Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: cJS1XK/VEtQlcByALBIRpcX4QnPvWPzldNG8eBxV8IM=
Subject key identifier: 46:F9:BB:F8:66:3C:89:67:78:A6:8C:3F:75:A5:01:B2:24:8F:F8:C2
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 0197B89095DB496C744A5426627BAE52F068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 15C5
Signing time: Sat 28 Jun 2025 22:02:52 +0000
Manifest this update: Sat 28 Jun 2025 22:02:52 +0000
Manifest next update: Sun 29 Jun 2025 22:02:52 +0000
Files and hashes: 1: TYwZFqNPf6Qsrw0GmPrjKEpe21A.roa (hash: CZIXGgcAUIozY1tQFUYLHdOZbi+azarBS/OuaFJStXY=)
2: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: zNtsQpa8Ep8d6Tjj+rUxwjcGRrt6dR8a4fR1FbK2bAU=)
3: b3OynJO2dQ-hJEqWlg7d4lwS2vQ.roa (hash: 2dy6h6k+j3ORshtIaAQ5KnKNXYXUa2URxchCR/WmKmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:95:db:49:6c:74:4a:54:26:62:7b:ae:52:f0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Jun 28 22:02:52 2025 GMT
Not After : Jun 29 22:02:52 2025 GMT
Subject: CN=46f9bbf8663c896778a68c3f75a501b2248ff8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:80:f3:d8:9a:73:70:c3:59:dd:d3:f7:94:ca:
3f:8f:fe:68:0d:e2:00:44:d8:07:dc:48:f4:18:9c:
47:b9:d8:9d:49:47:cd:31:df:78:ad:49:c6:41:cf:
69:9c:f4:c7:30:4b:34:4d:87:b0:1a:fa:81:66:0b:
d9:7d:c4:69:f6:65:18:a7:17:78:4f:f1:52:63:b1:
f4:59:c9:eb:4a:4e:07:ba:5a:b5:7f:85:24:17:53:
b5:51:2e:79:ee:07:4d:5e:5a:bb:87:85:48:8e:ec:
1d:ae:64:e2:bf:67:8d:54:42:8e:3b:e3:d5:25:ff:
ee:fe:09:c5:b1:e0:c3:00:1a:1e:82:1c:b3:4b:d0:
e0:af:c0:be:06:5e:36:68:d0:0a:4a:72:08:a6:96:
ee:e6:e2:15:3f:6c:88:d4:e6:23:15:f1:a3:43:c2:
fc:31:2d:32:ab:78:cc:a1:f9:fa:a4:ed:c7:6f:a8:
ae:e3:ad:bd:87:ab:82:51:d2:73:d6:5b:6f:5e:b0:
5e:98:15:7f:98:67:33:67:a6:99:96:14:01:bb:d6:
b7:69:82:96:aa:06:1a:31:26:21:59:c6:98:82:aa:
60:17:4c:a8:1d:14:bc:44:a7:94:cb:03:04:84:e1:
d2:13:96:c1:5e:81:41:fa:c0:b2:ef:88:fd:04:ab:
d1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F9:BB:F8:66:3C:89:67:78:A6:8C:3F:75:A5:01:B2:24:8F:F8:C2
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:96:d1:fb:0d:3f:a2:7e:23:a9:32:92:22:c7:ff:b5:bd:23:
9d:ab:01:99:ad:f4:18:66:9f:41:be:f5:0f:96:8c:4a:ec:46:
66:7c:35:cb:1a:9d:d4:58:27:2c:38:47:e2:8e:72:8e:b1:76:
72:68:c6:95:3c:0c:20:cc:ab:26:3b:28:df:d4:e1:09:c0:2e:
4b:9b:b0:a6:44:9f:6d:d1:7f:55:96:f6:9e:73:d1:54:1c:f6:
20:38:be:d9:a9:08:6c:18:e3:1c:9a:53:c6:1f:35:f9:b9:84:
04:c7:22:ff:20:7d:7a:9a:1f:ba:ec:28:cd:c4:e9:77:ea:6b:
08:1b:0c:60:1a:3c:31:9d:d8:67:41:7d:9a:8e:bd:43:b7:5c:
05:0f:aa:a2:da:a1:bb:a8:e3:03:0c:bc:d3:40:2c:e1:1f:f0:
e3:cf:2c:90:57:bb:a5:95:e5:94:c4:f3:87:ec:8f:cb:30:ae:
3d:02:88:2a:04:43:2b:4a:f5:2b:62:fa:18:67:26:cb:0e:35:
7d:77:06:c1:09:1b:0e:5f:2c:87:95:d4:0b:13:5f:f6:3e:78:
97:80:81:05:0c:29:be:33:77:e1:92:42:c1:6a:91:63:75:9d:
e5:c1:0e:6f:75:77:5f:de:3a:9b:db:e8:50:6d:84:b5:d9:cc:
5e:81:ff:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:26 2025 by rpki-client