Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
File: xn4qRuNPSRQzyLYvMZuQK9396DE.mft (raw, json)
Hash identifier: Q5KXDfesW9PZ6nOPxxNsDDuua+BrXGNFRFbO0NuyTPs=
Subject key identifier: BA:2D:BB:2C:57:0E:50:D9:D4:98:B8:53:1A:2A:05:B9:D4:39:91:80
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 0197B6A0DB0F41A403C40835858623022B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
Manifest number: 12EF
Signing time: Sat 28 Jun 2025 13:01:24 +0000
Manifest this update: Sat 28 Jun 2025 13:01:24 +0000
Manifest next update: Sun 29 Jun 2025 13:01:24 +0000
Files and hashes: 1: BKGB0xu8toNLRNE3TtbV03PJFx0.roa (hash: FdiXQgpM3MPZ1o0fk4HNEhE38JmZapk1+2ih8Lu8DEA=)
2: _v0ZmDwGVXQnxYXB1nXQzsRBcbY.roa (hash: iHppVj2BjRk7dRpgDIJuQgoqhMV/BmqJSp1BycbHcEU=)
3: xn4qRuNPSRQzyLYvMZuQK9396DE.crl (hash: k/8GtfS6CQ5ONsYvmwMdCq27KPBQXrRwAUZq7EcpDqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:db:0f:41:a4:03:c4:08:35:85:86:23:02:2b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Jun 28 13:01:24 2025 GMT
Not After : Jun 29 13:01:24 2025 GMT
Subject: CN=ba2dbb2c570e50d9d498b8531a2a05b9d4399180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:7d:e8:cd:5c:88:8d:2a:c9:2e:2c:ff:d5:
2a:cc:db:05:e4:96:23:65:ab:7a:b2:c5:cc:5e:51:
c8:bd:1c:d2:b7:64:ae:06:35:cb:c8:f7:cc:33:b7:
20:a1:aa:38:71:46:87:ea:f2:5d:8f:cc:bb:29:9d:
9f:8e:36:88:f4:a1:df:3a:6d:a8:d5:80:23:91:01:
6a:04:bc:46:68:02:6e:0b:73:b5:f0:03:75:53:00:
6c:19:ea:c6:af:c1:76:37:f7:1b:43:2d:45:82:00:
33:49:41:04:7f:00:1e:de:d2:7d:2d:87:6b:a3:71:
4b:33:42:8e:0c:02:4f:57:5e:89:97:dd:3d:f3:c1:
7e:5e:f5:da:0c:29:0f:44:ca:31:e7:67:39:18:c7:
23:15:2b:cc:3e:fe:df:e4:50:7d:46:ab:5e:34:ee:
14:b6:04:ea:14:5b:94:8b:c2:53:41:2b:73:60:18:
f5:d7:9c:a7:a1:e0:32:61:49:81:40:54:42:eb:5b:
8c:45:16:8f:8f:eb:5b:f7:bf:a6:a6:fe:80:a0:7c:
b1:f0:a9:50:d7:00:4d:2f:33:52:d7:eb:21:63:13:
c4:74:b3:b6:cf:e0:8f:d9:c9:66:29:fc:b3:f7:72:
95:4c:a4:ff:7d:72:17:75:78:f4:1c:1d:96:17:e7:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2D:BB:2C:57:0E:50:D9:D4:98:B8:53:1A:2A:05:B9:D4:39:91:80
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:d0:6a:aa:12:23:b3:ba:81:62:50:46:2b:ef:27:94:c4:86:
e5:ed:73:21:c8:7a:7e:f2:53:f0:e3:6c:ec:7d:1d:b3:30:06:
9e:43:6b:e7:d7:34:5a:1a:5b:79:9a:91:35:1c:8e:64:e6:06:
e3:85:af:77:43:a3:31:f8:81:4a:97:c8:62:df:26:75:fa:6b:
62:bf:85:62:0e:91:3d:57:d6:77:a9:80:86:1a:b7:16:73:8a:
7a:f1:a6:78:b4:ed:c7:6b:e4:86:2e:14:f9:3c:08:60:d1:3c:
9e:68:78:c2:19:00:31:7a:ec:a8:b8:6f:f4:d7:88:48:c2:fd:
04:4e:7a:31:13:93:c8:f4:23:57:ed:8f:6c:76:18:03:83:ca:
c4:93:2d:c5:79:7c:c0:91:64:0c:99:26:e1:19:50:13:18:6e:
b6:21:e6:90:87:d0:9b:0c:14:ff:9b:11:60:46:af:4a:2c:11:
60:24:90:70:64:82:61:1f:87:9e:d2:3d:8b:15:b1:69:b8:af:
9d:c2:40:62:bb:f4:15:4c:b0:09:fb:bc:6c:28:50:bc:82:4d:
f3:00:0e:f8:07:4b:1a:cd:e4:9a:eb:75:4f:37:f3:23:d2:15:
10:ad:a7:0d:5f:31:c8:0e:54:a2:42:9f:02:2a:27:4d:87:1f:
29:b4:f8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:15:51 2025 by rpki-client