Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
File: xNinONTBPEpnevUSdbqEyLNtyc4.mft (raw, json)
Hash identifier: tX4DVli5CVysHYiLjxghiiy4cVk3DrW1OBgOI6Wcm6o=
Subject key identifier: 94:BD:20:14:72:85:6E:4E:9B:CC:CE:3E:BD:0D:9B:37:F2:1F:F7:B6
Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
Certificate issuer: /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Certificate serial: 0197C191EA7E60FAAA5C6EDC1E7B8AAC9389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
Manifest number: 154B
Signing time: Mon 30 Jun 2025 16:00:54 +0000
Manifest this update: Mon 30 Jun 2025 16:00:54 +0000
Manifest next update: Tue 01 Jul 2025 16:00:54 +0000
Files and hashes: 1: AOrWMlaoWwr9BiH2KC52e33LvU8.roa (hash: C5KmnNcC1frqJFB0GlvW18JGpvtpy3xiJI4dTDmXhFM=)
2: xNinONTBPEpnevUSdbqEyLNtyc4.crl (hash: 4MdEHyYN6sbWZXdvapAWI1ET4Ud+MkC4jGTYMzt446I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:91:ea:7e:60:fa:aa:5c:6e:dc:1e:7b:8a:ac:93:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Validity
Not Before: Jun 30 16:00:54 2025 GMT
Not After : Jul 1 16:00:54 2025 GMT
Subject: CN=94bd201472856e4e9bccce3ebd0d9b37f21ff7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:ea:a2:6c:96:36:cd:cb:51:8c:d9:39:67:
8c:7b:87:b7:ae:49:ba:58:d8:49:cd:d1:ff:6f:28:
49:9e:99:d2:fd:38:db:1c:78:97:63:09:34:31:8e:
ba:7a:09:4f:57:93:30:dd:ec:5f:22:55:ce:97:d6:
ca:b6:fe:92:2c:a5:fa:0d:93:16:89:c4:a6:8e:2c:
8b:54:ac:c5:ef:7c:37:26:72:46:b3:1a:04:d3:8c:
a3:81:3d:79:17:94:2b:72:ad:1a:d0:0e:2a:07:53:
a3:b1:47:65:8c:fd:5d:22:5d:e8:e6:e9:17:f3:2b:
b9:8d:82:44:e8:95:8c:c2:0a:48:70:91:b2:2f:fd:
f2:b1:63:cc:b1:d9:85:5e:1e:84:d3:1e:5f:2b:0e:
0e:c6:bf:4e:ac:aa:a6:04:4f:b6:6b:88:36:ec:9c:
46:5c:df:22:c0:19:b4:87:1e:75:2f:28:21:14:e1:
0d:1e:f5:be:31:fa:92:8c:9a:d3:1a:73:82:80:ea:
05:b7:7d:83:28:f7:1b:9c:97:9e:85:2c:a2:33:4c:
07:81:b2:f4:13:4f:a9:01:3a:a0:a5:a9:dc:5d:28:
e8:0b:1a:e3:f7:6e:04:50:ad:bf:a4:a0:1f:f6:4d:
b7:34:cf:d1:40:fb:9e:06:5f:4b:52:a3:48:85:d6:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BD:20:14:72:85:6E:4E:9B:CC:CE:3E:BD:0D:9B:37:F2:1F:F7:B6
X509v3 Authority Key Identifier:
keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:57:0b:a9:61:a9:f1:e8:8a:f5:7c:94:37:9e:e5:44:84:f7:
f3:3f:41:30:1f:85:62:85:72:5d:fd:c1:c5:1f:0f:c2:ed:c1:
40:29:20:b0:4d:d7:31:d8:08:d7:17:6a:fc:fb:28:91:ee:27:
f0:8b:aa:eb:9c:02:22:7f:b8:48:fb:07:67:bc:86:f8:6b:f9:
17:11:cd:9a:e1:d4:d7:94:bf:08:c2:05:2c:26:7b:76:a6:f2:
c0:34:62:91:6a:d7:c6:0b:4f:04:fe:32:59:32:74:09:15:d2:
a8:a1:9b:07:df:72:e6:97:15:67:84:8d:5a:bb:81:74:41:4b:
e0:ee:f8:ea:17:ca:00:48:fa:4f:21:20:e7:26:13:51:70:60:
4b:3c:9b:5c:fe:50:2e:b2:fd:6a:57:13:d9:0e:15:e1:d7:3d:
e4:6b:b5:f4:65:e4:55:4a:1a:bc:87:d8:df:63:00:a7:73:c1:
72:d1:28:45:68:5f:93:8f:7e:8a:d6:9e:80:4a:ca:c4:ae:5f:
a9:be:50:e6:dc:bb:f0:f5:34:a6:86:29:32:91:12:68:5b:b8:
c2:50:5d:a8:03:de:57:ef:2d:9d:8d:0d:b1:14:f6:fb:ee:79:
0c:ae:0e:35:1d:e3:20:f2:1a:23:11:79:08:7e:47:37:14:c4:
a4:31:d2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:07:05 2025 by rpki-client