Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier: Ye9NVOUGq/VefJ83lC+OyNE7ppEOlfCTVi3kdnBcC10=
Subject key identifier: B4:31:F2:9E:E3:5D:B5:B1:45:AE:00:C9:5E:07:E5:85:09:03:61:F3
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 0197499ED75080D62602308B525B4407D346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number: 0A6D
Signing time: Sat 07 Jun 2025 09:00:35 +0000
Manifest this update: Sat 07 Jun 2025 09:00:35 +0000
Manifest next update: Sun 08 Jun 2025 09:00:35 +0000
Files and hashes: 1: J8DHZy4tMi-CFo8AY9DJvx0HWac.roa (hash: 5pNADEij5vtMepG8+Pp6x2k3eZ8RSfQB0arADw8u/hQ=)
2: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: /b3N/43ZClXJo1m5DVRaLEQmAaR/YT15hUzwkGg7ghY=)
3: bm8bVIPNaA-bltdEZPHxvRw4XQU.roa (hash: DdBeXwj6zhT54fs1VrM1Iq2GimR5mvINmSrgTPAY9tY=)
4: fcJb-6V4S8Ggt4XkeQ4z4NeOvBg.roa (hash: Ok0E8qecmwKHIVZlR2uj+ZosbjuqbuM99KMf84z3ECc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:d7:50:80:d6:26:02:30:8b:52:5b:44:07:d3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Jun 7 09:00:35 2025 GMT
Not After : Jun 8 09:00:35 2025 GMT
Subject: CN=b431f29ee35db5b145ae00c95e07e585090361f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bf:19:6f:6f:3b:e2:d6:f7:d8:81:3e:4a:af:
b5:96:7e:98:40:39:a7:9b:b8:92:11:df:40:e5:05:
82:07:e6:fc:36:d9:0a:c1:97:bf:c8:0b:a3:71:b2:
01:9f:31:bc:a7:a2:75:72:75:36:94:a7:9f:4e:d4:
fc:1a:f9:7f:73:d0:a5:a1:7f:44:1c:3c:03:33:09:
5b:de:4f:c6:80:5c:5b:70:c6:07:f2:f7:35:ff:f0:
2e:3c:66:8f:e2:37:a6:02:74:f6:51:0f:23:1c:45:
aa:90:b9:c4:9c:e6:cc:84:66:52:e9:1d:ac:96:8e:
ef:4b:e9:fd:ca:39:42:4a:49:09:0d:e2:3d:43:29:
73:05:9e:ce:63:b9:83:32:6f:e7:93:33:a7:4a:bb:
a7:b8:8a:2c:a2:d9:a5:4d:ea:8a:ec:c6:2b:6a:ab:
ba:a2:b9:0b:35:d0:0b:91:29:37:23:7f:a1:6f:ac:
93:bc:02:dd:63:08:b6:e8:69:0e:30:ee:3b:1c:cc:
54:a4:19:fe:76:85:85:ed:87:a1:24:a7:b0:b1:f8:
07:8e:49:f9:7e:5b:f7:b7:5d:a5:7f:14:57:9a:f7:
a6:b5:b1:64:94:40:b0:f7:1b:01:88:b7:cb:ce:8c:
3c:df:ee:b4:8b:b7:a3:e8:e7:e9:f3:30:b7:45:d3:
b0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:31:F2:9E:E3:5D:B5:B1:45:AE:00:C9:5E:07:E5:85:09:03:61:F3
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:7d:38:3c:04:bb:01:a2:ce:a6:1d:7d:93:68:de:93:da:91:
67:e6:85:2c:d5:1b:45:39:be:b5:f5:fd:b4:6f:b2:37:ae:e1:
59:29:f5:0a:8f:54:c8:d2:46:91:05:48:32:00:51:9c:4b:61:
7b:e6:19:39:2a:d5:df:bd:70:44:6c:cb:ef:be:80:66:a6:90:
b3:47:f2:c6:bb:c0:6e:a8:7b:1e:e6:4c:19:a2:81:12:f4:0f:
37:5e:1d:14:0e:f7:27:4e:bd:5b:cc:0f:89:e8:69:a9:1f:0f:
c5:3d:90:21:97:54:09:60:67:1b:c8:87:ea:3e:41:14:1e:f3:
83:05:76:d9:1f:29:de:d7:f1:1c:19:0d:ff:8e:34:31:67:ee:
ed:08:c7:ac:95:0c:66:07:5f:a2:28:8e:f1:96:34:bd:2e:fc:
b3:a7:f3:2a:48:da:02:70:af:98:64:42:04:5b:9a:9f:cb:7a:
73:db:d9:cc:62:c1:97:2b:97:4e:82:1f:a7:46:d6:0a:31:44:
b3:b2:96:c2:82:b3:33:fb:32:b8:23:6a:61:55:8a:e1:21:0e:
e9:98:b7:4c:cd:d9:ed:7e:35:aa:7d:4d:fd:80:ab:06:39:ea:
7a:4d:e8:1a:49:b6:a5:ee:b5:09:a4:d2:e0:93:01:ea:c8:b5:
8d:71:06:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:49:48 2025 by rpki-client