Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: +qJwOqmI2hlZlhdFIWUomkmCcQjSkKK3M+yNmj37jGk=
Subject key identifier: 83:BC:2F:96:B0:3B:21:30:FC:69:D9:77:FB:CD:4F:1A:54:54:94:D1
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 0197B6A1BE3D642F3A328DBD087FE53FC6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 15C3
Signing time: Sat 28 Jun 2025 13:02:22 +0000
Manifest this update: Sat 28 Jun 2025 13:02:22 +0000
Manifest next update: Sun 29 Jun 2025 13:02:22 +0000
Files and hashes: 1: CxW9CMhkxVrayKYNgSlraHOeOQM.roa (hash: Pd98lEBP8p/URa6hKL85tikarNFnXac6Jxt7ytM5JK0=)
2: U66mGG3Y8A4sBRmpQym2qej1efo.roa (hash: TlVlbRHV8GRl2ttGfufATtjwAKcckCzgbeG9Ag3deSU=)
3: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: fcYpJn0xXjk//OhekmDV3XqSoQB4z1qKyZ2TqGsjvss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:be:3d:64:2f:3a:32:8d:bd:08:7f:e5:3f:c6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Jun 28 13:02:22 2025 GMT
Not After : Jun 29 13:02:22 2025 GMT
Subject: CN=83bc2f96b03b2130fc69d977fbcd4f1a545494d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:5e:a9:0e:53:a6:d6:f2:b6:f2:c1:ec:48:
28:5c:81:1c:10:c3:10:4f:88:ba:05:90:ce:0f:23:
37:98:6c:bc:13:c6:03:12:07:77:82:f0:53:18:32:
dc:59:1b:d3:ad:35:dd:18:eb:0b:01:85:80:14:56:
e7:12:b8:1b:d0:d0:23:63:1c:fd:9d:c8:c7:55:88:
5a:51:0a:43:d1:d1:85:9e:05:c1:83:a8:99:43:a0:
b4:df:02:6d:87:f3:bf:47:4c:fa:4d:0f:e6:70:cb:
00:2f:4d:5c:38:fb:59:64:38:e8:b6:d4:1c:d5:eb:
2f:a1:9a:98:d2:c4:d0:22:40:c0:67:95:8e:e7:78:
81:f6:d4:f1:2d:24:b6:4b:62:11:40:55:8c:c8:4d:
fb:2b:5d:21:80:19:b9:f6:92:b2:21:4a:36:45:fb:
f1:6c:51:ec:da:d2:dd:43:a7:c9:40:74:17:77:c1:
e1:f1:9f:8b:7c:c9:fd:60:f9:a1:c4:84:dd:02:09:
a3:6e:f1:7d:a4:24:25:07:9c:e2:65:1a:a1:b2:09:
5d:44:f6:1f:8c:92:0c:5a:de:ff:de:a5:12:b4:82:
61:39:e7:41:36:f1:7a:d5:55:97:21:f7:bb:34:fb:
49:5d:89:65:62:3c:79:40:91:24:70:8b:15:86:2b:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BC:2F:96:B0:3B:21:30:FC:69:D9:77:FB:CD:4F:1A:54:54:94:D1
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:69:9d:70:64:fc:69:00:75:0a:e3:f2:16:e7:c7:c1:e5:17:
66:a4:a1:0d:96:e7:93:42:db:69:82:bc:79:bc:a4:4b:e1:c5:
0c:f2:f0:62:b4:17:eb:fd:a9:7a:da:7b:17:30:7f:34:99:c0:
2a:a0:0b:a9:7d:ef:91:a3:c2:91:e5:3d:23:06:7c:40:9e:91:
f9:97:b2:74:ee:4f:7d:dc:bf:dd:f0:ce:50:14:78:18:65:16:
d4:e4:83:20:5e:b1:76:cb:7c:2b:76:c1:fa:38:77:e1:aa:97:
05:04:68:b2:ed:0f:4a:e5:79:33:cc:2e:d3:68:9e:24:d0:24:
a7:0d:06:ec:68:76:e3:08:4a:0f:be:33:59:ff:8b:79:cf:6b:
0b:50:2d:44:2d:5a:90:46:0c:e8:99:8b:e7:bb:9e:64:3b:68:
94:fe:fd:f3:5d:24:71:f7:ba:c6:9b:93:3a:08:92:a3:35:58:
11:67:95:7c:20:eb:bd:4a:59:44:15:37:de:cc:1f:71:0d:06:
c4:91:c9:50:3b:e3:13:95:d9:2a:aa:26:8d:f6:4d:8d:82:10:
cd:07:bf:93:ef:b9:78:00:a0:d0:62:f1:01:e5:3d:b2:a8:23:
df:aa:26:38:9d:2f:e5:9e:c0:6d:8e:0b:c3:5b:b3:0c:24:24:
c7:c6:3c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:18:21 2025 by rpki-client