Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File: x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier: ItiiREwfFnrNI5OjFWDuUQlMZU6aM8Gb+e1GH+9Xj4E=
Subject key identifier: 74:79:47:E6:25:81:E3:D5:D0:86:0B:28:0B:32:DA:CC:FC:6F:2E:3B
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 0197B745246412568B63AAC863A28E878E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number: 0FAA
Signing time: Sat 28 Jun 2025 16:00:51 +0000
Manifest this update: Sat 28 Jun 2025 16:00:51 +0000
Manifest next update: Sun 29 Jun 2025 16:00:51 +0000
Files and hashes: 1: Cujb_JMNRpBWUMNsYDzUM07sX9g.roa (hash: aPQ30rk20GzKKIz2rCdqmpPV4nPvHBgzWHC/g71TaJY=)
2: PkKwn16bpB0gLF9vU4EldEuV1BU.roa (hash: fP4l1zoE5N82M/LmyMEfGwuK+f6miXD04jLXzvpdlzg=)
3: Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa (hash: EjqMbrULb7iRN3e+HzHVHj0EJ4f37rSShZWRA2TwvuI=)
4: ajjSrJlCyQcuDeL8XuyTk3xvjtc.roa (hash: EhQOidF5uwuPy9XRI08HHhPlUcqfCK7PNLZCEaKLCPE=)
5: bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa (hash: B4U/d8xwzXF5+8shclwMswe7rUu/cS9QkWoCnLKd0HU=)
6: gDrJ_yW-_CzbWfpTMme-odFmJlw.roa (hash: gy5Z4mzDyCMzzZeJUBNPlOeBnObygQh/RNlUGtI+BkA=)
7: lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa (hash: QTd8eFyxLptYQFcQvp6p0JN6N3jGTLG71RFCqk6mZlI=)
8: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: s7TFbhaoxOE0TiquUYNSQa7Gpy9atUPu8mE5bP/eB60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:24:64:12:56:8b:63:aa:c8:63:a2:8e:87:8e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Jun 28 16:00:51 2025 GMT
Not After : Jun 29 16:00:51 2025 GMT
Subject: CN=747947e62581e3d5d0860b280b32daccfc6f2e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:4b:89:f5:c2:ab:c5:fc:46:72:b5:c5:2a:
b2:79:a1:1c:1c:7e:1c:a7:3b:45:7e:4f:44:fe:3d:
b5:f9:ea:1c:71:08:da:2f:63:37:ec:fa:e5:06:79:
12:4b:12:85:b7:66:61:74:48:0c:7a:b1:32:85:21:
4d:2a:a6:d6:32:51:2c:29:ff:8d:66:8f:e8:00:4c:
eb:e5:e4:80:11:81:a6:e6:f7:80:2c:de:db:59:e8:
b3:9a:08:2a:21:fe:66:8c:d9:7b:d6:06:d3:59:40:
69:b9:33:43:3a:44:e7:7d:a1:2b:ab:33:87:36:c2:
d9:cc:a8:f4:5d:ea:00:ed:d8:8a:f7:09:74:7e:02:
72:dc:e2:9f:e4:f5:e4:ed:48:46:f8:5d:2e:70:7e:
2a:2f:77:85:78:86:c6:c8:8d:44:a6:10:3a:80:b4:
f5:a4:09:3e:5c:d6:d9:32:b7:99:23:46:5d:b7:56:
ae:e3:b1:7c:b2:68:95:b7:f3:09:d2:53:36:13:86:
a1:19:b3:52:aa:24:91:1b:a6:e3:2a:d0:ac:0e:0a:
00:54:cb:82:83:a7:78:55:4b:fb:d9:f8:21:3b:a4:
36:2e:73:d2:74:d6:61:57:0d:59:b5:de:f5:4e:25:
bf:c0:f4:52:67:ab:4a:72:1a:f0:ea:81:ba:de:02:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:79:47:E6:25:81:E3:D5:D0:86:0B:28:0B:32:DA:CC:FC:6F:2E:3B
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:81:14:f6:9a:92:92:03:5a:e6:04:d6:ed:84:9d:3c:1d:71:
ec:b4:25:9f:83:46:6a:c0:03:0b:5f:07:e0:ef:eb:74:92:aa:
80:05:d2:b1:ab:67:cd:66:83:d6:1e:ab:79:45:e8:e5:7c:fd:
c1:c2:26:ad:1b:b0:0f:04:d0:b7:d2:4f:3e:89:a7:63:2c:a9:
ac:86:24:ae:9b:11:ee:c9:ec:af:65:1f:3c:f2:ee:ce:c4:2b:
18:26:e7:d3:df:03:68:a0:d3:f8:a9:21:ac:b6:d3:3f:a8:32:
ca:3b:96:91:c4:17:38:7e:1d:14:cc:1e:3d:5c:e1:0e:8d:8c:
f9:a8:59:9d:82:18:7c:6d:20:c9:fc:43:b4:78:b6:0d:08:5c:
22:b1:b1:11:95:58:79:6b:62:5e:51:79:d4:6b:1c:83:69:81:
e5:d7:49:7b:69:26:87:d9:e5:15:65:34:f2:76:5b:f3:28:2f:
23:db:58:01:39:96:5f:51:e7:3c:da:7e:a2:79:20:96:41:ff:
6d:d9:7a:58:c4:f7:e2:48:ca:23:c4:a0:9b:a3:c1:3f:db:cc:
97:08:d4:66:22:29:62:ff:fa:df:6f:22:c7:bb:10:01:59:01:
be:f1:47:56:a7:ff:c4:1c:10:3a:be:0c:c7:2b:f4:20:7f:56:
1f:12:89:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:37 2025 by rpki-client