Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json)
Hash identifier: sEGDJLfUqySR3qvNjl4MI3uAwVyNsPxDN+G7kAUbThg=
Subject key identifier: 06:BB:6F:5F:AF:AD:B5:B8:7F:49:0D:E0:F2:7E:A7:0A:8E:D3:FB:06
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial: 0198537BAD103877CB5F7F469A20A71A8EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
Manifest number: 145B
Signing time: Tue 29 Jul 2025 00:01:10 +0000
Manifest this update: Tue 29 Jul 2025 00:01:10 +0000
Manifest next update: Wed 30 Jul 2025 00:01:10 +0000
Files and hashes: 1: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: sQ4+765NHt4ELWggRH12b8BAfKIblrJxiqBx6cQRybE=)
2: zUVgbIXYeTGVKXvGEymmIIswak0.roa (hash: byi69vgfiULR5t5etKbYt0ap14VdTPxIUc5JBAXpbBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:ad:10:38:77:cb:5f:7f:46:9a:20:a7:1a:8e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Validity
Not Before: Jul 29 00:01:10 2025 GMT
Not After : Jul 30 00:01:10 2025 GMT
Subject: CN=06bb6f5fafadb5b87f490de0f27ea70a8ed3fb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:01:af:46:94:77:eb:e9:e6:05:18:92:d5:
b9:47:0f:1f:47:93:36:be:26:dd:8c:fe:47:23:82:
d4:ef:5e:2c:75:af:a1:00:ab:cb:77:9a:02:32:74:
bf:ac:c0:bf:e5:83:f5:54:5a:3d:8b:4a:32:3b:9b:
85:b4:81:36:3e:58:88:84:41:ac:25:40:0a:e4:41:
17:f8:bf:f7:e4:83:1e:05:2d:c1:d8:90:0e:dc:79:
6a:f4:9c:86:73:68:40:0d:54:aa:1c:14:60:2e:74:
db:a6:63:eb:9d:ba:77:13:7a:04:c0:b6:49:52:fb:
d5:9c:7a:8b:33:a4:9d:17:82:b0:df:47:9e:a0:0c:
94:6b:0a:19:de:ca:17:77:6c:5f:46:fd:74:0c:8d:
3f:36:c3:6d:1a:ee:2e:25:f2:13:68:1f:a5:ec:82:
d8:ce:35:ee:ab:36:c5:4d:ab:ee:bc:d7:d9:1f:07:
66:12:30:1d:19:49:9e:b7:fc:a0:ab:85:76:01:29:
76:0c:96:f0:af:0c:07:02:1b:23:1b:2f:60:f9:63:
d3:aa:58:75:48:4f:24:d6:b5:47:e4:44:62:87:df:
2f:50:72:ce:be:fd:17:1d:11:b1:c1:7d:3a:1f:39:
d4:61:d5:d0:54:04:4a:1f:9b:7b:ff:34:fa:c7:2c:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BB:6F:5F:AF:AD:B5:B8:7F:49:0D:E0:F2:7E:A7:0A:8E:D3:FB:06
X509v3 Authority Key Identifier:
keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:22:f8:f8:44:af:2b:6f:93:f3:25:a3:4d:5a:19:b3:e2:f7:
ff:a6:96:d1:58:7d:23:12:d1:94:3c:42:5c:e3:33:8a:02:7e:
5f:28:a9:0a:07:bd:6b:d1:ca:5f:f8:57:9c:37:eb:3a:c9:0f:
d8:95:e4:1a:1c:fc:bc:86:65:8a:43:bf:80:9a:57:96:7d:6e:
31:ef:ac:07:4b:3f:bf:93:95:de:40:b2:1f:3f:46:3c:43:f5:
26:48:b5:4f:0f:25:67:26:ac:41:7a:98:42:f7:6a:07:ad:22:
85:38:81:33:f5:a6:b9:e7:41:0f:42:cf:b7:4a:d2:12:27:d9:
2e:4f:61:fc:42:5d:2f:94:81:b5:44:aa:ae:75:b7:d2:a0:eb:
3d:ea:2e:1b:d0:e0:32:1f:0c:8b:30:63:f6:72:47:2a:e3:64:
8c:2a:0c:6e:5c:9d:bd:c9:b7:96:78:1a:8e:23:5c:3b:1a:b6:
9d:0b:77:77:bc:8f:3c:ac:61:47:3f:59:f0:09:b9:f5:6f:04:
34:8d:72:a5:53:3e:fd:83:a1:e1:d4:3a:35:7e:86:9b:25:f0:
14:71:74:15:71:51:0e:60:e2:d1:34:fb:84:f7:a6:eb:d7:39:
49:53:d2:27:2a:90:c8:43:ed:09:88:05:d3:95:8b:9d:c4:c8:
70:10:6a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:43:26 2025 by rpki-client