Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
File: xDwiL60sJ8phLJjCc9TxZQbhsuU.mft (raw, json)
Hash identifier: CQg1lZ5rrszNXFu3Vs1OfscWo2flUAnD8SWd/m/YGfk=
Subject key identifier: 93:E5:7D:2B:94:BE:76:20:77:52:E5:45:73:AC:26:4A:F8:2E:AA:FA
Authority key identifier: C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5
Certificate issuer: /CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
Certificate serial: 0197C0ED653A29D9D0C26BDE120E9F5C0C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
Manifest number: 0E3B
Signing time: Mon 30 Jun 2025 13:01:12 +0000
Manifest this update: Mon 30 Jun 2025 13:01:12 +0000
Manifest next update: Tue 01 Jul 2025 13:01:12 +0000
Files and hashes: 1: BxG4JwAN57vo6NBlUISw9RdW7m0.roa (hash: roJixiQowuB4avbvI55JLdOWJ/KjfR6U+Yu2VKUFfoA=)
2: xDwiL60sJ8phLJjCc9TxZQbhsuU.crl (hash: +9Jv3m13QeRlgr6BcCUPS8e1FGlcIuiIv3y04RYqYJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:ed:65:3a:29:d9:d0:c2:6b:de:12:0e:9f:5c:0c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
Validity
Not Before: Jun 30 13:01:12 2025 GMT
Not After : Jul 1 13:01:12 2025 GMT
Subject: CN=93e57d2b94be76207752e54573ac264af82eaafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:35:28:5b:04:35:a5:86:7e:18:1e:59:a1:56:
8a:5c:ee:88:8d:b5:f8:ee:a4:3f:9d:15:c6:c8:ad:
4c:12:ee:ab:e2:be:e8:1b:05:03:26:a2:fd:40:3f:
d6:d0:c5:b1:83:b0:63:d7:64:9e:d0:9f:69:b3:e4:
f1:b8:35:1e:8e:de:b8:47:e2:1a:98:6f:d5:15:fd:
d3:7d:98:1a:d7:3d:ce:1d:95:19:b4:d1:d6:0d:65:
84:a7:d7:d2:e8:a8:55:fd:58:eb:b5:b3:fb:5c:8c:
3c:24:5f:86:fa:88:af:77:c5:52:5e:e4:1a:b6:c6:
c6:c5:74:ee:e7:47:88:ef:3b:62:42:8a:b0:3d:16:
52:36:62:57:0f:21:ea:cc:70:8d:9d:8b:72:e0:f8:
a6:52:2d:e6:1b:b4:ed:c2:2b:82:75:28:06:55:e9:
f8:d5:eb:ef:9a:a1:3c:c0:9f:26:38:73:91:96:7d:
78:57:9e:6c:22:d4:38:fd:e6:fd:0a:f4:17:10:cc:
fb:78:9c:fc:af:70:ea:f5:d9:42:f4:8b:f8:5a:70:
4a:7e:ed:74:54:4d:11:ec:25:24:dc:0a:f1:00:29:
e9:93:39:01:3d:86:80:6d:a4:48:48:0e:44:27:9d:
f1:2d:02:15:c6:09:84:74:68:33:54:66:7a:ea:76:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E5:7D:2B:94:BE:76:20:77:52:E5:45:73:AC:26:4A:F8:2E:AA:FA
X509v3 Authority Key Identifier:
keyid:C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:92:e0:cd:0b:9a:9f:a1:a8:c1:7a:fa:c1:e2:79:ac:f1:8e:
07:9e:1a:e7:d5:d8:b8:b0:cf:22:74:48:f7:b5:51:3e:f8:2d:
73:ca:5b:e8:ff:07:28:b5:12:6b:46:cd:2d:20:35:45:86:a3:
9d:37:ee:42:52:ee:f0:cf:7d:da:5c:e6:fd:bf:20:15:4b:ff:
eb:47:f4:36:08:d8:87:7d:3a:f7:2b:ab:cf:65:75:14:03:90:
0a:a5:ef:fa:c9:26:c8:96:15:ad:95:b2:7b:e2:de:45:21:1b:
01:a3:a5:67:47:ce:b0:7b:f4:27:fb:f6:c1:bb:ae:62:39:4f:
da:89:8e:c9:a7:2d:86:16:fe:b4:e6:6e:2e:1e:27:1d:39:b0:
05:a7:6c:14:77:2e:aa:e7:10:d6:33:18:56:ae:b5:d0:eb:20:
59:f5:96:29:45:d1:56:d0:ae:71:c4:6b:4e:8f:2b:82:c2:ce:
61:9e:3a:4d:2e:f6:2f:fa:82:42:cd:b9:ba:f3:bb:60:63:78:
e8:15:a7:6b:18:a1:e2:e2:d2:21:03:85:d8:bd:02:c6:ab:6b:
dd:e4:7b:fa:d5:96:dd:63:18:58:24:27:7a:35:ba:d7:98:48:
32:80:8b:10:8a:32:71:c1:56:76:e6:32:3c:bc:e3:2d:57:33:
e3:f2:a7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:40:07 2025 by rpki-client