Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
File: fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft (raw, json)
Hash identifier: LyBM1k/XCZG9ZS/UvPPUWgCV+4dHUQv443Tqbe/B1/I=
Subject key identifier: 49:B9:83:8D:24:26:9D:77:E7:DC:BA:18:43:8C:4E:4C:39:3A:7C:53
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 01975BDCF74C81AEB85D2D8651E3B5C3CBB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
Manifest number: 1344
Signing time: Tue 10 Jun 2025 22:01:37 +0000
Manifest this update: Tue 10 Jun 2025 22:01:37 +0000
Manifest next update: Wed 11 Jun 2025 22:01:37 +0000
Files and hashes: 1: Qmn6qMcsYc4tSMLHc4aOlKWHzLY.roa (hash: Z49F7eb8HQunLu54eXsnAFNRgDwdiL3VgHCYWpkpRJk=)
2: fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl (hash: b+a5jl2hNVFMKr5DNI3iBcfPnxbShlXSikz9j0r9rCM=)
3: mwGFMLP8urixZJ9W1x_56ovfS3g.roa (hash: FFppZXO5afH6JgZ/GAUgkUjtbJbJsW6ZdAq5a1dyQoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:f7:4c:81:ae:b8:5d:2d:86:51:e3:b5:c3:cb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Jun 10 22:01:37 2025 GMT
Not After : Jun 11 22:01:37 2025 GMT
Subject: CN=49b9838d24269d77e7dcba18438c4e4c393a7c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:b7:53:81:81:92:6a:9f:84:85:fc:5e:25:
dc:d5:e4:46:c1:1b:9c:3d:bc:ab:45:77:cb:0f:f9:
d3:6c:06:87:c7:cb:b9:b3:24:a8:6a:04:2f:f8:ed:
30:d8:09:e4:d3:16:1b:4c:52:8c:c7:8a:41:c0:0d:
62:e8:8e:b1:94:9c:58:16:f7:a5:ab:6c:b9:6c:d1:
cf:5d:1a:c4:d5:17:0f:4a:1a:26:03:d6:43:cf:d1:
e8:64:60:98:03:c4:a3:d4:9c:0f:a9:00:44:38:4c:
0e:f6:92:8c:97:1c:ba:70:c4:5a:11:b5:62:02:99:
6f:35:f3:c1:06:8b:0d:37:d8:6e:1f:50:fd:8a:05:
91:1c:42:4d:01:20:0b:86:73:0b:c1:28:02:33:74:
2b:25:74:64:15:fa:09:43:9b:ea:cd:f2:73:59:33:
a4:21:75:48:25:9c:83:cb:96:e6:01:fc:f8:cd:b0:
4d:3c:ba:1d:ae:13:42:29:71:c9:8d:76:ce:c6:6f:
b5:fd:56:95:4e:b2:8d:4f:37:0d:22:6c:51:b7:ec:
60:09:e4:94:f9:0e:17:45:1e:1a:a8:62:39:35:bd:
19:5c:f4:79:52:92:1c:c8:65:27:ec:a7:9d:3f:dc:
6c:a3:98:ac:47:2b:d9:50:a6:a6:dc:94:2f:3b:9e:
5c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B9:83:8D:24:26:9D:77:E7:DC:BA:18:43:8C:4E:4C:39:3A:7C:53
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ba:07:9f:c5:4c:3e:89:48:ac:d2:13:a1:e0:08:4c:94:b1:
0f:30:9b:b7:18:fa:e7:70:f4:8c:15:cf:8e:a1:01:42:5b:89:
14:20:03:c2:c1:cd:86:d6:dc:9f:28:89:f0:b0:5d:c9:bc:16:
d0:7d:19:ce:95:37:5c:0e:fd:f6:fe:f9:e0:0e:c4:88:59:f2:
e7:d1:b5:06:a9:e0:77:e9:e0:4b:0a:e4:03:6c:70:64:b5:4e:
2b:ac:ec:2a:3c:d5:19:db:5b:f6:69:93:0b:18:f2:73:b1:10:
e4:d5:af:74:e4:35:e5:e0:92:93:e7:3b:cb:74:bb:1e:d3:3f:
f9:1e:08:85:b7:5a:8d:f0:29:8f:f7:de:09:70:a7:04:69:92:
28:85:28:69:9b:ca:c7:89:36:81:9f:a0:e0:5a:9e:b1:54:6c:
6b:07:a0:76:90:d5:cd:eb:0b:84:cf:d7:44:2d:96:10:51:04:
c4:ba:5a:87:42:9f:5f:0e:b7:ec:a1:b5:6a:fd:97:8b:64:26:
37:23:df:de:dd:e3:44:a1:cf:46:93:34:c4:c2:12:2a:11:f0:
15:f7:6b:59:45:c4:88:8e:ce:43:14:34:e1:4f:38:c3:4d:95:
9e:34:51:d0:87:59:25:23:58:cd:bc:38:08:9d:28:86:de:0f:
51:7c:2f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:18:21 2025 by rpki-client