Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
File: x2sILxfCC126JFzqbk5unGCZzvc.mft (raw, json)
Hash identifier: xvrL27r/boMJVBClca7KmemHbX+/BtuukxOKFg0KMAU=
Subject key identifier: 9F:F9:0D:DF:21:33:27:CC:37:60:B7:08:92:FB:35:DF:44:E3:2B:E8
Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
Certificate issuer: /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Certificate serial: 01974D448FE4685625D6126B1096AFC4D1D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
Manifest number: 085B
Signing time: Sun 08 Jun 2025 02:00:28 +0000
Manifest this update: Sun 08 Jun 2025 02:00:28 +0000
Manifest next update: Mon 09 Jun 2025 02:00:28 +0000
Files and hashes: 1: 3LcFCg7RM1aLPbE3Ib_6QCxrJwE.roa (hash: FJ26OKzgHHeltXGq/dly/S1GCLExUrR4LooVCROsPhY=)
2: x2sILxfCC126JFzqbk5unGCZzvc.crl (hash: d6+90mlmnx2j/G85a3aTYkAzdpdjvRSdOCAUbY9c5Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:8f:e4:68:56:25:d6:12:6b:10:96:af:c4:d1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Validity
Not Before: Jun 8 02:00:28 2025 GMT
Not After : Jun 9 02:00:28 2025 GMT
Subject: CN=9ff90ddf213327cc3760b70892fb35df44e32be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ff:c6:e4:36:8c:a6:29:8f:14:48:e5:4e:f7:
ed:f4:68:ac:97:1a:9d:6f:1a:d5:f8:5f:07:5b:98:
a7:c7:73:f1:21:ec:5a:6f:f8:8c:13:2a:d7:53:b9:
40:62:b3:06:3c:75:db:55:ff:1c:f7:c2:d9:c5:eb:
5c:b9:f2:6c:63:09:fa:bd:c8:3e:45:09:70:18:50:
f8:06:be:18:51:00:e0:97:0a:ce:49:b4:6e:50:83:
6e:95:bc:13:ec:04:c0:75:28:29:73:a9:11:30:c5:
24:32:33:99:03:bd:a0:d7:eb:41:7e:1b:2f:60:b0:
f5:45:09:c6:18:a5:c6:03:74:0c:e1:2a:8f:7c:e9:
2a:66:19:46:2b:57:86:53:fd:4d:a1:a9:b2:08:80:
e2:52:94:4c:86:f8:fd:1f:74:c3:02:32:54:ec:82:
13:fe:6e:47:49:42:ee:e0:60:f1:52:fe:fd:3f:dc:
5d:86:7c:89:a9:9b:59:29:b3:b0:ca:c8:a9:e1:86:
20:55:c5:61:6e:ec:cf:a3:46:a0:b7:c5:30:c2:0c:
d2:bd:44:1d:e0:b4:de:db:7c:a6:7a:b8:14:e0:72:
bf:81:fd:04:65:a0:ee:ca:da:d9:dd:a9:ca:66:86:
37:ef:93:03:20:7c:d4:87:a0:09:e7:53:4c:a3:31:
b8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F9:0D:DF:21:33:27:CC:37:60:B7:08:92:FB:35:DF:44:E3:2B:E8
X509v3 Authority Key Identifier:
keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6c:44:fe:1e:6c:a8:20:5d:b0:a2:ad:bd:5a:e4:32:70:98:
69:84:2e:3c:9a:95:46:21:90:cb:90:98:28:a6:63:2b:8c:da:
6e:66:d0:8c:13:4a:e1:95:85:17:22:a4:0c:1c:a5:7a:19:2e:
e1:eb:60:63:a9:c1:d0:24:d3:88:40:3c:3f:57:72:9b:d0:4e:
bd:50:24:4a:8d:a8:c6:fd:b2:73:8b:7a:9b:a4:cd:51:0e:3a:
95:bb:2a:00:70:d1:c4:64:bf:f6:e3:69:ca:17:53:0b:3c:0a:
ff:a1:b4:91:22:15:7d:f8:1c:83:b3:82:94:33:e1:01:1c:1d:
5d:5e:03:8b:be:d9:0a:aa:f2:59:48:d5:8e:9f:e6:f0:1a:a7:
f1:c3:4c:6e:96:9d:ce:af:12:c3:84:0e:52:f2:58:cd:92:9f:
b9:a0:10:da:80:9e:b8:b1:1c:fc:b7:54:a9:3e:a5:ae:40:a0:
45:ed:df:52:41:3c:4f:1e:28:d6:9c:7b:12:44:1a:10:d4:02:
01:61:59:8a:89:97:bc:b2:76:26:c4:db:ac:05:e7:33:a7:77:
0f:dc:77:b0:0a:fd:04:59:db:6d:e0:3b:7a:30:b0:68:32:3a:
7d:ea:24:f2:45:5b:e7:e3:1c:e4:3c:93:2f:a6:86:7e:6b:a3:
91:1b:df:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:28:08 2025 by rpki-client