Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
File: xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json)
Hash identifier: QKrv4Sd5bUL8347rvPy9CwwqOZ118R1lO0dBe5zKEcI=
Subject key identifier: 34:63:2F:10:DD:38:3B:D0:BD:96:91:3B:14:1C:DD:C1:CB:24:C9:A2
Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
Certificate issuer: /CN=c42287c68458f980ca9b7c36d61f6af586464b28
Certificate serial: 0197BA0F7F5793C8DFC83276A55D1EFFA9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 05:01:07 +0000
Manifest this update: Sun 29 Jun 2025 05:01:07 +0000
Manifest next update: Mon 30 Jun 2025 05:01:07 +0000
Files and hashes: 1: 8Y6XKuO-_q-eZcd8PYJP4ppiukg.roa (hash: yAyB9mAE7fWNNJ4M45GAzvUfCPqHWuDqtJYIq1FJlDc=)
2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: yM4J+d6vaS5KVofifFKTs5UnaG1LOME1ep/mvKDFcOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:7f:57:93:c8:df:c8:32:76:a5:5d:1e:ff:a9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28
Validity
Not Before: Jun 29 05:01:07 2025 GMT
Not After : Jun 30 05:01:07 2025 GMT
Subject: CN=34632f10dd383bd0bd96913b141cddc1cb24c9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:e9:16:54:5d:f2:c7:d4:4f:65:1b:17:88:
a0:ea:df:f4:3c:d7:7a:4e:b9:c5:ce:e2:57:05:0a:
96:14:99:01:0c:ee:55:a0:c6:48:07:61:a2:8b:03:
46:f2:db:68:25:3f:1a:b9:e0:e9:89:81:09:d8:51:
d7:fb:7c:b6:4e:6d:c0:57:8e:ff:a6:f3:fc:57:ce:
03:26:2b:b7:f5:fc:ac:af:b1:28:bc:53:84:3d:d0:
45:31:97:f4:b1:14:dd:70:99:83:12:59:17:ec:0b:
6a:51:19:59:94:2e:0a:00:92:b5:e5:06:d4:6b:53:
97:14:25:5a:84:3c:81:d0:07:51:ef:f8:48:15:a7:
b2:aa:44:f4:56:e0:b2:2a:56:a8:61:2c:fb:55:27:
83:d8:df:c6:eb:c2:71:ad:1c:f1:aa:4c:2f:f9:69:
f5:ed:f5:b9:9e:47:1b:19:28:6c:85:e6:fa:9e:0a:
71:fd:9f:86:90:f4:8a:44:bc:8c:85:b5:b2:98:71:
a3:8f:ea:45:e3:1c:99:5f:86:f9:63:cc:ed:c6:c5:
53:3b:31:f2:1e:bd:53:ad:04:c2:48:64:88:77:dc:
59:39:d7:fa:c5:53:c9:c3:e7:dc:93:24:05:5a:3b:
3b:bb:b6:75:a4:f2:14:04:4a:c4:b5:00:6c:3b:3a:
a4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:63:2F:10:DD:38:3B:D0:BD:96:91:3B:14:1C:DD:C1:CB:24:C9:A2
X509v3 Authority Key Identifier:
keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:66:cb:55:79:d3:a5:c7:34:4e:ad:2b:e9:d2:5c:94:7c:b0:
45:43:92:d7:74:cf:43:83:fe:d1:ea:b4:5d:ed:8c:67:db:27:
a7:a4:4c:66:f4:16:d5:b2:ed:74:31:bc:74:3a:e3:49:68:b9:
35:d8:b4:a3:c9:f4:31:8b:b0:6f:27:66:13:53:d7:fd:55:f6:
67:d2:b3:61:ac:1e:dc:f7:23:df:85:42:4e:96:cd:bc:2c:dd:
c2:73:c2:ab:cc:64:3b:e0:38:f5:6d:b8:51:4e:5d:9a:dd:8e:
1f:43:6c:c5:a8:7f:35:b3:c8:e6:13:b1:f7:e4:f1:a6:90:40:
b2:4c:1b:c7:40:30:a7:b6:cf:8b:0b:1f:b6:09:dd:7e:ec:34:
c4:7d:e2:7d:98:ef:68:22:cd:28:37:27:5b:83:f3:1a:61:7d:
06:15:e1:10:83:29:d6:9f:d2:96:9c:2c:fe:c7:e4:e8:82:f4:
a2:6f:5c:68:2f:96:56:e5:4a:8e:9f:4c:b2:42:cb:9a:23:2b:
1f:80:54:b8:3a:ca:89:59:fe:96:e7:9d:c7:72:4e:99:fe:47:
10:08:c7:1a:ff:51:41:fb:58:08:4d:e0:f0:6a:a5:e0:9a:4e:
a7:9f:46:8b:eb:b5:f6:cc:28:b9:84:dc:96:25:bb:92:e4:41:
2f:7d:9c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:55:24 2025 by rpki-client