Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json)
Hash identifier: aUxFOxJt8aSJTptyNSuhtyBSUbzV+rNbxUR1Gu9AfWI=
Subject key identifier: 06:C9:00:FB:F1:E0:3A:6D:E9:5E:48:6B:53:CE:EC:FE:0D:DC:B1:A0
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial: 019849D38C3E06A189E50ADBE1E992179A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
Manifest number: 0651
Signing time: Sun 27 Jul 2025 03:00:57 +0000
Manifest this update: Sun 27 Jul 2025 03:00:57 +0000
Manifest next update: Mon 28 Jul 2025 03:00:57 +0000
Files and hashes: 1: gO1QQzQ8EJSK1sz9QVMIVflw4Is.roa (hash: XHDVuSMRNZ8ZK68EQ/rZiQRsF4JaubC5jLA4NaC8LBM=)
2: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: grVxTojqqxe1PQ8zp0LBHyCB2/RrYzAWdD9hQaJ4hJo=)
3: z5AaUIsCUfsHWnAtqAIr_d8n8do.roa (hash: rmzyF9COLH0iNSyMo0DleMzCkcEN6+9Om4xVkdPkL6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:8c:3e:06:a1:89:e5:0a:db:e1:e9:92:17:9a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Validity
Not Before: Jul 27 03:00:57 2025 GMT
Not After : Jul 28 03:00:57 2025 GMT
Subject: CN=06c900fbf1e03a6de95e486b53ceecfe0ddcb1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:87:c7:d4:01:23:9b:12:39:ea:ec:e5:2a:
bf:39:9d:ea:ae:09:1d:f6:4c:02:03:b2:2c:3e:ff:
ea:dc:7a:2c:71:ff:5e:6c:b2:05:cc:c1:c7:4f:fb:
a0:0d:fc:0f:54:67:2f:88:e7:10:fe:86:c5:b5:89:
ce:f2:d3:58:f7:d4:26:66:5e:ec:18:5e:36:d8:45:
11:a9:5c:e5:94:3a:5d:6e:ea:dc:25:93:27:0f:e9:
f2:e9:65:bb:2c:60:4a:e4:f9:1e:cd:01:c9:bc:37:
7a:fc:61:cb:2d:ae:2a:fd:7c:df:5a:59:2b:1d:c8:
d5:5c:ec:18:81:1b:83:f3:59:2c:50:c6:e1:1d:b5:
a6:e9:3b:63:a6:3b:11:d7:40:da:43:b2:07:93:8d:
4a:7c:18:52:c4:5b:8d:7d:35:e7:2f:78:a8:7f:7b:
9d:e3:7c:9f:63:8d:66:dd:88:58:1e:c6:97:68:85:
5b:92:81:a8:85:f4:a7:ba:a1:30:9c:15:fb:d1:08:
4b:61:4b:33:3e:46:01:fd:9b:62:32:b6:80:5c:1f:
5f:cb:a6:46:7c:6b:17:d6:ac:39:c0:bd:e9:db:1b:
7f:fc:1b:26:4f:e3:54:3c:88:96:bb:9f:87:83:a1:
be:02:08:0b:f1:b4:97:85:67:da:f5:a3:ef:9c:d0:
d7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C9:00:FB:F1:E0:3A:6D:E9:5E:48:6B:53:CE:EC:FE:0D:DC:B1:A0
X509v3 Authority Key Identifier:
keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:22:aa:53:28:73:d4:a9:95:50:77:ab:d9:3d:a4:6e:8b:9d:
b2:2d:f8:b7:3c:1e:e7:cd:1a:93:c2:27:d5:34:54:bc:80:35:
98:fd:27:54:7b:f7:84:1f:ec:b4:3c:bd:15:cc:f2:6d:0c:09:
99:ba:2e:b5:28:d1:d0:f6:f5:98:c1:61:ac:4a:f2:a1:0b:90:
6f:cd:5b:9f:50:bf:80:6d:53:bb:d1:27:2f:7d:12:4c:35:cf:
97:97:76:f3:ca:ba:76:b7:03:73:03:e1:19:99:63:8f:70:c0:
ab:8d:a6:fb:c5:1c:69:58:8b:cd:5f:b9:67:a3:19:0b:7a:71:
2d:bb:b8:9e:ba:3e:83:6a:51:c4:d7:6a:24:d5:08:b3:b0:16:
c6:8f:5a:f9:ca:3c:ce:5b:66:c5:f8:30:65:b5:77:91:9a:46:
0b:cf:5a:45:1c:c9:82:b7:d2:c2:7e:db:34:1d:03:93:e7:97:
03:df:ec:ba:d0:bb:66:57:65:c3:89:84:90:f3:0e:65:fc:5f:
c5:8d:75:40:64:e8:5c:4e:05:e8:c5:73:f5:19:a1:0a:0e:e0:
4a:62:32:ef:58:c5:65:22:bb:a2:a1:fa:90:84:2b:a1:0a:d7:
c6:4a:1e:19:a0:4a:3e:47:05:93:da:d0:22:b7:a5:73:86:56:
11:9a:8c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:38:31 2025 by rpki-client