Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: od/YT4ptoy+7shRtTaoC6g6BpoMiX5PsWvbi5cvQ/7M=
Subject key identifier: FC:CC:93:78:74:79:75:A8:D0:E7:94:2C:B1:57:5F:B2:89:03:EC:BF
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 0197B70E9F499CDCC2D13050CF2BC0177023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 1322
Signing time: Sat 28 Jun 2025 15:01:18 +0000
Manifest this update: Sat 28 Jun 2025 15:01:18 +0000
Manifest next update: Sun 29 Jun 2025 15:01:18 +0000
Files and hashes: 1: 60HEsBaMqcn-eIgLR5xlDOKT3H4.roa (hash: 92TWLG+yrUdSGxzPqHvt67q91xHgIIuyd/z6PMj19WQ=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: 6c9xfoAMzFnmaMpIEZXtdrj2eqcWAS6EMujdN8x3oAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9f:49:9c:dc:c2:d1:30:50:cf:2b:c0:17:70:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Jun 28 15:01:18 2025 GMT
Not After : Jun 29 15:01:18 2025 GMT
Subject: CN=fccc9378747975a8d0e7942cb1575fb28903ecbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:49:96:18:a3:76:78:46:ff:af:92:8e:74:
50:34:e2:5b:fc:26:da:29:21:f2:0a:28:70:c0:28:
9c:72:94:03:b7:e2:a4:f8:73:37:6f:19:08:26:c2:
de:e8:68:37:70:3b:69:32:d4:22:9f:ce:cf:69:c5:
e5:43:8f:89:da:2a:ff:02:51:ec:20:15:d6:f2:b7:
12:cf:a2:a4:18:d6:a9:cc:06:58:c2:e2:7f:98:e0:
8f:4b:1d:39:5b:19:e0:ab:7d:a0:45:76:d2:aa:56:
1e:92:89:12:82:68:8e:dc:81:34:3e:f6:20:ff:e7:
5b:57:b3:6a:67:20:d1:a7:fb:13:00:86:2f:e5:29:
01:fc:b7:4d:8d:42:c5:89:c6:63:90:72:99:46:7d:
a7:85:2e:12:32:19:42:0c:ca:6c:74:16:43:10:f6:
38:c1:6c:d8:17:77:e7:37:c7:aa:3d:e5:5e:e5:9d:
77:e8:75:89:c1:0e:3a:50:42:98:ce:2a:a1:4b:53:
3b:a8:d5:05:89:71:a9:40:8f:fb:86:74:35:b9:ec:
dc:a3:75:67:93:29:90:09:ae:31:1c:94:96:d4:f3:
ba:0a:8f:94:4c:1c:9f:6b:68:61:aa:47:9c:0e:17:
94:a4:53:53:40:ef:9a:b3:66:54:5f:a1:fc:9e:85:
34:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CC:93:78:74:79:75:A8:D0:E7:94:2C:B1:57:5F:B2:89:03:EC:BF
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f8:4f:14:3a:9f:81:b3:03:3d:55:d1:08:c9:a5:83:77:85:
b0:06:17:7d:e4:a5:7e:6e:7e:bd:e3:30:44:ab:0e:f5:60:e1:
a8:18:4b:a6:4f:7c:33:ae:7e:b1:ad:81:af:b5:50:4f:69:c6:
71:36:e4:f5:7f:30:84:37:c2:4f:4b:98:8b:bd:ea:af:ac:36:
67:7c:ff:46:71:c8:db:fe:90:76:88:b7:1a:9b:50:d1:37:d3:
47:8a:4a:d6:b2:34:d5:d7:3b:86:23:51:8c:a9:f0:24:7e:1e:
56:2d:a1:ec:43:57:62:25:98:17:4a:3e:9d:66:d2:00:fb:7f:
8b:ac:95:c8:2a:c4:7f:7a:48:7b:39:45:7e:63:6b:64:e9:fd:
a9:94:15:66:fc:df:69:8e:67:93:49:ea:8c:1c:dc:d9:f7:bf:
ca:99:a1:98:96:ea:26:bf:97:6c:cf:08:15:ee:2b:d6:e3:92:
f4:8e:5c:2d:a7:2f:11:cd:d1:72:a9:fa:41:e5:3b:9d:99:93:
88:2e:04:df:79:4c:d7:f1:cc:82:69:2b:8f:87:34:91:8c:07:
5d:5e:d4:7d:b1:5e:05:f8:c0:16:27:e0:fe:ae:aa:f8:78:ea:
2b:0f:8c:08:04:65:4a:58:68:4e:ff:4f:dd:76:be:53:73:9e:
41:26:45:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:07 2025 by rpki-client