e3:d7:ff:d3:0d:08:50:04:
6f:34:b2:20:37:8d:cf:54:af:a1:ee:d8:a5:8a:9c:
93:a4:f9:32:02:09:49:04:a9:21:cd:9e:23:11:89:
67:42:c8:7e:f7:49:69:af:11:c8:33:b3:bf:b5:16:
75:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:25:65:65:F3:7A:F1:1E:07:E1:1C:AE:3C:2E:54:25:25:F6:2B:BC
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ae:a5:b2:29:20:e1:db:4c:dc:7a:8d:a4:49:02:57:4a:eb:
7a:20:22:21:50:0a:26:19:e9:d7:d6:9c:83:b9:36:e8:ad:bf:
a9:74:cd:5c:d7:9d:43:8d:4d:bf:88:0d:f0:2f:27:5f:98:c1:
2a:1c:52:ec:d7:92:da:30:63:0a:49:59:e8:02:7d:65:48:63:
fc:f6:7e:85:52:c5:58:a2:56:4a:ee:72:e3:6f:dd:6b:1f:f8:
fc:87:65:8b:f8:89:db:27:64:03:50:eb:dd:6b:da:e8:c2:d4:
84:67:57:d4:6b:0a:28:00:ce:01:06:f2:0a:9f:cb:17:3d:32:
59:49:83:77:6e:60:9d:39:ac:fa:b0:e6:ed:06:d0:20:5f:a6:
75:fc:f3:e0:da:cb:5a:78:24:56:ea:b8:3b:4f:b3:39:f1:f7:
59:05:15:c4:08:55:13:33:17:40:a7:51:98:38:18:aa:95:51:
ce:f5:48:1a:67:57:82:31:d8:dc:e3:35:2b:70:46:e1:6a:d4:
38:b3:9b:a1:a7:e0:56:74:84:45:d1:ce:60:0c:56:d7:52:ef:
92:ae:c6:7a:e0:13:ab:b8:f9:4a:1e:19:76:b4:ad:31:77:69:
57:7a:08:61:d5:eb:88:1d:e0:ac:6b:f1:98:4d:41:27:58:b7:
16:f1:2b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:26 2025 by rpki-client