Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File: xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier: obJECTEQCmvjHPLdJTDBU6vrMpRcLm+aw7xxwlp6W7M=
Subject key identifier: 6B:C8:5D:77:24:E6:C6:5F:44:35:60:AC:F6:F1:BC:69:F1:E6:63:75
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 0197C15B42B13C830D8CB54D5811597EB71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number: 14EC
Signing time: Mon 30 Jun 2025 15:01:12 +0000
Manifest this update: Mon 30 Jun 2025 15:01:12 +0000
Manifest next update: Tue 01 Jul 2025 15:01:12 +0000
Files and hashes: 1: PzyzSWT4zWJ7K4Xqd4I7pv369ec.roa (hash: kQSQuA7MhqelhKVGJ/f7HDWMP3sBIAz6W/9i3q+k7jg=)
2: afz7BRJzqEPxj8BZVsdOin_5y-4.roa (hash: 8P/qRECRaiQdIehiJb8DPPkG7wuZbj1mnaUAo4ZwGHI=)
3: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: sA199iV6rxHufZFJqV2W23letN1i3iu9S2XRvttDyP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:5b:42:b1:3c:83:0d:8c:b5:4d:58:11:59:7e:b7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: Jun 30 15:01:12 2025 GMT
Not After : Jul 1 15:01:12 2025 GMT
Subject: CN=6bc85d7724e6c65f443560acf6f1bc69f1e66375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:1f:6e:2f:e0:ec:e4:cb:fd:a4:38:03:54:
25:28:79:df:8c:4e:83:d2:e1:66:78:4d:b1:7b:9a:
be:15:ce:b2:d3:43:e1:3c:3c:7a:15:51:61:0a:68:
e7:2e:4a:42:9b:cb:67:94:1f:01:d0:52:3a:af:dd:
1a:56:5a:f1:3a:78:ab:f4:26:7a:db:6c:97:4e:52:
bc:57:d8:71:43:47:ff:c2:1d:74:98:20:69:0f:9e:
32:1e:ff:b4:ea:84:6e:d5:62:66:46:41:c8:3d:72:
76:0d:9f:7c:fc:5f:35:79:64:87:b3:94:6a:b3:ad:
62:57:f7:77:fe:46:f0:44:20:81:9b:b1:4f:7b:f7:
fe:eb:d9:c2:5d:08:5a:d0:30:d9:9b:f2:83:51:fa:
b0:ca:d6:58:e7:ae:0f:77:83:cd:af:4e:ac:eb:98:
45:43:4d:64:e3:73:cb:62:21:69:6e:9c:79:3e:4e:
ef:1f:ea:6c:7f:80:02:10:15:25:e3:ce:85:44:c3:
69:a3:35:a4:e6:e2:d8:6c:da:ff:53:c6:04:11:66:
d2:e9:ad:18:b2:58:bc:26:9b:f3:ae:da:1f:9e:44:
ec:7c:ed:68:ad:c6:9e:68:87:4a:66:5e:f8:56:9d:
42:a1:48:69:e9:7d:d1:2d:b4:0a:e6:12:37:66:31:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C8:5D:77:24:E6:C6:5F:44:35:60:AC:F6:F1:BC:69:F1:E6:63:75
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7c:81:11:b3:db:1a:cc:06:1c:38:0a:83:6d:31:4e:59:75:
89:71:34:89:21:87:47:c0:42:f1:c5:43:ec:ce:51:7b:85:91:
50:b5:5a:b8:d5:a5:b1:07:38:04:82:6f:b8:5a:cf:43:90:d9:
aa:ba:29:f8:e6:ec:f8:35:87:97:29:ca:32:a3:16:bd:f4:c3:
c7:4e:76:22:c7:63:ae:97:d0:f9:60:6a:30:e6:d4:c1:1a:6a:
54:82:2c:9d:2d:fe:45:a5:77:c6:4c:34:ae:61:5d:da:b2:e1:
6b:c3:96:fb:aa:46:e6:b0:76:35:f5:4b:2f:e5:37:e3:ca:d8:
c7:ae:b1:64:f1:94:9d:a4:62:b2:3b:31:ee:88:4a:b1:1b:bd:
7b:62:83:bd:a9:33:6b:c7:05:3b:e1:f7:80:e9:7e:70:ab:1c:
60:9e:9a:71:d9:ff:44:4a:e5:bd:20:0b:f8:16:39:fb:aa:10:
f6:14:00:1f:10:9f:05:54:b1:76:86:56:31:3c:5a:c5:da:4e:
8d:5d:00:7e:9c:7c:82:29:84:d4:a7:82:e4:b1:84:99:a3:b9:
b9:b7:e7:41:14:74:ed:9e:e5:a7:8a:18:bf:0e:03:84:ab:cd:
24:10:97:98:e2:c0:7f:9c:20:5d:d9:77:9c:f0:76:b6:ed:5a:
6a:44:dd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:54:13 2025 by rpki-client