Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: 0mH/SX2CHlDOXmIJlCR96iSYpTYXDUaKZSVnirodI2c=
Subject key identifier: 90:D8:19:F3:DA:BC:7C:26:DC:A7:22:4B:3F:6A:35:5F:4B:CB:B5:CC
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 0197B6A13FB3E160B023ABFA5005251C72DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 12CE
Signing time: Sat 28 Jun 2025 13:01:50 +0000
Manifest this update: Sat 28 Jun 2025 13:01:50 +0000
Manifest next update: Sun 29 Jun 2025 13:01:50 +0000
Files and hashes: 1: 39NfMlHhrMH0zRyfZciiqR6mIWs.roa (hash: y/nnfdi8YIAf5ZNy+0/8yGvD2yVcPkZoC4V02tMUx4U=)
2: Kj_GYCscFmlVFFmndDSFfAkuFwY.roa (hash: 6AgFYxmuaSYjaFZUd8eJPcRWj8cD+HYqY6zQ9lI9XGM=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: APdjP88W7Qzol+a9S+K5O2J2t5kClfPhJlALQb8xRNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:3f:b3:e1:60:b0:23:ab:fa:50:05:25:1c:72:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Jun 28 13:01:50 2025 GMT
Not After : Jun 29 13:01:50 2025 GMT
Subject: CN=90d819f3dabc7c26dca7224b3f6a355f4bcbb5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c6:fd:fe:ab:26:6c:cb:b5:6b:e6:26:f8:f6:
f8:48:e7:c6:39:75:fa:39:40:66:ba:37:76:8b:93:
ab:f4:08:41:8e:81:38:00:5e:14:ff:5f:23:c9:de:
91:c3:0d:7c:f7:7e:34:87:9b:68:00:2d:63:6c:60:
80:c7:3c:4c:37:1b:fd:e5:0b:0b:52:5d:12:00:06:
2f:28:60:f1:e8:8c:6b:eb:c5:a4:14:68:53:a4:5d:
9b:5e:39:7e:75:1c:92:12:b3:58:35:0e:86:2e:aa:
ad:27:2c:9c:27:85:31:f1:79:ad:70:0b:9d:90:ac:
97:f0:09:38:9a:17:d9:d8:df:9a:d6:10:1a:db:93:
43:f8:f5:1c:30:03:08:17:65:b3:e2:37:c7:53:09:
e1:79:4f:83:dc:9d:f7:ff:f1:25:81:34:47:e2:c0:
19:8f:91:ee:7d:da:d2:72:16:41:bb:28:10:70:6e:
64:80:20:94:f0:80:ce:ff:26:53:e4:83:6b:7a:5d:
33:0a:09:88:b8:1a:f6:59:df:d9:fb:2b:b8:42:e8:
af:47:22:17:11:ef:fb:33:15:4a:8e:88:43:bf:97:
0b:d4:fa:f0:55:c4:87:a4:c8:8d:b9:21:ee:63:3c:
80:ca:21:b7:9e:e9:fa:b0:ed:67:23:41:b2:b2:92:
88:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D8:19:F3:DA:BC:7C:26:DC:A7:22:4B:3F:6A:35:5F:4B:CB:B5:CC
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6b:58:b4:64:64:d1:a3:ed:7e:82:78:09:0e:13:87:cb:0d:
78:6e:c9:79:03:f9:d6:1b:c0:4f:01:2b:0f:81:04:21:3c:05:
9d:07:17:42:94:df:d7:ac:fe:9c:85:6e:94:9d:b5:29:c1:20:
61:7b:06:f7:f3:30:61:4c:c3:db:fd:d3:89:c9:3c:cc:0d:e2:
e4:5a:5a:94:31:2b:78:4d:6d:2c:cb:11:8e:cd:ca:37:c8:ed:
f9:e9:12:9e:1f:7c:2b:e6:8f:40:07:30:94:74:0c:03:78:fc:
95:b0:82:51:03:5d:66:b7:6c:9c:b3:31:07:b6:62:99:d8:ef:
b2:62:5b:08:a2:4e:d2:78:8b:dd:d0:40:c6:7c:85:80:e6:4d:
63:68:11:27:12:55:68:14:97:eb:75:4b:a1:d3:d3:62:5f:66:
77:d7:b1:f8:4b:6f:4e:5c:d9:06:8d:bc:92:27:8a:4a:27:8c:
71:f2:be:4e:dd:89:00:4a:c1:79:32:99:89:03:d8:66:d8:df:
05:06:67:69:98:32:2b:88:e2:de:da:31:1d:5d:8d:46:c2:c2:
2c:26:43:d5:21:8a:7c:44:06:d1:52:7b:82:c2:e2:66:08:84:
4f:fc:15:82:21:0e:af:cc:91:b7:d6:65:3c:cc:75:4d:20:f2:
84:93:7c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:04:02 2025 by rpki-client