Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: R4co66cuDM2pQq3cXKxHkMJlxMMS40kEZjFyT14USuI=
Subject key identifier: C8:1A:41:4B:F1:E7:EE:4D:69:2B:4C:FA:A8:EB:F5:78:98:B0:CD:73
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 0197BA7D91F7A3C927B0018445B51A3F3662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 15BB
Signing time: Sun 29 Jun 2025 07:01:20 +0000
Manifest this update: Sun 29 Jun 2025 07:01:20 +0000
Manifest next update: Mon 30 Jun 2025 07:01:20 +0000
Files and hashes: 1: 90NkAjkP5P3wZwJqnXSO9AQDG_M.roa (hash: eK7yCOQkJI1NI1OGTayx19wjsA64ORHdInhLei4bvc8=)
2: eXxQ74lf_D70ri2LePLnjdcMkBc.roa (hash: n78D7QenzcNLmShQTibMqzzt2qmVHcGGjBzWjuUDoBA=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: 8a2ZiIxx2Ftf4gPYAZ2IIXBGNn9J/e4XbXHjPwIUpig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:91:f7:a3:c9:27:b0:01:84:45:b5:1a:3f:36:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Jun 29 07:01:20 2025 GMT
Not After : Jun 30 07:01:20 2025 GMT
Subject: CN=c81a414bf1e7ee4d692b4cfaa8ebf57898b0cd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:96:a2:73:3d:12:b2:21:69:96:ff:32:f8:
9d:53:ea:a3:c5:0f:fa:89:a8:94:61:4b:20:13:b9:
e9:41:c5:d5:a2:07:53:5f:9b:86:9e:71:b0:94:e4:
98:cb:45:b8:22:ff:55:f9:4e:02:2e:e9:60:bb:ab:
32:42:49:96:0f:04:7c:0f:04:0e:e1:38:d0:6e:c7:
50:87:88:ba:26:b9:6c:25:07:78:82:a9:09:39:e4:
2a:a1:20:54:0b:88:3d:da:f0:85:35:28:f8:38:ff:
67:29:5a:ed:2b:b9:33:f8:5a:0e:cc:e9:0f:02:f4:
1a:cf:db:4a:68:a5:fe:e0:94:3b:99:96:d3:9e:ca:
4a:58:1d:3c:87:14:38:5f:3c:9e:9e:85:ba:55:28:
6f:c5:51:4e:9a:1c:c1:33:e3:3a:27:fb:20:d1:62:
ca:65:ca:7a:35:41:eb:be:5b:e3:de:5a:65:51:c2:
00:3d:0e:a3:2b:86:95:d7:a4:62:5f:65:93:7c:a9:
52:28:33:d8:aa:38:27:11:ad:4a:6e:52:76:b8:3a:
ee:c0:39:e1:b4:7a:14:4e:e2:c9:3f:7f:5e:91:76:
24:25:6e:60:8c:c2:e6:ec:66:f0:77:0c:50:56:38:
e4:7d:b9:a7:33:1d:0d:c3:b1:66:42:25:cd:f9:0b:
91:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1A:41:4B:F1:E7:EE:4D:69:2B:4C:FA:A8:EB:F5:78:98:B0:CD:73
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:41:8d:ad:03:dc:b5:00:88:1b:bc:64:99:56:44:b2:d9:0c:
75:a8:a4:f9:0f:05:40:bf:c9:15:b4:53:a5:24:44:68:4c:aa:
09:11:c2:dc:24:95:8f:50:13:39:bf:c3:18:1c:2d:d5:be:3e:
83:db:98:c9:b7:71:b9:4d:7b:cf:36:db:b3:65:23:14:33:fa:
2d:e3:26:c7:95:44:26:dc:c5:32:29:fb:81:d7:ae:27:c4:b5:
46:75:b4:ee:e6:4a:2d:fb:59:df:ce:f4:d8:89:ca:95:77:be:
ef:9f:2d:cb:a2:37:cc:ab:94:68:62:75:86:9c:7c:af:84:d0:
90:04:3a:a3:d8:64:b3:c0:d8:ed:e8:71:f5:a3:c8:74:ee:65:
af:01:c2:6b:52:2e:f7:36:cc:bb:d4:b3:8d:f0:a3:34:c3:5f:
c0:e2:19:64:12:0b:22:19:f6:e5:6b:fe:be:33:a5:63:cb:67:
cf:91:2e:29:b6:7b:e7:47:72:f8:d5:4d:89:ef:cc:c0:67:c0:
c1:25:24:16:0b:31:e4:60:20:95:11:6b:43:89:92:f1:e3:4a:
60:bf:26:53:0b:cd:f2:40:f9:ee:ad:ac:31:3e:75:96:93:eb:
25:35:2a:f4:db:c7:74:b3:08:4a:06:ac:3b:68:a6:32:3b:d0:
c8:4d:f5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:54:28 2025 by rpki-client