Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
File: P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json)
Hash identifier: 7uU38JUB1jWLjj9arpyXmTQuAQP5s8kN7Zz06fAyK44=
Subject key identifier: BE:BA:15:40:6C:D7:8A:BD:E9:09:96:90:DF:7F:AB:CA:E7:02:A3:FA
Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
Certificate issuer: /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Certificate serial: 019849D36FA9392A5849EEB6A99F85749CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
Manifest number: 150D
Signing time: Sun 27 Jul 2025 03:00:50 +0000
Manifest this update: Sun 27 Jul 2025 03:00:50 +0000
Manifest next update: Mon 28 Jul 2025 03:00:50 +0000
Files and hashes: 1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: zcTmDWouJaX+PX7xGF5qsYfr598xdrfNx5FaDUuSiGQ=)
2: nmitwXvuuY6MKgCsxEX1cJcowok.roa (hash: oh69tebd8y4Ws34XumPPpVkiRFbzbzoksJJOP2JTe+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:6f:a9:39:2a:58:49:ee:b6:a9:9f:85:74:9c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Validity
Not Before: Jul 27 03:00:50 2025 GMT
Not After : Jul 28 03:00:50 2025 GMT
Subject: CN=beba15406cd78abde9099690df7fabcae702a3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:ce:33:11:ca:26:99:50:df:ce:3e:d9:16:
48:00:09:46:26:b3:24:f9:0e:48:7c:56:ef:b2:dc:
44:8a:da:ba:09:44:99:6e:e8:ab:37:65:9b:64:a7:
0c:20:c8:8b:bd:08:4c:85:af:fd:21:42:81:73:97:
b8:1e:5c:2d:91:1f:88:3b:3d:6d:fd:5d:cb:ee:97:
4c:6f:9e:b1:ef:01:88:d7:1d:cf:9b:98:c3:45:ae:
3c:f6:c9:2b:7f:33:0d:69:b3:2d:55:84:13:42:40:
75:fb:51:ce:bf:e5:74:d3:db:b9:0f:4d:5b:72:2d:
75:18:9f:09:d6:a0:48:e8:dc:86:0c:25:f9:12:b7:
1b:91:ef:84:b0:68:d4:c1:97:23:40:da:38:76:61:
61:40:36:c3:ac:57:08:ff:c1:61:2a:c1:60:fd:4a:
21:7d:ad:c5:13:b4:31:a3:8d:1e:4f:8b:1c:55:42:
73:1d:ac:57:c7:79:4e:35:a8:2c:98:f6:76:79:c4:
9f:7f:14:7f:11:cc:af:41:37:4c:2b:b2:ac:f6:2f:
e6:e8:88:95:c4:4b:c9:3a:01:e2:15:03:2a:bd:56:
dc:05:1e:b4:b7:92:8e:43:7d:5d:8b:fe:4e:69:88:
b9:b2:57:44:fc:6d:ed:cd:cb:d7:ba:90:f1:ea:da:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BA:15:40:6C:D7:8A:BD:E9:09:96:90:DF:7F:AB:CA:E7:02:A3:FA
X509v3 Authority Key Identifier:
keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fa:4b:4f:69:05:70:14:1f:09:0b:2f:a4:72:78:46:3b:bf:
9d:5c:50:5d:27:9d:53:18:fd:87:43:3a:3a:fd:0e:a9:3c:e1:
d4:34:61:fc:11:d6:13:4d:22:42:5e:a2:52:99:c4:03:dc:58:
26:da:85:23:f0:1a:89:ed:93:60:cc:2e:ce:1d:22:1a:bf:4e:
1a:d1:c9:c8:66:1a:f0:27:f0:91:19:b8:bf:fe:09:59:f0:22:
39:ab:6d:2c:17:fe:6a:15:8a:52:17:02:a6:37:75:fa:6c:ec:
3c:01:1c:5c:0b:a4:b7:5f:ef:55:16:14:5a:2c:7c:ca:a9:72:
57:6b:b1:3f:c6:4e:f6:36:ef:7a:50:d3:5c:1c:27:7b:cd:4f:
97:4f:a7:6d:5f:5c:d2:20:77:eb:29:06:9f:6b:54:dc:6e:f1:
47:4b:52:85:10:7b:3e:59:fa:34:49:a5:10:85:2e:1d:a4:9b:
83:eb:70:b5:a1:16:d4:7e:73:e1:bc:e7:c1:2f:1f:19:26:b9:
fa:ed:22:d3:d4:63:00:eb:fd:84:f5:65:e7:4c:4b:9c:d7:5f:
b6:6e:eb:37:85:7b:2f:33:f4:a0:7e:ea:4e:9e:54:99:04:86:
ae:e5:54:3f:b0:5b:ba:0a:a6:26:6e:3e:b5:f1:88:6e:d6:18:
aa:94:2c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:36:23 2025 by rpki-client