Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
File: xrbwexczYPIV8VGMhxKksFTYXAc.mft (raw, json)
Hash identifier: gJ7SN7hubMP8k/b9zINBCn6+xUIyzlzXhFnEJSvCFTU=
Subject key identifier: 2A:09:90:37:C7:E7:01:29:86:90:58:D9:E0:0D:D0:B2:42:66:9D:BE
Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
Certificate issuer: /CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Certificate serial: 019748C33927F4EBFE35AAC14920FC8AC9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 05:00:43 +0000
Manifest this update: Sat 07 Jun 2025 05:00:43 +0000
Manifest next update: Sun 08 Jun 2025 05:00:43 +0000
Files and hashes: 1: xg8lxjJPCVI2QjzHXxxw_4cHXSo.roa (hash: HY5QQYkL4OBC+/cJgD5NihIRGwwm0R3a0QruU+xabgs=)
2: xrbwexczYPIV8VGMhxKksFTYXAc.crl (hash: jLzcZ7tKo9Uaw0c/PdQsUOln5J+EWA0E+OwHj6eg0oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:39:27:f4:eb:fe:35:aa:c1:49:20:fc:8a:c9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Validity
Not Before: Jun 7 05:00:43 2025 GMT
Not After : Jun 8 05:00:43 2025 GMT
Subject: CN=2a099037c7e70129869058d9e00dd0b242669dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a8:3c:aa:05:c2:d8:92:a7:dd:39:9a:ea:c5:
5f:d0:6f:1e:d3:51:9b:72:a6:c8:f4:50:7d:60:7b:
c6:f5:f0:71:52:e1:1f:99:bd:be:f5:39:08:7b:df:
8c:ce:54:9b:83:76:0b:e0:26:17:af:cd:f3:79:85:
11:cf:93:de:40:b3:57:b9:2a:6a:e3:7c:6d:f0:b6:
69:83:a0:7b:01:e9:6c:a2:12:b7:08:22:08:fc:be:
58:c6:29:ca:9d:87:ab:d1:71:cb:69:6c:01:c4:18:
75:e6:1a:b6:64:16:31:15:58:e9:13:4c:2e:00:50:
57:55:78:f2:46:ec:d9:f3:31:cc:e9:51:61:cf:85:
68:e7:17:2b:83:4f:7b:a8:f1:76:e5:3a:58:30:8b:
8f:ad:f2:41:1d:a9:66:ea:51:17:70:83:7e:8a:f0:
7b:ca:54:94:ec:a2:c9:72:1b:9f:1f:df:74:f6:a2:
4b:34:1c:d4:f5:7a:3f:f6:26:32:4f:e4:cc:75:e7:
ec:a9:cc:69:8f:f1:0c:a9:52:b7:3f:ec:59:8b:0c:
c7:63:4c:d7:37:ca:3d:04:fb:c0:c7:ed:5d:31:89:
48:aa:d3:6e:9e:8c:c2:ad:81:3a:f3:d9:6d:25:10:
b4:ed:dd:9e:1f:29:29:0a:fc:3b:3d:94:93:b9:ec:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:09:90:37:C7:E7:01:29:86:90:58:D9:E0:0D:D0:B2:42:66:9D:BE
X509v3 Authority Key Identifier:
keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7e:1e:d6:23:46:f0:89:e2:35:7a:5e:4f:e8:f2:24:cf:7d:
65:de:f3:ef:b6:29:67:98:70:29:ac:95:1b:99:67:f4:83:b4:
2d:ab:dd:40:fa:f1:42:62:38:dd:6a:46:48:9a:7a:90:7e:87:
e4:7c:4d:c5:20:b9:28:1f:64:be:5e:05:69:2d:ee:dc:91:5e:
a7:ca:1c:bc:01:92:e3:64:42:96:26:04:f5:d4:17:58:37:5f:
6e:ad:6f:11:94:e1:2d:b8:db:9e:0e:44:39:33:e9:89:5e:18:
77:44:8e:22:57:93:05:de:1b:e3:d3:91:af:61:93:91:14:3b:
06:93:d4:af:eb:50:4d:15:b4:2d:2e:50:b9:cb:7f:3d:45:35:
6a:fc:e6:50:5a:48:3b:59:15:09:8f:57:63:aa:e2:de:ab:4c:
75:18:c7:0a:ce:3e:94:7f:47:aa:e7:aa:50:c1:f2:64:27:5d:
83:f6:14:c9:b5:1f:24:c6:98:d1:b4:41:71:a6:04:70:33:7d:
61:34:22:48:6b:de:bc:c5:f8:8d:b6:15:a8:86:d0:d6:7d:40:
ff:59:64:87:2d:57:34:26:09:70:04:fd:ed:5d:45:d6:84:f7:
90:46:53:2a:84:8a:e4:82:fe:ea:f0:8b:a4:28:df:8f:ef:a3:
71:6a:41:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:41:13 2025 by rpki-client