Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: aCePjnXGEBgTdICjMCVhCjKRo20+b5cWc5Xy2SUW+v0=
Subject key identifier: 95:42:F5:64:39:46:BD:CB:CC:1D:09:F7:AD:AC:EB:CC:F9:B9:66:31
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 0197B77C6BE18D4B73C98F8D36490BA8D92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:13 +0000
Manifest this update: Sat 28 Jun 2025 17:01:13 +0000
Manifest next update: Sun 29 Jun 2025 17:01:13 +0000
Files and hashes: 1: RMEEjlIMkQn-eVpgsZKUIgD2naA.roa (hash: ueUC7fhvm5el60XIzYyUHLJfoQdXhv3L7jiX08frMs4=)
2: pD7HPK_aW3QH3PPrNYbHeMKhGy4.roa (hash: GJeO7Q27YxmGksDjROFyKoncsMRwot0oI2b9og4LUSw=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: O5Cn2g0QbkJVqSbA06AcPIQXp5iAmm5n7lfAuT8scAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:6b:e1:8d:4b:73:c9:8f:8d:36:49:0b:a8:d9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Jun 28 17:01:13 2025 GMT
Not After : Jun 29 17:01:13 2025 GMT
Subject: CN=9542f5643946bdcbcc1d09f7adacebccf9b96631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:c9:34:6f:47:0b:af:9a:1b:50:ac:9a:c1:
64:a3:9c:2b:52:a5:36:89:d8:45:13:3f:a1:01:2c:
62:14:e5:a3:bc:2b:4d:f3:f0:c2:1a:0f:15:c2:cd:
03:96:c0:b4:e7:ee:a8:49:51:24:e4:38:68:8f:9e:
b5:86:0e:ba:b4:c4:34:f6:6b:c8:c8:72:f6:69:69:
36:72:69:7c:96:f5:0e:ae:94:6f:f8:56:19:28:1e:
de:6a:43:d8:bc:f2:4d:0b:11:7f:08:4e:f6:02:2e:
e1:55:ed:6e:d4:e4:3a:d1:6d:2e:18:9f:90:34:f3:
16:6b:8a:f3:1e:8b:ad:9a:31:2e:21:53:91:9d:a2:
df:ed:06:42:65:ad:d9:05:11:15:fd:d8:4b:5c:5e:
ce:05:d4:32:c4:9f:97:50:3f:1c:e7:bb:d4:3b:a8:
30:ea:fb:cb:aa:c9:98:4b:70:16:29:66:90:21:b5:
5b:4a:45:68:23:aa:96:52:bc:19:4a:08:95:fd:d6:
bb:bf:bc:77:c8:15:4b:b5:a8:3d:0c:87:7d:eb:37:
57:38:d6:25:86:b2:89:92:93:7c:1c:ca:4f:a8:f5:
06:e9:4a:6e:e6:68:fd:fd:d6:ed:e6:44:d4:60:09:
08:9b:3b:68:bc:92:8e:a4:57:2d:11:9d:c6:81:f5:
dc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:42:F5:64:39:46:BD:CB:CC:1D:09:F7:AD:AC:EB:CC:F9:B9:66:31
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:92:21:cf:6a:9e:8d:b0:72:c2:db:9d:cc:40:70:3e:ef:11:
86:f6:8b:93:2c:00:c0:2d:8d:44:90:85:27:46:70:29:f4:5a:
44:aa:c7:61:71:37:d5:31:ba:46:38:18:5b:4f:2d:31:bf:c8:
23:71:ad:52:16:f7:d0:ed:57:8d:29:fd:b4:c8:af:b1:8e:30:
51:47:00:9b:0f:be:0a:72:65:ae:37:aa:64:77:a2:04:92:29:
cb:81:31:6f:26:a1:30:d7:0b:63:10:3b:4a:1a:cb:68:d9:2a:
bb:65:8a:72:5f:62:1f:68:2e:53:ad:02:a5:27:5d:37:fa:28:
be:18:f4:54:e0:7a:e4:b0:e4:68:9b:08:84:17:64:b6:a2:f7:
c2:d6:85:d5:98:17:a4:6c:26:2f:c8:1c:1b:1b:9c:84:63:73:
94:23:80:19:d8:38:c2:7c:de:26:57:cf:57:67:fa:87:40:5d:
e5:2b:a8:58:15:70:17:0f:a0:49:3f:52:32:b0:16:93:0e:b7:
e2:1f:13:7f:27:7c:50:cb:4a:be:8e:c7:1c:d9:e3:40:da:be:
29:56:e7:42:27:67:94:5e:eb:69:4f:1f:30:96:af:d3:b7:e8:
75:a9:02:db:b5:fc:64:1e:6c:0b:f5:47:1f:00:2c:0a:a5:8c:
4d:7d:c5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:22 2025 by rpki-client