Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
File: xBK7PaZcqrUkhR74bOm6piB04e0.mft (raw, json)
Hash identifier: kWsCcR4219Fw5By4lp1HM8Q+MBKpp/XlB0tQ/INyuYI=
Subject key identifier: 80:15:81:20:01:46:55:88:2F:82:EC:A4:1F:07:16:BB:51:F2:4D:3F
Authority key identifier: C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
Certificate issuer: /CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Certificate serial: 01974B8DCBCE5212D961AB58DAE52D2BCFE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 18:01:13 +0000
Manifest this update: Sat 07 Jun 2025 18:01:13 +0000
Manifest next update: Sun 08 Jun 2025 18:01:13 +0000
Files and hashes: 1: kMIoPYj99g2K5sWXNcD0fsxHkHM.roa (hash: FopABAV6PSptIp6OTBNiTRgtYU723NWq9ChEZhzR3FM=)
2: xBK7PaZcqrUkhR74bOm6piB04e0.crl (hash: E3JTe7IyJwOM/ATl7bgko5HnUEwaqdH+jWhPqjuxNgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:cb:ce:52:12:d9:61:ab:58:da:e5:2d:2b:cf:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Validity
Not Before: Jun 7 18:01:13 2025 GMT
Not After : Jun 8 18:01:13 2025 GMT
Subject: CN=80158120014655882f82eca41f0716bb51f24d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:48:b2:9d:83:2e:d9:26:ec:0e:da:62:ad:
e3:fa:92:02:31:4d:2b:cc:3b:81:d1:b1:58:59:6e:
f1:8d:c8:09:a1:31:5a:6f:74:5e:73:55:b5:1e:e7:
fb:b6:aa:f7:5a:89:64:c7:74:b3:ac:60:f2:85:17:
de:27:34:35:b7:45:22:c4:a7:71:5f:80:07:1c:0b:
ed:a1:d4:9f:26:8f:8d:13:ad:51:ee:f0:62:0e:3b:
72:9a:1f:ec:27:fa:2e:36:85:57:74:03:e2:e4:7e:
db:a6:04:b7:fd:8e:b1:22:3e:da:1d:f6:11:5e:5f:
7c:4f:9b:53:f8:2c:80:83:ec:92:e6:f5:35:b2:08:
6f:b5:2c:7d:e7:b0:2d:f1:91:32:f0:f8:ce:d2:02:
46:ea:b2:04:8a:ec:e4:e6:c0:ca:ba:af:a5:84:57:
48:01:09:7c:5c:3f:81:7a:4f:40:e3:77:4c:a1:d6:
c8:44:c2:2a:cc:9b:0f:2a:d3:6b:5a:9c:6e:73:8f:
62:47:4a:c2:d5:a4:65:33:19:c6:78:94:52:f5:d5:
b8:df:ab:19:00:c9:cd:13:1a:35:28:e0:a5:de:da:
47:07:9d:46:5f:c6:09:f7:94:35:a5:0c:b3:c0:fd:
0e:3b:86:b4:33:16:1d:82:0f:32:ba:54:e1:b9:bb:
18:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:15:81:20:01:46:55:88:2F:82:EC:A4:1F:07:16:BB:51:F2:4D:3F
X509v3 Authority Key Identifier:
keyid:C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:24:06:22:19:ee:e5:8c:4a:cb:d7:b3:f8:01:fa:5f:7c:27:
20:f4:e5:d7:cb:69:4d:d0:1b:18:71:6f:c8:37:02:5b:bc:89:
ea:09:d6:2a:9d:11:0d:0d:a6:ca:1e:4c:d7:8f:ef:44:d0:83:
fd:a8:20:ed:bc:a9:77:0e:f3:37:5e:79:c6:50:e7:89:ca:3f:
66:47:87:4d:fe:80:a2:e6:6c:6e:22:74:9a:32:fa:13:21:93:
d9:f6:e7:17:00:e3:b0:63:ca:b5:a4:da:8b:52:ed:ee:31:cd:
0d:c3:b6:95:27:99:10:a9:19:f3:7a:7a:ed:15:7d:a7:d3:86:
02:ce:36:f7:ff:26:ae:b1:3c:87:64:36:4f:1e:d3:b5:35:32:
c2:d9:8b:0a:0d:d4:0b:a6:43:dc:5d:b5:e4:4e:e2:8f:46:2f:
9d:b4:00:0b:ba:0d:48:a9:e3:ab:ac:ec:7b:d3:09:10:a3:63:
e8:26:6d:82:43:8d:5c:85:3a:cb:66:76:10:2c:68:59:83:0f:
da:72:c2:9f:28:f3:ea:df:cf:e8:2f:81:e7:80:52:c2:dc:e4:
ee:9a:09:78:4f:4f:07:c7:8b:dd:c5:23:b4:74:f8:f6:8c:81:
8f:cc:19:73:ad:3b:a5:94:73:3f:68:ba:a0:d1:75:10:35:2e:
81:e9:e9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:20:24 2025 by rpki-client