Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
File: xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft (raw, json)
Hash identifier: xg0tGVjXSbCj7rVcd600E484nLGpbMrvVG+pP967ICw=
Subject key identifier: 88:98:D1:B5:63:C7:69:E7:A5:2F:0D:58:D7:CD:1C:4C:87:09:F0:DE
Authority key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Certificate issuer: /CN=c53435f4be2c543bf3483e377f80314d28230184
Certificate serial: 0197B77CA360CB70BB4D92F1552D9108A6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:28 +0000
Manifest this update: Sat 28 Jun 2025 17:01:28 +0000
Manifest next update: Sun 29 Jun 2025 17:01:28 +0000
Files and hashes: 1: XYWpdPzGoBgF4NiJcBSnmKFlFlA.roa (hash: gRwlESvwtxXSn0EGN2mej0K6SBjpUL0fcU4oPomp9Tg=)
2: xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl (hash: ugOtNzD2K5RaEAJ2+S0EvFYp++bK4QbmHX79KHerBh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a3:60:cb:70:bb:4d:92:f1:55:2d:91:08:a6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53435f4be2c543bf3483e377f80314d28230184
Validity
Not Before: Jun 28 17:01:28 2025 GMT
Not After : Jun 29 17:01:28 2025 GMT
Subject: CN=8898d1b563c769e7a52f0d58d7cd1c4c8709f0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f8:fd:71:c9:14:98:83:92:ad:d0:f3:8d:e7:
ee:d0:20:d7:72:31:62:c4:c8:9f:d3:52:c1:08:1d:
d3:2b:34:b0:fe:88:78:f7:f2:ca:f6:c9:59:96:3b:
5b:01:94:6e:43:be:2e:4c:99:13:77:dc:3a:6d:62:
5e:0c:c6:16:b4:78:0a:47:35:8c:e2:a2:e2:b0:d4:
1b:35:52:99:fc:fd:f1:d2:72:c8:67:d4:1c:6d:bd:
05:85:6e:93:e6:6b:b0:59:56:2e:7d:95:e7:b8:f3:
ca:44:32:fa:fa:90:bd:c0:2e:34:bb:f6:7b:c8:84:
84:3f:e4:63:67:30:27:b2:6f:9a:75:6c:ba:ad:a8:
4e:f8:da:0a:72:6a:d2:bf:3b:98:d4:66:26:c9:71:
7e:45:4c:97:ea:36:62:c3:2e:87:df:a9:c4:48:c6:
13:3c:94:ac:95:80:ea:c6:25:63:7d:b0:5b:95:a4:
7f:37:8c:6d:4e:40:1e:b0:b7:30:03:a4:30:22:b4:
72:be:a9:df:ba:35:b7:9e:ed:a2:52:13:05:ee:31:
27:1f:25:16:96:8e:7a:61:2c:11:60:a4:4d:4c:38:
9c:7b:21:d4:60:07:bd:56:8f:3f:22:cc:10:ae:de:
4a:f4:da:8c:64:a8:7d:f1:0d:50:c4:11:be:df:7c:
c7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:98:D1:B5:63:C7:69:E7:A5:2F:0D:58:D7:CD:1C:4C:87:09:F0:DE
X509v3 Authority Key Identifier:
keyid:C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:32:85:9e:83:39:5a:49:63:f5:e6:11:19:88:a7:61:3c:6d:
ac:3b:6a:ae:ba:b3:cc:5d:18:9c:53:84:e1:76:45:c9:8f:21:
da:15:9f:8a:ca:9b:63:4c:7a:44:5e:3b:86:83:8b:72:29:90:
33:d5:cd:77:dd:0e:63:29:70:6b:bc:f8:a0:c4:59:10:f9:7e:
3d:29:ce:aa:09:d3:49:8f:7f:c3:00:10:58:e7:d5:92:96:ec:
93:a4:ed:94:f3:5a:81:a6:d2:51:99:47:ea:05:3c:5a:b5:a6:
c4:96:85:77:20:95:27:04:ce:a5:0b:e3:03:47:27:31:bf:20:
34:a2:09:6f:5d:d0:f8:10:8b:f5:5b:08:ed:ac:89:a6:2f:b4:
0a:43:a6:19:0d:5c:0d:1c:74:87:a6:68:a4:7b:4a:f6:8d:e8:
18:43:aa:85:22:fb:82:d3:9b:7d:db:0a:ca:93:36:19:b7:48:
86:f7:6a:2e:3f:9e:37:e4:51:d0:9c:c7:8e:72:58:82:0f:23:
37:8b:d2:03:1c:d9:7f:c5:94:98:b7:d3:45:22:e1:be:f4:3e:
00:21:68:8a:b1:9b:e2:7b:cd:20:1b:f6:65:d9:22:6e:3e:90:
3e:2c:98:68:b5:ba:8e:1a:7d:29:87:f2:3c:9c:89:b6:b0:eb:
4c:90:81:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:36:55 2025 by rpki-client