Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
File: xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft (raw, json)
Hash identifier: KrXwKXLOjlgvrAEa5n1syFtEVfgb1W28WNXV+y3LjWI=
Subject key identifier: A4:A0:A0:47:B9:96:32:91:2E:2E:CC:65:2A:FA:A7:37:C1:E1:EB:01
Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
Certificate issuer: /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Certificate serial: 019746303732DABC73C33EE142F512F6BFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 17:00:54 +0000
Manifest this update: Fri 06 Jun 2025 17:00:54 +0000
Manifest next update: Sat 07 Jun 2025 17:00:54 +0000
Files and hashes: 1: p5qeM8pBglCmH9S_-by9le3dhdY.roa (hash: gGcCXxeFnJoe5nYFMp9atB7TAawQ8UzeF434Tg+y5lc=)
2: pzUgONhqi68QY0VvGpWltJYJNYw.roa (hash: Uq9NSVRaA6mFyoWNmYT8pc0z0L/fxwW0Qlau9RSv6Cw=)
3: xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl (hash: w5LDeoBBTZ5OsJZHxgIidG3IuHMnULgKNbuDmtoGRs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:37:32:da:bc:73:c3:3e:e1:42:f5:12:f6:bf:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Validity
Not Before: Jun 6 17:00:54 2025 GMT
Not After : Jun 7 17:00:54 2025 GMT
Subject: CN=a4a0a047b99632912e2ecc652afaa737c1e1eb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:9e:fb:a0:59:7f:49:b9:23:c4:75:48:62:
ff:12:2f:20:be:c5:90:7d:ff:04:de:69:e4:9e:66:
f7:92:82:42:ce:79:81:df:c2:b1:67:72:21:a9:9f:
9d:17:d5:4e:fa:1f:34:9c:ee:20:5f:6e:93:7d:35:
b5:c7:19:0e:b7:0d:7b:38:0e:35:67:bd:f8:ca:71:
95:4e:b0:6e:a0:14:cc:f7:e3:ba:4c:1e:a9:c3:da:
27:1e:be:10:f6:cf:06:ba:d6:ef:93:2a:0d:28:0b:
79:70:a3:8c:f1:c5:8d:32:d4:a8:05:85:14:29:ce:
21:ce:a2:be:57:4a:7c:58:f4:65:02:e9:12:59:f5:
ce:98:d7:3c:a7:fa:86:a4:c2:f7:2e:ce:09:17:9c:
77:11:b2:6e:bd:8b:5e:80:2d:2c:77:b0:2a:3e:54:
b9:70:69:af:af:86:93:a1:ac:72:2a:c2:6c:91:94:
b4:8b:a3:69:85:68:2e:b8:b7:3b:c5:99:de:8e:3c:
5a:d1:43:5a:26:b1:60:dd:6f:fe:12:b9:08:68:f8:
6a:f9:0e:01:b9:73:d1:a1:90:30:11:74:ea:2b:2e:
a2:4c:b5:be:5c:df:87:98:a4:57:7b:e7:09:ea:5c:
17:7d:76:09:57:6e:0f:2b:8a:7f:b8:da:c9:93:5e:
e6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A0:A0:47:B9:96:32:91:2E:2E:CC:65:2A:FA:A7:37:C1:E1:EB:01
X509v3 Authority Key Identifier:
keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4c:b8:bf:6e:c2:6f:4c:df:9d:4d:f2:4a:96:29:80:24:da:
d3:bd:68:6f:2f:e2:6c:91:17:e8:b9:d8:41:06:00:e1:38:c4:
5e:74:d6:f2:c8:31:5e:40:1e:88:e3:fc:45:15:03:31:67:b6:
d5:42:5d:d0:ce:6d:e9:eb:ec:3d:78:08:9a:e8:61:1d:13:ee:
34:fd:d8:40:e9:c6:2d:5c:99:9c:6b:72:63:17:bd:0f:20:d3:
90:a1:20:20:f9:36:c4:37:7f:bf:57:29:d8:e5:36:15:6f:a7:
03:26:3e:ba:fc:e0:a6:fc:14:2a:4b:93:c5:c7:b8:1b:6b:2e:
58:80:39:cf:99:ba:2f:3a:20:a1:3b:fb:bd:e2:04:51:98:7e:
70:e8:41:27:e6:45:b8:f1:da:12:f0:f8:ee:22:2f:39:4f:d7:
62:6c:07:75:49:9a:80:43:35:d9:05:1b:4b:00:4f:ea:d4:06:
d6:99:75:c6:6c:a7:8d:6e:38:aa:39:89:14:e9:bd:9e:29:fc:
59:03:26:2f:eb:92:62:c1:d3:37:0c:54:5f:6b:cb:cb:fb:52:
7d:53:1b:8c:c0:d4:8f:7c:fa:5b:86:6d:89:01:55:9b:b9:57:
ef:de:44:6b:2b:f1:1e:48:f6:e3:ee:4c:d1:5c:46:0f:ce:9c:
9d:70:d8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:04 2025 by rpki-client