Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File: x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier: AtWcfDDhDE/QzKBwmAwkeoUpOZfGPCcyvB6eB64Ri9w=
Subject key identifier: 71:DF:93:2F:76:26:C7:33:64:DA:11:BD:AC:D5:2F:30:0E:A1:29:6B
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 0197B8FD24EEC0D036F4C7834FF8332E3E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 00:01:27 +0000
Manifest this update: Sun 29 Jun 2025 00:01:27 +0000
Manifest next update: Mon 30 Jun 2025 00:01:27 +0000
Files and hashes: 1: cFEMcTrZnpJM6OI3sLSildoG7_o.roa (hash: 9byuaTVIbm1V06CyQEH6JUvAc6lfIjdANtz73++4OCM=)
2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: STeKYUnk717EaboA1n0xjjAwMiUpnlMB0GV3ykUAAqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:24:ee:c0:d0:36:f4:c7:83:4f:f8:33:2e:3e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: Jun 29 00:01:27 2025 GMT
Not After : Jun 30 00:01:27 2025 GMT
Subject: CN=71df932f7626c73364da11bdacd52f300ea1296b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:88:ab:92:06:06:79:18:a8:26:d1:5e:26:
05:28:c7:c0:64:56:37:3d:64:3c:bc:ef:0e:19:04:
1d:cb:09:f5:60:21:74:18:ce:be:09:ce:a8:5f:fd:
af:c0:36:11:46:46:89:f6:06:c6:a7:4b:50:ff:98:
f0:4c:26:86:7b:f5:c1:04:3d:ff:44:94:72:43:d7:
98:8e:19:81:80:d8:49:c9:79:70:e8:cb:35:30:43:
d9:84:8d:b2:4c:42:a2:ef:d3:3b:7a:51:ed:f4:11:
3a:f6:15:b6:ea:a1:0d:bb:60:a7:0b:8a:75:ff:a6:
a1:79:cf:18:d0:cf:59:f5:1c:a3:7c:26:5f:d8:33:
97:ab:48:02:48:9c:0e:2a:e1:15:86:f8:38:1d:5a:
dd:e0:bd:ce:92:30:ba:d4:44:06:bd:25:dd:c1:05:
c5:5d:03:7c:9e:0f:81:1f:93:a9:64:ed:4f:93:53:
1b:e5:f8:80:ed:02:ca:39:32:1d:1f:80:62:27:59:
58:d0:e3:38:89:eb:8a:37:75:dd:81:79:91:cf:41:
17:2c:7b:78:28:29:f1:32:b5:48:51:67:0f:82:1e:
35:3d:ef:4c:c9:65:b4:c4:13:9e:d7:b8:62:6f:dc:
b0:82:06:42:81:63:fa:95:da:50:bb:87:84:af:84:
7e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DF:93:2F:76:26:C7:33:64:DA:11:BD:AC:D5:2F:30:0E:A1:29:6B
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e9:6f:3c:3c:0a:5e:36:c2:4f:8c:cb:7c:45:6f:37:ce:08:
7b:7d:3a:54:54:34:c7:5c:67:8d:ff:b2:d2:85:94:05:64:da:
cb:7d:53:c8:bd:e9:3c:a2:52:f9:8d:a7:8f:3f:83:f9:3c:3f:
16:e7:9f:66:00:2b:93:4e:06:5f:dd:11:3f:3f:11:45:5a:50:
d9:cf:68:a2:1c:0f:31:eb:8a:7c:41:31:fa:76:29:bf:1e:cc:
e8:04:9c:32:2a:04:93:e5:98:c9:86:40:6e:d3:75:2f:ec:73:
c6:59:87:91:0e:fa:64:50:cb:7e:25:aa:d7:f7:a7:98:fc:7b:
00:44:df:8f:7f:f9:f8:55:25:c1:23:8c:45:2d:a5:aa:92:13:
6d:22:8b:15:04:e0:2e:4a:f3:5e:71:2a:8d:bd:04:3e:e3:24:
52:bc:2a:96:3a:85:13:26:0c:cc:5b:28:87:cf:7d:8f:22:fa:
3e:55:f3:18:57:8c:cd:88:6b:e9:f3:37:b5:18:8d:d5:e8:1b:
22:0f:ec:22:85:9a:77:92:f5:a0:ac:ed:54:e3:30:37:43:19:
e0:95:12:be:ae:09:fa:8c:9e:f7:f5:70:56:e9:9e:ef:79:00:
89:7c:a8:7b:25:fe:14:db:43:21:5e:3f:2c:81:96:bb:17:db:
56:6e:88:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:02:59 2025 by rpki-client