Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
File: x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json)
Hash identifier: iB6h1ue5CU94Wz1kj6MDD3M+qrenjHMZ0ieNALagwgQ=
Subject key identifier: 49:36:32:CE:0B:36:4B:29:CA:41:FE:69:35:80:C2:44:F6:99:F9:10
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 0197B77C6516986A53D8C86BAC2A7CBB57B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
Manifest number: 10CA
Signing time: Sat 28 Jun 2025 17:01:12 +0000
Manifest this update: Sat 28 Jun 2025 17:01:12 +0000
Manifest next update: Sun 29 Jun 2025 17:01:12 +0000
Files and hashes: 1: 6Cj8H-p47dvCNhMHuB2pJCnFujI.roa (hash: etPYOFcz4B7xl7Yvi1fe6awoP2aM1hrkcXjgzl1XW2c=)
2: iNe91R6y78p-QSDXxoxxAjDA_Og.roa (hash: HR8YO++Y/qB7B+dcbqN5/SgR3c8dd7aULLQGyyrd4j8=)
3: tK6dqORitjCE9QSeqzn0Dd8QVZY.roa (hash: d9AZ6zPbtFV6hygn8HjICm+c22UNHE83e16IdW/3Zl4=)
4: uHPtlU3qdVrOCAD4M6mdiGrDzqE.roa (hash: AeMGCTul+AJixElOuUQNIP59RKHExeTwQIkWiWRzSzs=)
5: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: FTw8EY4+fh6RR/vjIqEb6PPWLNvXw6r9BlzcUFmS8Rk=)
6: ydG33gjsDAOMifL-LMV8iBUmj5I.roa (hash: mGme2Sxc1/UzWWlnkXXzLuxU/TszYoE3oiJl3a+U4Tg=)
7: z131uKF1Jpc6EpB3kAHYRRM7XIQ.roa (hash: Z5tMUZHaMA8Bu87tPX511k88Z6BiQWZ5tSalbDOuIEw=)
8: zbII4RxH17JoDR9ukyJuiEde7IM.roa (hash: xBWfldiZFP31dGe7bTsuSEU+4Mx9LEr9W5jDRfUDGfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:65:16:98:6a:53:d8:c8:6b:ac:2a:7c:bb:57:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Jun 28 17:01:12 2025 GMT
Not After : Jun 29 17:01:12 2025 GMT
Subject: CN=493632ce0b364b29ca41fe693580c244f699f910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:ba:76:7e:c7:8d:c3:9f:4b:ff:b1:12:32:
24:64:81:20:94:07:ff:f6:53:2c:34:93:39:96:29:
9a:4e:8b:ce:7a:26:5a:27:37:0f:bb:86:31:42:b4:
d6:4e:5b:2c:f5:fc:24:ae:4d:7b:ec:64:67:f9:ca:
1e:46:a8:84:dd:41:8a:a6:24:f6:b3:99:1e:ad:4d:
8b:7c:4f:ef:ed:95:7f:59:09:50:5a:b9:e8:61:0b:
fb:d6:f0:a8:df:16:3f:1d:9b:03:14:fc:28:a4:6f:
4c:b0:c5:e5:6a:08:6b:f6:b0:27:51:cc:82:e7:0d:
51:d3:04:93:e1:a0:a8:16:d7:ef:db:65:ca:79:a6:
cb:91:04:a2:34:92:8b:8a:81:23:00:c8:03:78:58:
3c:4d:4d:db:a8:aa:4a:81:6e:37:85:3e:71:10:ff:
b6:cb:93:d3:e2:fb:a9:98:45:41:01:2c:ec:09:e3:
63:ba:66:d1:96:ee:5b:67:21:30:2f:a5:80:c4:64:
09:d3:05:16:c3:4a:39:95:73:5d:cc:0b:6b:85:f5:
63:c7:ef:10:99:0a:ac:a0:3d:70:66:a6:1f:4b:24:
43:46:e1:6d:b6:06:44:af:2f:cf:75:05:3a:09:3d:
50:17:31:f5:eb:f6:23:8d:10:04:ff:31:42:11:31:
65:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:36:32:CE:0B:36:4B:29:CA:41:FE:69:35:80:C2:44:F6:99:F9:10
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fe:a6:17:f7:9c:30:eb:2a:51:3d:ba:8c:b8:9a:de:85:ef:
95:3e:62:f2:b0:0e:a7:5d:6d:5c:d8:62:a3:a2:d5:49:0f:fc:
d5:30:2c:0b:3f:f8:ce:00:3f:b6:a7:95:70:ce:12:d1:f1:a7:
1b:ca:ef:4d:a2:84:f6:fb:c2:c7:af:f2:05:69:54:8d:4d:63:
60:71:76:87:37:d4:13:f5:14:4f:12:7a:d3:f3:e9:98:2e:e1:
c2:8f:f2:9c:df:99:0f:a7:9b:55:46:2a:b5:c7:dd:b4:1c:2a:
c5:b2:8c:d1:4a:6f:92:1f:55:40:0e:ce:11:ea:2b:2c:03:c3:
64:a2:7b:91:3f:de:cb:70:42:9b:f8:d0:a9:28:c9:65:0a:ed:
b3:f4:95:f5:3d:68:e3:4c:87:c3:32:39:0e:67:09:cd:68:27:
48:0e:e8:81:af:2f:75:f2:fe:e3:e2:18:b9:45:33:9a:a6:fe:
f0:bf:66:2d:42:46:53:59:24:2d:f3:0d:8f:e4:d3:8b:48:4c:
1e:d5:71:82:f8:2e:2b:ab:fe:2c:1d:20:93:08:56:bd:a2:7a:
b9:20:49:dc:be:e4:08:ef:1b:5e:ee:82:8e:2a:ba:48:2a:09:
f5:b1:1f:5a:63:0f:ad:4b:3a:22:93:e9:30:03:9e:43:06:b9:
91:e2:76:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:32 2025 by rpki-client