Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
File: xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json)
Hash identifier: vclXSOXnUrh6wtA89r8f3jSDDKH4YSNIjKY8IBQUUyA=
Subject key identifier: B2:49:B5:7B:06:CE:F2:B6:5B:FE:4F:E7:2D:D8:C4:86:BC:78:E3:80
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 01974779978146C2870A4DBC1E39B5F68343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 23:00:40 +0000
Manifest this update: Fri 06 Jun 2025 23:00:40 +0000
Manifest next update: Sat 07 Jun 2025 23:00:40 +0000
Files and hashes: 1: Wmc5yYVaGJ7uHE24vbc7tW45DOM.roa (hash: eqf1mvXxL8vo0q3xITeHe/8//1Yj7TaFakzQyNyDmc8=)
2: ijYRlmNl6uA744Qux7JZwJCActg.roa (hash: pRc6ysDWq8mR6b4C/2Dfn02VAUo5UWjYvCBDj+PrKhE=)
3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: mhevB1Gi6MbsZUUbQgg3PrWKf3h3chpO+9CISDcdTZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:97:81:46:c2:87:0a:4d:bc:1e:39:b5:f6:83:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: Jun 6 23:00:40 2025 GMT
Not After : Jun 7 23:00:40 2025 GMT
Subject: CN=b249b57b06cef2b65bfe4fe72dd8c486bc78e380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:8a:c7:10:ec:8b:bb:58:66:6e:7c:06:4b:
3f:e8:fd:83:96:08:b2:08:ce:fe:3e:b3:03:40:58:
f3:93:e4:b9:a5:ca:0b:de:95:56:28:b6:9d:23:48:
f3:35:db:da:a0:76:18:e9:3a:71:64:86:46:79:a0:
91:89:e9:72:97:67:e4:ea:69:ab:ef:94:5a:bb:5a:
c3:0c:97:3a:ea:39:6d:89:e1:6f:77:7d:15:1d:20:
42:53:7f:d0:79:d9:13:b6:79:e0:1b:25:87:c7:91:
c6:b7:14:a2:c3:26:39:66:d1:46:44:66:40:6f:a4:
e3:c6:ad:4d:1a:48:79:d6:c0:a4:be:cb:ba:79:52:
8e:8c:f6:d9:3f:41:b4:81:fe:13:b4:ed:c7:1b:3f:
0e:9b:ad:a3:7f:3d:33:a2:92:1d:8e:13:e6:ca:94:
5e:13:b2:4c:c7:50:77:d3:d5:11:45:30:da:98:71:
42:46:17:0b:a4:f8:f2:d6:dd:4c:bf:f3:79:2f:1a:
b4:28:9f:46:b6:51:8b:15:58:7a:0d:02:cd:3e:91:
63:b2:0f:f7:f3:de:f0:70:2a:db:f4:7d:71:cb:56:
b1:79:be:f9:d8:e2:87:f8:20:67:34:69:49:ba:44:
59:73:42:cf:94:ae:cd:b1:8f:98:fe:ce:c2:d1:76:
3b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:49:B5:7B:06:CE:F2:B6:5B:FE:4F:E7:2D:D8:C4:86:BC:78:E3:80
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ad:48:2d:b3:ac:f9:8e:67:a7:c4:86:81:06:18:33:c7:d2:
2d:79:18:f0:64:1d:7c:20:05:e7:10:02:c2:27:a4:46:1e:16:
61:ea:d7:c9:a1:36:c5:5e:a2:08:58:bd:06:8d:af:f7:14:53:
23:48:bd:f7:01:84:c5:d2:89:90:74:b3:9b:fc:c4:c1:42:30:
89:3f:ba:f5:c2:20:2a:66:6d:f0:4f:e4:a2:66:18:2b:d0:66:
d0:39:ab:ff:21:3b:c2:6a:d9:43:82:fe:eb:3c:87:17:76:b3:
96:49:57:02:8b:14:5b:16:fd:f5:0e:e1:a0:46:ff:9e:d9:7d:
a0:ff:bd:8d:37:d0:2e:e5:11:65:7d:48:13:de:53:79:5e:06:
9b:aa:1e:34:9b:ed:6c:bd:18:53:0e:73:03:db:5e:18:8b:e0:
ad:50:9d:42:86:6b:89:f1:8a:12:ee:d0:36:fe:89:0f:0a:9e:
3f:21:e9:c8:e1:ca:1c:58:59:48:3b:9f:48:e1:a4:6f:52:dd:
58:a4:20:4c:cb:04:fc:10:18:7c:b4:49:ab:39:e1:8e:4a:de:
ab:cd:f3:2b:df:a5:d0:d0:e9:da:8d:96:33:62:80:ae:f1:ef:
cf:7a:12:42:c0:b8:4a:3e:04:01:ed:74:29:7e:ce:3a:cc:f1:
58:60:76:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:02:34 2025 by rpki-client