Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
File: fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft (raw, json)
Hash identifier: IZD1GUYucr5Lafe6aiUeBRWK4gms17auwZWtQoSCFws=
Subject key identifier: 22:2A:D5:16:FB:1B:92:1C:8D:97:6E:C3:07:1E:1B:17:72:71:6F:DE
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 01975610AF20F0053F504DCFA11E3B08AC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
Manifest number: 1341
Signing time: Mon 09 Jun 2025 19:00:23 +0000
Manifest this update: Mon 09 Jun 2025 19:00:23 +0000
Manifest next update: Tue 10 Jun 2025 19:00:23 +0000
Files and hashes: 1: Qmn6qMcsYc4tSMLHc4aOlKWHzLY.roa (hash: Z49F7eb8HQunLu54eXsnAFNRgDwdiL3VgHCYWpkpRJk=)
2: fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl (hash: mih8hUGta2Ro12Ho0JO+KZomngrUL5yD0PVeFOwiW6A=)
3: mwGFMLP8urixZJ9W1x_56ovfS3g.roa (hash: FFppZXO5afH6JgZ/GAUgkUjtbJbJsW6ZdAq5a1dyQoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:10:af:20:f0:05:3f:50:4d:cf:a1:1e:3b:08:ac:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Jun 9 19:00:23 2025 GMT
Not After : Jun 10 19:00:23 2025 GMT
Subject: CN=222ad516fb1b921c8d976ec3071e1b1772716fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:90:21:8b:ad:53:aa:86:07:1e:7e:52:00:
a6:16:bc:80:1f:da:30:bd:4e:b8:76:d6:25:9b:9d:
32:1a:61:d0:05:c3:82:fb:e2:95:97:97:84:ca:aa:
04:e5:dd:81:46:09:7e:ba:68:fa:7e:c1:db:ee:46:
e4:0c:47:ad:f9:b5:9d:72:3d:5b:8a:43:76:48:51:
dc:f0:db:2c:7c:dc:83:e9:ae:53:26:d7:bc:06:1f:
e4:fd:ce:06:6b:96:a6:b6:83:b1:f2:a2:6e:8e:89:
99:90:ec:ba:05:1a:25:33:8c:14:40:3e:58:31:e7:
1f:bf:f6:7c:23:2c:4f:76:c5:c3:e5:f4:40:8c:a0:
0e:96:9b:aa:cc:5d:fe:cf:07:8f:b6:78:0d:1c:7b:
69:87:7b:62:21:38:1c:60:31:d2:82:74:75:fe:20:
22:f7:dd:e9:b0:b0:45:92:8c:b3:18:1f:b8:43:12:
a6:c2:60:a8:ba:ab:ae:d0:66:08:fe:d0:c1:c6:15:
7a:f7:35:9e:f6:c3:19:bc:65:d1:58:16:45:98:10:
9d:c2:a7:85:ba:81:8f:03:c7:8b:8c:43:c6:e4:ff:
1f:71:09:6b:b5:75:de:bc:d2:e6:bb:41:15:a6:85:
f0:9f:31:6c:ac:f8:38:7a:32:39:df:17:66:76:2c:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2A:D5:16:FB:1B:92:1C:8D:97:6E:C3:07:1E:1B:17:72:71:6F:DE
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d8:75:82:39:be:85:4e:b6:b0:7f:c3:9f:f1:fb:9c:ed:35:
fe:e6:27:25:d3:ff:df:67:3c:e4:6c:4b:a6:e4:61:d4:4d:82:
99:50:76:57:86:10:53:25:c4:0c:f5:72:68:5e:df:c5:ed:33:
fb:55:6b:e7:e8:f6:4d:da:5d:24:9f:31:e0:09:2e:fd:49:5a:
7b:17:5e:f6:02:c6:9d:9c:bb:29:3b:1a:3a:60:b3:e8:2f:be:
0f:b6:a4:82:fd:95:30:81:6f:76:cc:6b:a0:10:a2:4c:41:c6:
81:63:23:24:66:c4:e8:1b:10:02:df:eb:a1:72:49:36:bc:a7:
ca:81:32:da:20:34:32:ed:70:f3:ca:5e:4d:ab:56:8f:8d:b3:
4b:d7:dd:72:71:c6:32:41:46:0d:99:8b:60:42:f3:85:05:c6:
2b:63:1f:b4:50:86:ac:22:53:a9:ab:c5:c2:09:62:96:cb:56:
e7:55:ce:36:02:f3:92:60:e5:12:06:30:83:0d:c9:a3:1d:18:
10:15:7b:f8:ff:f1:c4:1a:ad:88:f2:e2:7a:6d:27:38:d3:7b:
91:e4:a2:06:11:fe:bb:58:67:bc:4b:bd:95:e8:83:73:ac:41:
d9:bb:53:18:0e:7d:e5:7b:e1:fd:18:97:72:36:ca:d8:a7:c7:
1d:6e:fe:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:40:55 2025 by rpki-client