Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
File: x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json)
Hash identifier: Kj2waQHuRx4DJto46Jd/SShahhng3XjJ9R6XJ4OzdWo=
Subject key identifier: 93:A8:27:A0:96:AB:7D:8B:87:02:F6:14:00:FE:17:65:70:EE:61:30
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial: 0197C0B6365C93E543E9F1AA67B12E0B03E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
Manifest number: 12FD
Signing time: Mon 30 Jun 2025 12:00:56 +0000
Manifest this update: Mon 30 Jun 2025 12:00:56 +0000
Manifest next update: Tue 01 Jul 2025 12:00:56 +0000
Files and hashes: 1: 1-nvEOeF_8-seqo32QYrx6ZTVBbQ.roa (hash: wVf2ruzd40pFbTR8RI0Ob3qelEQ26yizyOMJb6WWHNQ=)
2: G0WvFuc_CxaN6eARB2yClzaX2KQ.roa (hash: OXBzj+MAAD5v1p61n5nSRmMEjnNH86aTtUDpVIx76+o=)
3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: 4Gtua++J9jhSBiw/B53UGKn5akKeStyaarp/GVrj0og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:36:5c:93:e5:43:e9:f1:aa:67:b1:2e:0b:03:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Validity
Not Before: Jun 30 12:00:56 2025 GMT
Not After : Jul 1 12:00:56 2025 GMT
Subject: CN=93a827a096ab7d8b8702f61400fe176570ee6130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:ea:71:88:3f:94:b0:14:9b:b6:c6:1d:28:
c7:64:c7:c6:53:2b:51:2b:9f:41:e4:fd:f2:ca:99:
3c:8a:13:a6:e3:41:b8:61:39:af:29:3c:9a:8e:c1:
e1:ba:18:e7:d4:0d:6c:cf:19:94:a5:96:8f:8a:a9:
f6:08:c9:4b:3d:d0:4d:73:95:51:d2:2f:61:fa:50:
37:e5:fb:0a:9c:90:23:27:0f:07:04:9e:28:93:88:
d1:43:4a:35:c7:8b:b8:9a:5a:c6:b2:ca:3b:fa:a1:
fe:a8:5b:63:b2:db:bb:74:4b:43:e4:3f:10:fc:8f:
92:18:0d:ee:8e:62:9a:b7:c5:56:b3:e8:b9:27:63:
f8:c8:70:65:f0:c4:af:70:12:e2:a6:41:e0:a8:f2:
c2:d2:ec:00:88:8c:3f:82:c4:4c:72:ed:bd:e8:22:
a5:cc:5f:3c:71:65:3c:2c:01:40:87:5c:86:45:54:
31:91:0f:fd:4b:67:47:0c:4b:c5:b5:6d:64:f9:95:
38:4f:4a:90:f0:10:22:ad:b5:56:07:02:e7:b2:19:
7b:34:5a:70:fc:78:be:81:9d:30:35:c2:44:2c:77:
60:bf:7c:9c:0b:6a:f2:08:6f:a1:68:b4:21:1f:68:
fc:98:31:c0:c0:fe:7a:52:7e:25:76:c7:98:74:d5:
73:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A8:27:A0:96:AB:7D:8B:87:02:F6:14:00:FE:17:65:70:EE:61:30
X509v3 Authority Key Identifier:
keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5f:2f:5b:c5:8c:14:f6:85:2e:52:0d:c4:be:83:e4:c9:7a:
25:93:f6:69:5f:f5:99:47:21:8a:bf:91:c3:fa:aa:86:da:01:
95:96:c3:f5:48:f8:18:39:d8:f6:7c:f3:c8:3b:8c:90:08:32:
57:c6:44:21:82:06:e3:2a:61:9e:fd:59:4f:e3:3a:f5:ee:05:
93:6a:16:28:3b:ab:ec:50:f6:58:6b:af:c8:23:3a:1b:3d:82:
4f:4e:c6:14:bb:a0:92:2c:b0:fe:72:97:18:91:74:2e:cb:92:
72:9a:c8:81:b8:c1:2d:bf:84:4d:78:95:c6:1d:a2:55:63:ac:
c0:e0:6f:96:42:52:b8:f5:85:5b:d0:f2:93:93:52:7f:1c:fe:
ca:87:3a:0e:46:a8:92:69:4c:12:22:4f:4c:41:2c:ea:56:dd:
f3:44:12:c5:e6:3a:73:5c:40:57:a3:59:e9:3c:b0:2b:d1:9f:
ca:f8:a9:90:56:fd:fc:74:cd:00:ff:a5:70:4e:7f:a4:f0:99:
a3:55:1e:d9:30:7b:92:ab:36:c8:61:69:36:44:11:aa:f6:61:
6c:ea:04:86:40:41:78:af:e9:c1:dd:b6:05:09:8f:ba:9d:dd:
a8:70:97:fd:fe:1c:c9:49:b7:80:9f:76:9e:af:fd:2a:c2:89:
0a:92:24:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:09:42 2025 by rpki-client