Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
File: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft (raw, json)
Hash identifier: hXp10l8lEGLbWOUgf5Mqahc5ff7Ol3TrsDrsU/G1Dgw=
Subject key identifier: 30:9C:A6:67:A7:C4:CC:B2:42:00:CC:00:47:62:7E:5E:6A:39:6E:0E
Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
Certificate issuer: /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Certificate serial: 01984AAEE1E8A6E92ABC097EAFDCB0450B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
Manifest number: 0C01
Signing time: Sun 27 Jul 2025 07:00:31 +0000
Manifest this update: Sun 27 Jul 2025 07:00:31 +0000
Manifest next update: Mon 28 Jul 2025 07:00:31 +0000
Files and hashes: 1: oEWWV1wTRtv4TPDh8KnSbxqUMOo.roa (hash: dy83XA1VuxS8pj9IoqOTnoyqLeOEntH2NHWNFfMk+x4=)
2: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl (hash: JCoBhW4TJb6QfcsLO4Lw6rSoXtuMJaKOjRk9pT4pKKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:e1:e8:a6:e9:2a:bc:09:7e:af:dc:b0:45:0b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Validity
Not Before: Jul 27 07:00:31 2025 GMT
Not After : Jul 28 07:00:31 2025 GMT
Subject: CN=309ca667a7c4ccb24200cc0047627e5e6a396e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:15:41:3c:59:df:40:a7:8d:ef:47:2d:58:18:
71:38:6c:3c:9c:93:68:a0:88:82:dd:fa:5a:4d:ab:
a3:31:74:7e:0d:d7:08:b8:d6:20:2d:04:fa:84:1b:
25:90:d5:8c:69:45:b9:81:f3:ea:26:9a:ea:03:e0:
58:b2:e5:cf:7b:0b:37:93:be:e2:cd:93:1a:49:37:
d5:90:86:41:c8:ce:23:65:d2:58:4c:44:21:e6:07:
57:40:e3:48:23:b6:ab:e1:a4:a2:07:8c:a1:53:72:
54:dc:d4:6f:d3:ed:9a:a6:ad:0a:62:92:c9:ad:55:
b8:8a:16:20:86:c8:6d:25:51:bc:e6:18:7f:09:3c:
66:5c:3a:f1:78:c8:11:bc:6b:37:02:ae:0e:4f:e5:
0d:b9:e1:da:6f:bd:ad:71:c9:c2:6a:96:e3:c1:54:
6a:fa:ea:05:cd:48:4b:32:35:a3:4b:a8:56:f8:5b:
9a:c3:93:bc:78:69:50:09:85:b0:12:c6:58:c8:40:
62:24:ee:9d:29:39:d5:9e:09:ef:69:df:c5:6f:43:
6b:53:42:92:b1:b1:a0:8c:12:ec:5d:f8:f4:d3:fd:
a3:77:42:25:b7:9b:13:89:f6:90:02:1b:5a:de:65:
6a:3a:95:ce:1b:c6:06:02:4f:f6:9d:b9:e5:c9:70:
07:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9C:A6:67:A7:C4:CC:B2:42:00:CC:00:47:62:7E:5E:6A:39:6E:0E
X509v3 Authority Key Identifier:
keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:69:f9:58:b3:56:b3:fb:8a:0c:98:5d:33:57:37:4b:14:02:
85:b3:98:25:a5:40:92:b3:d6:af:ae:73:17:27:79:35:cd:f2:
72:e1:8c:1d:8c:14:8b:d6:da:ba:1d:fd:b4:5c:1c:cb:22:51:
08:87:b8:6e:f7:c4:09:51:25:10:cd:63:25:d8:09:f0:b4:a0:
61:9c:bc:fb:95:a4:ae:39:5f:2f:53:f2:6e:fb:72:29:9e:96:
ca:53:a0:bd:56:5f:90:b0:b9:4d:14:6b:d1:21:af:c7:a0:c2:
01:50:a0:6d:49:e8:07:ba:85:65:2b:24:18:43:75:df:a5:e0:
9f:a2:bf:1d:b6:f9:14:e9:77:7a:01:ac:c5:42:2d:82:16:c3:
fb:3c:84:08:0f:86:56:9e:56:2d:be:8e:1e:73:9c:63:f4:83:
3f:58:c4:19:cb:03:32:f4:cc:36:2d:fc:52:0c:13:a8:5a:bd:
77:8f:36:eb:ac:df:99:13:e2:ff:f3:99:24:c2:d8:a2:64:90:
c4:76:bf:bf:aa:4b:3c:3a:2a:6e:8b:4d:08:7b:1e:f9:64:b1:
7c:1b:2d:2e:6f:0a:fc:17:f7:ea:09:71:c3:97:da:ff:b5:fe:
8c:9f:4a:5b:a5:4a:3a:c6:f5:b2:8d:3b:16:7a:3b:b9:19:14:
1d:f4:c3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:36:45 2025 by rpki-client