Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: ogyTVSXUswMsGN61SU6chHklkLH/zPF11FpAkt6nUB0=
Subject key identifier: 2D:D1:D0:2F:31:1B:85:AD:3B:56:E8:A7:FC:EE:D3:C1:38:84:DD:60
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 0197C04889A40DC8DAB633272A4B178B0B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 15BC
Signing time: Mon 30 Jun 2025 10:01:08 +0000
Manifest this update: Mon 30 Jun 2025 10:01:08 +0000
Manifest next update: Tue 01 Jul 2025 10:01:08 +0000
Files and hashes: 1: nywPQh9QP-OhqhIRdI1AR086REo.roa (hash: fyTq9cJsDKGICMb+AhPPiPfngZOBuqPjdSV/9OfNj10=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: q9ISncC/RbPjVcJrwE6SIRmWL7lUidWyb6CkIE5uh90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:48:89:a4:0d:c8:da:b6:33:27:2a:4b:17:8b:0b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Jun 30 10:01:08 2025 GMT
Not After : Jul 1 10:01:08 2025 GMT
Subject: CN=2dd1d02f311b85ad3b56e8a7fceed3c13884dd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:33:9a:e6:2a:5d:45:52:7b:7b:a3:cc:ea:4d:
4f:47:ce:6f:e0:00:66:05:f6:7a:db:4f:2c:04:cd:
9b:f2:a3:1f:0e:bb:73:c5:8b:c2:70:e7:0d:9a:5f:
1d:00:c3:13:b5:fd:ef:fe:ab:6d:e1:24:4d:10:6f:
26:28:4c:4e:1b:48:4f:a8:5e:3b:de:92:3e:c8:af:
88:1d:b8:b6:68:e0:27:fa:61:32:f9:f7:14:a4:7b:
41:ae:9e:89:e9:fd:79:de:65:61:ad:7e:ff:33:2e:
48:eb:08:91:16:39:65:c6:d8:43:94:f1:67:ab:d0:
8b:31:16:fa:a4:c5:16:ca:9d:91:53:60:d4:0d:37:
00:c8:af:d7:dd:a7:2d:72:99:db:4f:94:c8:58:bc:
3c:e6:82:2d:1b:d4:65:d8:99:94:b2:89:d1:4a:7f:
02:5a:30:67:0e:cf:6c:7a:c2:4f:24:a4:5a:90:67:
25:13:cf:ec:c1:39:9c:9f:e7:ec:f7:48:45:bb:be:
38:fd:f3:d3:b4:b2:54:85:a3:9e:2a:2d:7e:63:3c:
50:e7:b5:64:b1:fb:db:26:60:ef:d9:8f:11:76:41:
82:60:d2:cc:6b:5e:98:43:3d:f2:b0:c9:5c:1b:0d:
cb:fe:04:4c:9f:5d:e3:9d:18:d4:2c:42:2b:0e:83:
0b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D1:D0:2F:31:1B:85:AD:3B:56:E8:A7:FC:EE:D3:C1:38:84:DD:60
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:99:41:1b:a4:fb:c7:c1:64:86:d2:42:77:17:c0:79:72:44:
57:b8:78:0c:e6:c8:dc:f0:48:38:9a:46:f9:a0:e3:68:45:1a:
f7:e2:49:1d:62:46:ee:58:97:c5:a0:05:c2:76:a0:fe:52:42:
a5:2f:d6:4b:30:e5:e2:28:1c:75:cb:a9:93:e2:25:c1:c0:f9:
b9:6f:56:f5:7c:d3:d9:38:70:8b:a7:31:88:53:97:25:6d:22:
61:22:99:25:ce:6e:cd:82:82:24:ac:d8:da:2f:f1:a8:d0:a9:
b9:17:bf:56:a8:39:5a:c5:1a:51:56:5a:89:78:3e:66:f6:d2:
6a:df:f8:df:47:52:ad:ee:47:6f:e9:f1:af:00:f6:46:b1:a2:
0a:09:47:0f:f9:ad:67:98:ef:b4:55:7b:c4:20:49:7a:8f:4f:
ca:3b:c0:b9:75:ca:c7:88:2b:b6:b5:66:b3:06:1a:13:24:a6:
f5:66:7f:ee:3d:45:9c:68:32:df:b8:c3:a0:91:7b:c8:40:2a:
1d:e8:92:31:4d:01:c4:b4:71:82:1c:23:4f:c2:b4:05:f1:d1:
14:f3:d8:ba:61:c9:27:c1:13:01:cd:b2:1a:28:e9:67:0b:24:
93:4e:90:5d:95:c0:c8:06:80:63:2a:10:56:ca:71:10:b0:aa:
8a:3f:79:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:45:44 2025 by rpki-client