
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
File: xN3-D0v7aYLxlgqyo_rnovtFepM.mft (raw, json)
Hash identifier: dMu9oXhAn0ZkbGnVgVFfC4Tjo5m+yUtU9UgyN69RmU0=
Subject key identifier: C4:37:BF:D1:00:F4:49:08:49:77:76:80:F7:FE:15:EE:0C:89:15:B9
Authority key identifier: C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
Certificate issuer: /CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Certificate serial: 0197C3497C83F2F8B37C76E6191B61964220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
Manifest number: 073E
Signing time: Tue 01 Jul 2025 00:01:02 +0000
Manifest this update: Tue 01 Jul 2025 00:01:02 +0000
Manifest next update: Wed 02 Jul 2025 00:01:02 +0000
Files and hashes: 1: S8JU_Rcn4aoynb-Ajo5SG-rhPXY.roa (hash: fzgvAAaxWzcuS3HHSBSyM+73bTeADHpyyR/eP8i6gAs=)
2: xN3-D0v7aYLxlgqyo_rnovtFepM.crl (hash: cWZRB/AbskiVChpo7BqJnvy4iZ38MfY1AqJC2ANga+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:49:7c:83:f2:f8:b3:7c:76:e6:19:1b:61:96:42:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Validity
Not Before: Jul 1 00:01:02 2025 GMT
Not After : Jul 2 00:01:02 2025 GMT
Subject: CN=c437bfd100f4490849777680f7fe15ee0c8915b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:2e:44:b1:36:b1:3d:b5:04:55:db:b4:65:
06:92:0d:bd:27:39:5a:20:95:2f:bc:79:b9:56:61:
b2:6d:c2:2f:a9:f3:50:57:88:e7:07:01:22:c6:b7:
85:58:db:c7:51:14:14:ef:a6:36:e1:f8:8f:cd:12:
71:05:09:97:75:10:ef:09:cc:28:a0:65:ab:13:3a:
d1:70:9a:99:b3:33:c8:ac:e8:b7:63:34:94:ab:d3:
f2:29:b8:f2:38:4f:13:87:e2:59:b1:e2:ec:4a:90:
3b:eb:3f:31:3b:ef:8c:8e:4e:65:51:28:41:fd:dd:
92:53:fa:7e:e8:bd:ff:e1:d9:c3:aa:a1:40:6d:f4:
3e:a9:2a:50:8a:14:3e:11:cb:dd:e9:87:74:f0:42:
32:ec:88:17:e2:d6:2c:80:7b:06:23:51:14:5d:df:
c1:d3:da:16:7a:bd:0a:cc:cd:b4:d7:57:0a:f6:c6:
d5:19:87:ff:92:d2:f4:cf:de:74:42:db:a6:d7:fe:
f6:f1:04:2f:08:05:b5:79:a5:05:8a:5f:35:1e:03:
af:7b:7a:f6:c0:1e:db:08:ab:71:bd:86:8f:20:ec:
0b:a9:d6:81:cc:14:7e:a0:ba:54:8e:cd:ab:7b:a5:
bd:08:23:d4:f3:71:e1:be:72:33:28:d8:29:fb:6d:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:37:BF:D1:00:F4:49:08:49:77:76:80:F7:FE:15:EE:0C:89:15:B9
X509v3 Authority Key Identifier:
keyid:C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:dc:25:b1:c2:7d:d3:2e:4e:60:80:f5:13:a7:1c:84:07:4b:
a6:5e:63:07:35:7e:10:06:20:08:73:f2:5c:c1:d7:36:0b:ba:
5d:7b:04:d1:b3:ef:b9:ff:56:4d:6d:53:f3:8f:a6:e0:34:10:
88:a8:71:8d:ef:74:b6:6c:c1:c7:56:bb:cd:9b:8d:63:33:fd:
bd:7b:af:93:8e:8d:40:fe:97:8d:75:fe:1c:fc:8e:45:3a:36:
92:a2:2e:5d:79:11:16:66:46:39:f8:8f:c7:7a:22:9f:08:5d:
16:f0:4e:9b:b7:31:d9:24:a7:fe:5c:c4:8c:c7:aa:30:7d:9d:
c5:dc:a1:01:a8:d6:7b:04:4a:6d:3f:67:61:d3:c4:68:d0:47:
d7:96:19:c9:64:8e:96:1c:b6:22:d1:ef:21:57:b5:5a:d0:0e:
d3:e3:5c:84:1f:d1:32:09:06:0d:95:28:74:f0:d2:02:d3:0b:
ef:ed:9e:47:8e:1a:23:66:e8:13:28:db:07:14:43:7f:14:ec:
64:45:40:9b:05:dd:17:98:bc:b1:50:58:d6:67:d9:01:9d:87:
44:cd:1d:e2:cb:72:4f:7b:c3:46:e8:fc:50:8f:2a:e9:fe:bf:
e1:57:bb:38:5c:ef:0a:1a:c6:ce:e5:63:42:96:36:1a:b6:ae:
38:de:b7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:04:32 2025 by rpki-client