Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
File: xEGuJhLSUnFnyD96_Bb15nTYiw8.mft (raw, json)
Hash identifier: JcoZ7uJCHI4c+nFC0nf6/mrbVh9gRm1whRWlODR+f9Q=
Subject key identifier: A7:91:03:86:41:B0:1E:09:8D:9E:C9:E6:77:04:90:33:15:11:3B:B2
Authority key identifier: C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
Certificate issuer: /CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
Certificate serial: 01974968698F0CB9BAF54A541117C533CA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 08:01:08 +0000
Manifest this update: Sat 07 Jun 2025 08:01:08 +0000
Manifest next update: Sun 08 Jun 2025 08:01:08 +0000
Files and hashes: 1: Z27odeAw_NXJehyB-fy3FNRc6to.roa (hash: AQOZKpMALx7C9oCtz366eVXQquGIlXipPb9ncWEUe5g=)
2: xEGuJhLSUnFnyD96_Bb15nTYiw8.crl (hash: XHILQVxc4HqRQVX48oaVDjoVFCnQTLu8V4X5Y+H+25M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:69:8f:0c:b9:ba:f5:4a:54:11:17:c5:33:ca:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
Validity
Not Before: Jun 7 08:01:08 2025 GMT
Not After : Jun 8 08:01:08 2025 GMT
Subject: CN=a791038641b01e098d9ec9e67704903315113bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:c6:d1:09:10:f0:16:55:6e:e3:2f:ef:86:
1b:c5:cb:6e:a2:58:c5:a4:83:40:df:fb:4c:e2:b1:
9c:c5:07:a5:f2:59:b4:c2:01:2b:f4:27:6c:2d:17:
6d:9d:ae:54:28:66:31:80:3d:44:43:15:a0:fb:50:
5d:43:f5:4b:2f:40:57:88:09:9c:7b:e2:41:2e:65:
15:6e:f5:4e:eb:29:26:1f:36:96:6f:b6:16:6f:f4:
95:16:02:80:f8:e8:c5:7d:92:2b:f7:1b:7a:08:fb:
21:81:cc:04:6f:be:9b:bc:9e:d5:b5:a9:01:0d:59:
1f:10:5e:54:a1:73:a6:b7:90:08:31:e3:f2:27:42:
af:6f:9d:1c:69:2f:5e:55:b6:48:14:4e:99:a2:35:
2e:3b:9e:67:7e:3c:88:ed:12:35:db:c6:e3:43:f5:
29:61:7f:ca:95:53:b2:ae:f5:5d:f0:98:3f:26:54:
a8:d8:f5:4e:cf:74:da:02:75:ee:7a:95:6f:ec:04:
d8:dd:69:26:e7:6a:f7:e8:44:18:e0:0b:7b:8d:bc:
a1:db:83:fc:ed:a3:96:0b:0d:7c:1c:20:e6:eb:32:
9b:96:e3:9a:c7:0d:a3:6c:17:09:f1:40:da:0e:fa:
8c:bd:0e:39:2d:07:bc:ea:34:f7:3a:bd:7c:4a:ee:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:91:03:86:41:B0:1E:09:8D:9E:C9:E6:77:04:90:33:15:11:3B:B2
X509v3 Authority Key Identifier:
keyid:C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b4:d5:94:e0:61:8d:68:cc:e9:c6:a2:6e:4b:6d:d8:43:1d:
de:14:8e:18:1c:a7:fd:30:fb:0f:89:2c:7c:d2:32:63:6c:25:
62:6b:ec:c3:69:ac:5a:f4:d6:05:28:b8:29:05:68:96:37:39:
1e:cd:a0:13:0a:80:ab:6a:4b:b2:d5:d2:04:f4:fd:d9:ea:69:
dd:2a:ba:14:f1:81:83:72:96:1f:50:8d:b0:9f:07:ab:f4:ff:
64:e0:41:c2:2c:12:20:e0:23:a0:e7:d3:38:76:6e:95:57:f8:
12:79:e3:41:9f:a0:38:f4:92:4b:c2:29:92:ad:45:63:55:6e:
59:25:fa:b0:d2:63:6c:06:74:c8:ea:12:2b:d3:e1:c3:ab:b1:
7a:2a:74:c2:f8:4b:58:56:86:ea:d8:9e:74:b8:1c:f3:83:8c:
a8:98:38:b3:0e:56:93:f5:86:37:2b:82:e0:d1:26:9d:70:a0:
70:63:64:97:9c:b7:d2:e0:06:48:96:97:8f:89:c7:9c:d1:40:
d6:e1:51:a6:17:38:05:03:d0:7d:84:88:07:f8:35:b0:cd:f3:
93:91:72:3a:62:e0:a2:af:af:83:0d:a8:b6:a4:bb:d1:ac:7b:
bb:b6:a4:a2:e7:2a:fe:78:a5:ad:5d:de:db:f5:8d:c3:7e:39:
a2:9c:d7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:31 2025 by rpki-client