Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
File: xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json)
Hash identifier: KyHIB5CR7DrwuwaHQiUiEkScmAOA6ESfWMge065ZLu0=
Subject key identifier: A3:E0:0B:AA:D1:7F:AE:09:05:C1:3D:28:A6:80:65:CE:3B:E7:06:B1
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Certificate issuer: /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial: 0197CCBA852CF383D095163DD8C933A750BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
Manifest number: 0BDA
Signing time: Wed 02 Jul 2025 20:01:05 +0000
Manifest this update: Wed 02 Jul 2025 20:01:05 +0000
Manifest next update: Thu 03 Jul 2025 20:01:05 +0000
Files and hashes: 1: P4yNArORhRajtqPmpQlRZeYbVZ0.roa (hash: ovgY1UfKMguzJWbAh8dinNkUhXWsmPXDNNDIC/A76qQ=)
2: hR41RYuMBKXN5Hx2ppbw_fKnwEs.roa (hash: xBN42LVsiTw0l1r5bKypPkW/0D8ZgYMg2XduaOrWfic=)
3: wmwzHnavsbNneHL_oBiaJZvkaxE.roa (hash: uKd6LFv+jY/CzqKajEjXp9d0rGUr+SNw31zSoDV1LhM=)
4: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: S08JRw6cqRVNqdMDk+aDoJVOONLg7ilBqxYETHtRBuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:85:2c:f3:83:d0:95:16:3d:d8:c9:33:a7:50:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
Validity
Not Before: Jul 2 20:01:05 2025 GMT
Not After : Jul 3 20:01:05 2025 GMT
Subject: CN=a3e00baad17fae0905c13d28a68065ce3be706b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:d8:c4:99:45:ca:37:6e:a5:63:17:86:9c:
59:6f:f1:06:04:84:6b:96:cf:55:07:fc:2f:98:b5:
b5:41:ae:39:cd:10:ad:77:8c:7b:8a:75:cc:b2:e0:
d0:49:0b:32:e0:19:31:73:de:2c:67:92:e8:a3:a7:
4d:b0:15:54:44:35:45:cf:4f:22:99:e3:57:cd:0d:
64:ea:e3:3b:83:91:2b:b1:d6:46:35:47:ef:ed:88:
9d:cf:81:c9:6d:16:a9:28:fc:3f:53:e3:74:45:ec:
02:13:6c:f7:91:61:07:1a:69:c8:99:aa:0b:2a:a9:
9e:a8:3d:12:7b:ac:0e:19:c4:25:ea:29:96:c3:9c:
04:d6:f4:76:a7:ae:87:64:51:68:df:94:f2:e0:3d:
92:80:e7:a1:e9:56:7a:91:88:d6:58:aa:46:7c:a3:
41:9c:ae:d8:68:60:22:0c:cd:19:0b:16:9a:c1:92:
32:64:28:24:50:67:92:d6:59:c4:0d:53:d5:9f:d3:
54:3e:84:96:d0:f3:6a:e6:08:d6:7d:58:a8:60:82:
e8:fb:08:20:c2:42:3c:9d:4e:bc:2a:12:fa:ea:1d:
84:66:eb:27:a3:84:6c:04:34:00:e2:2f:41:ed:f2:
16:af:5b:5d:5a:46:94:ab:31:7f:ba:b9:1a:93:7c:
02:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E0:0B:AA:D1:7F:AE:09:05:C1:3D:28:A6:80:65:CE:3B:E7:06:B1
X509v3 Authority Key Identifier:
keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:aa:a6:01:c6:67:07:6a:ca:ec:2d:70:1f:d4:9b:e5:32:57:
5b:40:01:16:a2:1c:09:88:d4:29:0d:20:c6:7e:ab:8a:1b:4a:
b0:51:f1:75:0e:6a:f7:69:e2:8f:4d:fd:7f:06:43:cc:a5:9a:
12:69:a6:74:6b:78:e2:65:ec:f4:1e:9e:73:be:66:e9:33:21:
fe:67:0b:1c:f7:fa:53:72:b1:f0:57:a7:c9:84:4a:c7:2d:aa:
24:30:00:f0:d3:25:b9:12:b2:0d:95:95:47:57:19:88:ed:6b:
93:c6:2b:50:2c:de:23:b7:c4:b6:2c:3b:1c:b7:f7:a3:e7:55:
76:7f:a0:3d:66:4a:7b:28:5d:59:35:6a:60:a2:23:23:26:cb:
f3:43:4e:d4:ee:48:ce:7f:1e:34:01:c7:8f:24:a1:b6:48:53:
15:17:ae:36:49:e2:43:5c:89:25:24:71:48:7e:a8:cb:d3:7d:
b5:0b:48:32:27:ae:e1:77:77:cc:27:87:d9:3f:61:d6:c4:2f:
75:b2:98:4e:6e:e8:b0:63:84:c9:32:00:e9:e2:9a:6e:57:e7:
f2:88:be:62:8a:d2:d9:e9:c7:28:bc:fd:2e:e6:52:5b:ce:54:
fe:84:02:5d:28:ef:bc:08:4d:20:a5:ef:28:a6:c4:ef:a3:cc:
51:82:72:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:15:05 2025 by rpki-client