Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
File: S_xaKUEPH_z03ipacFj1FiCzC3k.mft (raw, json)
Hash identifier: HuDgyNqjRR6JoJkNI4LH0ICihIsi7KNxB6FagYrD0Sg=
Subject key identifier: D0:27:02:FC:75:7A:78:1C:C0:6B:5F:6B:E6:A5:80:86:4E:86:AC:55
Authority key identifier: 4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
Certificate issuer: /CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Certificate serial: 0197B7B3832E1360C18B68AEEC1074437767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
Manifest number: 0D68
Signing time: Sat 28 Jun 2025 18:01:24 +0000
Manifest this update: Sat 28 Jun 2025 18:01:24 +0000
Manifest next update: Sun 29 Jun 2025 18:01:24 +0000
Files and hashes: 1: S_xaKUEPH_z03ipacFj1FiCzC3k.crl (hash: i/atVdDoR6eJQdn571m8BPIYZsczI4AW0Ia2pxPZgxU=)
2: bgx026u65bEUIofoNprJyhzn_S4.roa (hash: mkA02/DFrwmq5MSNIOugSkJaE1Y0Xy5Utto0dixWmsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:83:2e:13:60:c1:8b:68:ae:ec:10:74:43:77:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Validity
Not Before: Jun 28 18:01:24 2025 GMT
Not After : Jun 29 18:01:24 2025 GMT
Subject: CN=d02702fc757a781cc06b5f6be6a580864e86ac55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:72:0d:e6:c0:0c:3c:a2:06:90:5b:dc:da:
7a:80:16:1a:6d:49:f8:0a:07:4c:f2:37:c2:51:00:
fc:58:64:ff:db:db:b6:86:2b:a5:6d:78:d6:d1:71:
11:58:c8:db:4b:82:77:3c:87:46:87:98:8f:3c:fc:
59:d1:b1:ce:af:16:5e:08:dc:68:01:f5:98:7e:71:
0b:54:da:c5:93:1d:a0:ed:7a:ea:51:ab:93:14:41:
2f:d0:2d:97:57:04:71:b8:f8:16:5a:7b:a6:45:2f:
0a:57:f4:3d:22:25:c7:a3:9f:90:74:10:73:78:5f:
f4:7d:25:9f:e6:c9:63:0c:08:7b:d7:06:7d:86:3f:
78:8e:d6:ff:f9:18:14:d6:75:98:74:69:b0:0f:d2:
15:e9:4d:45:12:ce:0b:40:45:a3:01:c2:25:3f:f8:
ed:a5:32:9c:fd:2e:6e:21:7a:11:43:d0:ee:97:15:
92:0f:d9:62:8a:dd:b6:05:c1:1a:97:90:32:5a:b5:
c6:84:f6:54:e6:0c:de:92:c8:c4:ad:f1:6c:b1:ca:
86:a3:b6:fb:a7:50:ec:1b:62:d0:77:70:8c:6f:6f:
9c:e3:71:52:71:14:76:24:43:e5:46:be:df:55:be:
6e:65:9c:e1:b1:31:73:0b:71:f5:ad:d4:20:24:52:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:27:02:FC:75:7A:78:1C:C0:6B:5F:6B:E6:A5:80:86:4E:86:AC:55
X509v3 Authority Key Identifier:
keyid:4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ad:c8:9a:06:ce:e5:80:87:4c:62:9b:15:b6:21:5c:37:b7:
5d:c3:ec:c5:cf:cd:3c:21:d2:a1:e8:d6:77:33:b7:6a:e2:6b:
aa:09:fd:e3:ca:ab:2b:de:ca:8f:20:13:72:35:8d:99:ab:a5:
ec:82:dd:3e:3a:2b:72:a3:a5:08:ed:cd:4e:7f:56:5f:67:d5:
ed:76:12:fd:12:73:6f:10:28:3a:56:0e:8b:5e:ec:c1:f2:6f:
ee:50:84:c1:bb:5b:1f:76:c1:3c:a6:48:be:98:7e:de:b5:3d:
ae:bf:1c:73:f6:28:31:fe:31:97:d0:79:8b:8d:fe:0a:07:d2:
f0:d4:d7:07:3e:71:fc:2f:5a:36:80:8b:74:82:95:47:aa:25:
61:6c:e3:87:52:4e:32:85:7e:a8:c7:5a:49:0b:bb:63:24:4e:
60:e4:8f:11:9c:df:20:8b:4f:4e:e6:2d:fe:45:40:de:08:3a:
64:3c:c2:0b:4e:e6:55:d1:9a:f7:65:81:3d:ce:f2:e8:2b:ec:
33:05:46:8c:b2:19:78:0a:60:15:06:5b:06:99:c3:56:42:88:
7d:25:3d:fa:a1:90:01:4b:aa:4a:82:61:a9:68:eb:e1:e1:b6:
e7:0b:b1:41:ef:fb:03:26:ca:a1:75:62:9f:06:fc:c7:55:ae:
c2:02:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:39:32 2025 by rpki-client