Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File: xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier: ZdOpwHzMA+8+O9YXTD4Kq4kJbdaJ5EulMtJDiaNpQl0=
Subject key identifier: 23:3D:86:CD:C7:13:82:A1:D1:74:1E:7D:38:F6:D1:9C:45:30:DB:19
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 0197B7EA23C783F538962CBD1C092E278E76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 19:01:04 +0000
Manifest this update: Sat 28 Jun 2025 19:01:04 +0000
Manifest next update: Sun 29 Jun 2025 19:01:04 +0000
Files and hashes: 1: CzBENFpROta46Ahh1b9jdj6JXrk.roa (hash: L4tfWnC6wyVnCN7M94V7ANHnHcbMgExMDsrJgBJJe38=)
2: hm1hnmLqRJSfCnblBglQ9G9cJ5g.roa (hash: OUoiUUvLJ3F3/8+NwaVnz5Bp6R2hHKUkPzZNLdBZ/Gg=)
3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: RvwDxNAK/P6vPavySRcsJ6Dbh417Vby5pvRx2IwhyHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:23:c7:83:f5:38:96:2c:bd:1c:09:2e:27:8e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Jun 28 19:01:04 2025 GMT
Not After : Jun 29 19:01:04 2025 GMT
Subject: CN=233d86cdc71382a1d1741e7d38f6d19c4530db19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:62:b0:3e:2c:fc:3d:9b:83:58:7c:43:ff:
3a:8e:7b:25:3a:fc:29:2c:de:9e:a9:c3:78:e1:23:
7d:b6:aa:a1:95:95:89:da:ee:e9:04:25:6f:12:33:
6a:11:06:1b:35:2c:ac:5c:99:84:04:bb:c0:2f:a8:
aa:43:23:99:e7:83:b4:39:79:6f:8e:43:0f:84:d7:
0e:6d:cb:82:80:7e:7e:30:c3:ce:6c:7f:ec:36:5f:
c4:5b:a3:08:21:6f:55:51:5e:79:32:e4:f6:1e:47:
97:b9:78:37:41:8e:88:53:1e:49:a2:f6:4d:b8:9a:
32:20:23:9f:ae:78:e6:7a:ae:0b:95:f4:95:ac:b9:
15:33:61:18:d1:06:95:4a:dc:56:9f:f1:1d:2f:40:
0d:8d:f0:fd:42:2f:8a:b7:e3:9b:61:35:03:ca:fa:
36:07:33:5d:0f:ec:b6:5d:3d:a1:95:51:bf:18:86:
18:e7:62:f1:73:4d:0c:3c:62:a1:ef:df:ce:f9:7e:
f7:4d:bb:80:df:68:f8:02:16:0e:7f:2e:81:17:25:
39:19:b4:8f:42:e9:45:7f:eb:42:cf:c7:ac:8b:eb:
93:13:b2:63:ca:4d:4c:a5:b4:de:21:12:55:e3:64:
51:34:56:59:16:77:11:c3:e6:76:34:de:3e:9f:4f:
06:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:86:CD:C7:13:82:A1:D1:74:1E:7D:38:F6:D1:9C:45:30:DB:19
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:eb:5e:e1:4b:2b:f8:25:b3:dd:6d:42:40:bc:0f:a3:d8:2c:
b1:da:f2:35:d2:d6:2a:20:ce:c9:35:7a:e3:ee:67:49:10:e1:
49:b5:0e:c7:3d:d0:51:d2:16:f3:24:d6:8b:29:4b:18:d3:de:
fc:64:90:cb:23:9e:98:6a:ed:47:1f:e2:45:7e:fd:0b:c9:63:
ad:8b:d3:fa:a2:5a:86:e4:f4:fc:ee:51:d1:7d:fe:3b:e1:22:
7d:38:55:22:81:40:8d:c5:cd:51:8b:22:00:90:41:c7:e9:58:
04:fa:a7:e8:2f:a6:7f:5d:62:56:e8:1d:1a:c3:04:e0:d1:01:
4f:e1:d6:4e:44:2d:b7:8e:ca:0a:1a:a2:ee:43:5a:55:09:8f:
df:c2:57:1d:14:7f:ef:b6:17:ec:20:fe:f8:f4:3b:d5:74:c9:
c5:e5:63:a7:df:6d:5e:a7:b9:45:11:b8:2d:7d:36:fe:75:64:
88:e4:17:9a:e1:ea:af:19:81:33:18:0e:b8:5c:ff:53:d8:90:
d2:09:22:14:4b:b5:61:a8:f5:d7:f6:d9:ba:b8:54:ad:bc:44:
c9:20:07:96:98:7f:14:c5:c5:8a:9b:15:60:7d:3c:d4:92:39:
4f:f9:3d:99:c2:68:30:6c:6e:c6:2b:68:42:a1:fe:84:8b:fa:
d4:7a:16:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:24 2025 by rpki-client