Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
File: xU3YgoUsxFhrH-40wFAdXbfWDws.mft (raw, json)
Hash identifier: Lq8FiSUNDm5I+2kJK4a8LZYaIRfDLULFKDGgfmF5+vI=
Subject key identifier: 86:43:75:19:95:CA:31:EA:E9:1B:83:A0:AC:FB:66:B6:62:E9:80:E4
Authority key identifier: C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
Certificate issuer: /CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
Certificate serial: 019747E7904BF40EF661B38F316C9BED1B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
Manifest number: 0740
Signing time: Sat 07 Jun 2025 01:00:47 +0000
Manifest this update: Sat 07 Jun 2025 01:00:47 +0000
Manifest next update: Sun 08 Jun 2025 01:00:47 +0000
Files and hashes: 1: XArLVttX_wCBnKO2u8bWM8Vk3NU.roa (hash: BE5h5QGSzKEJoBRH8Cvw/x+Z7DD6UePHMldATT7VyV4=)
2: xU3YgoUsxFhrH-40wFAdXbfWDws.crl (hash: 8hZyujrlCADdYBdwVj8WrJao0Vi4vFmFrbsx2BeWkrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:90:4b:f4:0e:f6:61:b3:8f:31:6c:9b:ed:1b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
Validity
Not Before: Jun 7 01:00:47 2025 GMT
Not After : Jun 8 01:00:47 2025 GMT
Subject: CN=8643751995ca31eae91b83a0acfb66b662e980e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:43:41:37:f3:38:0e:40:15:59:7d:c2:4f:
f8:88:cc:5e:51:9e:18:23:d6:7c:cd:c9:7b:db:6d:
6a:e4:0a:31:25:11:5d:87:d0:83:43:77:6f:f0:99:
a0:e0:fc:e3:b0:1c:12:cd:30:59:f4:ca:a7:62:38:
ec:d7:ac:bc:00:fa:ae:ac:bc:1d:3b:1d:08:db:a2:
90:44:52:dc:41:44:5c:7f:b4:7a:0d:a8:ba:f7:b4:
fd:6d:55:ab:9d:bd:6e:db:f0:04:e4:4e:f4:0d:e1:
6f:53:66:1a:17:bc:46:47:5b:1e:28:00:23:d7:b9:
7d:9d:f6:bb:46:9c:dd:11:b5:62:e7:3a:53:90:af:
de:41:47:02:dc:6c:c5:d7:ba:d3:df:4d:cd:35:03:
d1:4c:fb:51:74:cb:0f:60:be:fb:78:04:78:0c:ad:
95:89:61:00:aa:46:42:f1:09:7e:6d:42:5f:4d:a5:
37:a6:84:3c:6c:8f:7e:68:17:04:af:c1:a2:03:71:
62:61:c1:5c:b1:16:c9:23:f6:5c:db:2e:48:d5:84:
89:eb:9b:d6:08:55:dc:1c:53:27:94:22:8d:bb:f0:
62:81:ff:92:93:f2:59:77:bb:c6:30:1f:05:8d:01:
7d:bc:4d:00:54:6c:02:26:63:77:15:cf:23:8b:b9:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:43:75:19:95:CA:31:EA:E9:1B:83:A0:AC:FB:66:B6:62:E9:80:E4
X509v3 Authority Key Identifier:
keyid:C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:98:d2:cd:04:0a:60:ff:36:27:9c:5f:7c:f9:f5:10:7e:03:
bd:c8:b9:e4:52:c5:7b:6c:72:fb:35:65:51:0e:65:7e:bf:57:
6a:ae:7e:8f:4d:ba:83:50:cb:10:b5:97:42:48:59:c3:2e:b0:
22:39:75:8d:c6:5b:60:53:de:80:aa:35:fa:25:f7:7d:5c:26:
b1:65:51:5f:5b:52:2e:6c:43:cf:98:4f:2b:d3:56:02:e3:75:
23:97:c1:ba:62:7a:68:b5:aa:65:c3:6b:bc:57:05:d1:db:f5:
04:b4:2a:84:7d:76:a7:b2:34:10:ea:ec:17:f2:cc:3f:bb:53:
d0:c3:78:64:d4:e7:4d:a0:11:5c:79:56:20:fc:33:3f:f3:3f:
e8:4b:14:91:ba:94:50:8e:7c:e4:54:07:d3:ac:a4:a2:2c:dc:
fe:fb:7b:3c:b6:9d:82:34:92:62:b7:c1:86:39:6e:09:8c:ac:
16:6e:4c:db:69:b4:12:25:56:7f:e0:b4:bc:9b:11:ce:32:f6:
7c:96:f1:41:8e:de:14:41:a4:39:75:a5:86:6e:d2:cd:08:60:
bd:05:0d:26:c5:76:d1:9f:22:6a:c5:38:56:ce:7b:76:1b:d6:
81:4f:f2:3d:2a:f9:64:19:ba:75:b2:1f:60:88:40:02:24:d7:
2a:dc:47:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:50:40 2025 by rpki-client