Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
File: xMAyk16WM9-LGZJd8L0luBxoY7c.mft (raw, json)
Hash identifier: NmHAj9FUOy3DHV1moxD7e6hx6M9wKPxj8cmEecMIqUg=
Subject key identifier: DB:02:39:CC:D9:78:0D:68:10:E0:BE:8D:71:88:F5:74:54:5B:E9:BC
Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Certificate serial: 0197B96ABA2AB0FB03A9EC650ABBE9CE13D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
Manifest number: 15B5
Signing time: Sun 29 Jun 2025 02:01:08 +0000
Manifest this update: Sun 29 Jun 2025 02:01:08 +0000
Manifest next update: Mon 30 Jun 2025 02:01:08 +0000
Files and hashes: 1: ghEtezlgRxtM8_A6BWhHBoi7MAA.roa (hash: XbPqTVhQ0C1rkf6WQ+W7x28ipcXojyuCGKdg2k0Xwvo=)
2: xMAyk16WM9-LGZJd8L0luBxoY7c.crl (hash: vUUma2QTT1tPiiOpSJpRMSpjH8G80HyMMxEQVqzFeew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:ba:2a:b0:fb:03:a9:ec:65:0a:bb:e9:ce:13:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Validity
Not Before: Jun 29 02:01:08 2025 GMT
Not After : Jun 30 02:01:08 2025 GMT
Subject: CN=db0239ccd9780d6810e0be8d7188f574545be9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:65:75:9d:14:d5:37:48:1d:8a:67:b4:a0:
a7:9d:1f:ee:9c:f6:ff:6e:4f:a4:a5:6a:ae:22:e3:
b6:e8:e7:71:7c:3b:ab:89:c7:ce:8c:b9:e4:dc:58:
fd:53:86:23:ad:be:26:de:17:95:3b:25:0d:5e:6c:
fa:f5:ae:26:57:cd:93:a1:89:66:67:73:cc:1a:bb:
e4:19:98:49:c1:0b:6a:bc:8f:4e:00:cb:c6:60:fe:
82:20:be:36:f1:e2:e8:ad:b3:7f:4a:52:00:99:ff:
15:09:4a:ac:00:7e:3d:51:11:2c:29:8a:4b:42:79:
3d:4a:c8:6b:dd:af:3c:b8:83:a2:68:e2:ce:f6:21:
60:d4:36:3e:f2:1e:43:bd:ba:b4:ec:00:18:32:8c:
2a:bd:f0:09:68:ca:31:4d:3d:e0:c8:a6:d9:90:7b:
5b:6e:bf:79:0c:71:04:f3:f3:c5:2d:09:4f:e3:35:
75:6b:c6:a2:8a:50:af:78:83:0b:eb:dc:15:0a:48:
59:c1:89:1e:e2:b9:d2:92:a3:cd:a0:d7:01:86:15:
16:32:6b:f4:6e:13:86:ab:d6:eb:80:2d:ad:f3:70:
47:ff:ac:23:44:38:35:62:89:2d:a0:9c:c5:34:af:
b4:49:34:d9:1b:8d:4c:41:4b:d7:b9:a9:21:fa:22:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:02:39:CC:D9:78:0D:68:10:E0:BE:8D:71:88:F5:74:54:5B:E9:BC
X509v3 Authority Key Identifier:
keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:be:5c:ff:33:50:e3:dd:c4:ec:59:7d:95:32:a5:32:89:06:
da:52:01:e4:ac:13:03:50:94:5b:97:00:da:12:95:ae:18:db:
e1:ae:1a:bb:2f:3b:b4:b4:c2:90:7e:9c:5c:c1:97:b4:6a:96:
db:ca:d3:9a:14:ea:b3:77:6f:98:de:7d:e3:9b:13:6e:4e:55:
36:04:d6:ad:78:62:52:3b:e5:88:29:4e:5f:ad:e6:ee:30:a5:
38:97:b5:70:f6:a8:1d:67:bc:12:e5:5c:c4:d7:c9:dd:85:87:
1a:fb:84:21:05:bc:0e:88:33:cd:71:3c:c1:c4:fa:9e:41:b2:
c1:dd:9e:14:57:a2:41:59:d8:34:46:8a:a4:28:bb:b2:6e:90:
a5:d3:9c:9d:1d:c8:12:7c:6d:6f:12:f3:c3:fc:26:da:c2:53:
6d:b5:94:8e:60:b3:2a:ff:6d:11:58:72:76:0b:49:9d:07:dc:
64:6a:f2:03:86:4c:5d:f5:ba:55:f8:49:92:70:6e:b3:4f:52:
fd:24:7d:f0:1f:68:ef:ca:c0:b3:87:8b:b6:fe:9b:7f:d4:81:
12:e6:f2:23:82:58:67:39:48:46:3b:df:62:53:5f:17:85:64:
95:94:a8:cc:24:a5:fa:c2:88:1f:59:13:c1:f5:42:33:c6:af:
4f:bd:9a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:31:30 2025 by rpki-client