Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: My7mvphWM/jIFaEw2j8jK+O8xBJHiK8gR/TiL97Lw6Y=
Subject key identifier: 30:00:32:97:74:20:5F:47:18:58:2A:F2:C7:01:54:DE:64:67:90:E6
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 0197B7EA1AB67512C4DF6C4E848A0DAED314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 15BF
Signing time: Sat 28 Jun 2025 19:01:02 +0000
Manifest this update: Sat 28 Jun 2025 19:01:02 +0000
Manifest next update: Sun 29 Jun 2025 19:01:02 +0000
Files and hashes: 1: V1dxs9JhyjDMxU7zwFABoBAdx60.roa (hash: jK0rBU9juj3Cm9p+z0cyDJb76/ejVGKYQgHCoAgwZ5Q=)
2: ggaujxDkTjz3ur815c8t-PcBT3o.roa (hash: kBi/tXIf057RjeVgxSaejXzvw/f4YkfQil/vCr+FLSM=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: r1/7vUgKvLNpTRWoWye1holWZZ91jTFjrI4PGcIHM6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:1a:b6:75:12:c4:df:6c:4e:84:8a:0d:ae:d3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Jun 28 19:01:02 2025 GMT
Not After : Jun 29 19:01:02 2025 GMT
Subject: CN=3000329774205f4718582af2c70154de646790e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:4d:d3:94:52:27:60:6a:bb:23:e5:20:12:
b6:cd:3a:5d:65:f7:c2:50:e0:3f:80:d1:da:76:45:
50:de:b7:4e:55:a4:8f:67:d6:18:12:64:c5:54:c6:
72:0c:1f:fe:1e:a7:14:85:25:8c:4c:cf:16:43:79:
ce:d1:a8:aa:e9:55:77:3b:66:b9:7a:95:e2:09:eb:
ad:fd:8a:23:7b:cb:b8:38:ae:de:7c:88:ac:6d:54:
34:af:bc:fb:ea:90:51:12:02:3a:c4:43:76:12:6c:
17:41:44:60:53:e7:b4:8b:e7:87:d0:b5:3b:22:be:
62:a9:83:28:6b:2a:62:e5:fa:6e:29:46:4a:a4:c9:
8e:37:74:fe:c9:d1:74:57:10:b4:01:d3:ee:dc:bb:
2a:c6:e5:39:df:6d:43:dd:4b:d6:0f:3e:cb:a8:2a:
5d:96:35:0c:49:bc:81:e0:03:41:d7:cc:72:82:c6:
76:a9:62:e6:f2:8b:2a:59:81:f9:6c:ec:c2:9e:d3:
0e:19:09:38:d6:1b:73:e3:bb:af:98:c2:01:7f:51:
e2:58:74:0c:8b:ca:9e:ce:73:5e:1f:96:3e:f4:0a:
06:12:2d:e9:e1:e3:c1:4f:35:d3:13:d0:4e:65:00:
9b:39:18:60:43:78:4d:68:32:cb:93:66:25:df:4b:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:00:32:97:74:20:5F:47:18:58:2A:F2:C7:01:54:DE:64:67:90:E6
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:cc:d0:7c:29:d5:6a:cb:60:02:84:ae:cc:40:b2:44:9f:51:
ba:f2:ae:23:c8:14:15:6d:18:bd:19:a5:22:6b:13:c4:e9:a1:
6b:16:97:39:ed:77:38:0f:33:26:c2:02:04:f4:1c:81:6d:19:
8e:47:98:27:41:4a:7b:85:35:42:36:fa:82:27:bc:23:57:bf:
90:91:9b:07:87:c5:f2:30:74:ee:0b:15:3d:3f:4e:a7:fc:10:
20:58:e9:b8:25:98:81:7c:3e:35:d2:7b:40:e7:b1:94:ff:d2:
d7:7f:a3:fd:ca:12:5d:6a:d6:df:e8:7b:a7:55:23:c7:79:1b:
b3:24:4e:b9:69:4f:54:8a:dc:39:69:05:9e:67:98:07:b3:ab:
c1:ef:5b:0e:89:39:6c:5a:3e:63:12:ec:5a:3f:13:98:b2:65:
bd:60:00:ac:85:86:bc:31:10:7e:00:66:32:5d:de:11:33:09:
54:43:e0:69:d5:dc:c9:d5:3d:9d:a4:26:c1:19:1e:0c:c9:65:
7c:d6:40:24:ee:0e:54:de:a9:67:58:5f:24:55:49:96:57:85:
aa:b8:6c:db:4e:0f:2c:08:68:cf:0a:53:ef:b7:a6:7a:2b:ed:
fe:81:03:ce:dd:d5:fd:ee:ab:c2:dc:c9:12:16:fb:8b:c9:16:
e3:9c:18:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:28 2025 by rpki-client