Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File: rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier: 1ZfMKpbWJ3bAPLis2cASU8t0SdzHvjuEGD7qjm6gvss=
Subject key identifier: AA:29:E6:FE:DA:D7:95:EB:FE:2D:2E:38:50:98:7A:C7:C9:CC:55:2A
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial: 01974D44B4CFE785EE85719EAC7AA17DA41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number: 10BE
Signing time: Sun 08 Jun 2025 02:00:37 +0000
Manifest this update: Sun 08 Jun 2025 02:00:37 +0000
Manifest next update: Mon 09 Jun 2025 02:00:37 +0000
Files and hashes: 1: GLfBevz3wo4dWS7xfj6ER67qM3I.roa (hash: q4r6hj69iY9YNJGXRxob1aI8UDhv8Z84d+2MRw6HY98=)
2: dwfEfRg8877Atw4vgQddrhHW_dc.roa (hash: SdtTc5eD1TxuTF/mYnxmN25vPFVewXwZEmOu76MAXN0=)
3: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: x/ly5xZ4aq/yEekyaLhLalMRKn4jrYUfh2ANMANmd1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:b4:cf:e7:85:ee:85:71:9e:ac:7a:a1:7d:a4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
Validity
Not Before: Jun 8 02:00:37 2025 GMT
Not After : Jun 9 02:00:37 2025 GMT
Subject: CN=aa29e6fedad795ebfe2d2e3850987ac7c9cc552a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:af:3f:90:17:76:40:13:ce:9a:59:fb:3f:
b6:b3:d3:0e:55:28:dd:02:ad:23:15:08:12:66:2d:
c1:1f:fd:f6:f0:7e:f1:7b:38:74:91:5b:f8:3a:8d:
be:83:89:e5:ab:c0:28:fa:a6:21:b5:dc:78:97:e5:
8b:9d:b0:f4:f3:dc:18:0c:36:83:26:41:e2:74:d6:
f2:47:93:8c:3c:79:1e:d9:b1:a4:89:6d:10:04:c1:
e0:a3:a2:f0:d0:5b:fa:fb:22:18:3a:72:a4:52:66:
e0:b2:88:43:e7:68:52:5f:ee:88:95:fd:f4:a4:e1:
23:5b:00:f3:7b:0e:1f:05:8d:51:50:5b:3b:90:77:
7c:d1:56:61:18:c3:98:e9:be:45:b8:98:1a:d4:87:
11:93:5a:05:44:53:96:f5:52:68:23:5d:0c:4f:c8:
d7:cb:35:98:e1:a7:9e:3d:49:91:8d:74:12:71:98:
5d:0d:6c:d2:da:be:90:17:a0:02:3a:46:b0:26:a4:
39:dc:a9:05:db:a9:aa:39:dc:8d:87:fc:de:4a:12:
d8:c2:f7:f4:0a:66:53:a6:90:a1:1a:b3:d6:50:6b:
6d:17:10:b4:e0:1b:cf:bf:ee:04:68:dc:60:23:d8:
80:fa:ce:f2:78:01:48:b1:0e:17:6e:8d:82:56:9b:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:29:E6:FE:DA:D7:95:EB:FE:2D:2E:38:50:98:7A:C7:C9:CC:55:2A
X509v3 Authority Key Identifier:
keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3d:29:9a:a3:f5:29:55:b6:5a:95:34:1f:20:90:82:9c:10:
13:87:3f:50:48:d9:b3:00:be:90:8f:f5:65:30:fe:18:5d:f4:
e4:95:7b:e5:5a:6d:60:d1:9c:c5:3b:c2:b3:60:f0:cd:de:cc:
a6:38:d5:39:f4:4d:bb:61:e8:6e:39:47:63:49:85:21:53:e4:
fc:8a:40:74:94:8f:eb:a9:aa:9b:f2:b9:e5:ae:4d:98:5b:1f:
21:3c:bf:f6:41:0b:e3:53:bc:89:81:f0:66:d1:b1:b8:77:eb:
3a:20:02:4b:4e:70:de:36:12:3a:dd:90:fa:59:7a:88:77:03:
53:e3:4f:8c:9b:51:54:fa:91:c3:b2:b3:9c:78:9e:b5:b8:33:
ff:49:5f:f3:69:6e:73:16:51:14:5a:98:2e:15:0b:de:ed:dd:
86:15:34:8a:f8:fd:51:8d:a6:60:aa:49:96:59:c9:aa:49:b3:
4c:07:48:76:fe:10:d9:2a:77:dc:20:1f:13:70:84:a5:dc:70:
96:de:4a:d2:d1:19:ad:64:fa:5e:fc:1e:bd:5b:db:c5:d4:64:
3f:fe:fd:ac:cf:fa:c7:20:84:2e:88:ac:fd:0d:85:46:ef:d5:
75:db:c7:75:57:61:fb:42:e6:3e:76:05:0c:92:1d:d9:72:8d:
a4:5c:cb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:14:37 2025 by rpki-client