Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
File: xyIeQCmYq8HwNUdeFYt06MdpIMA.mft (raw, json)
Hash identifier: NQrSV+yr+mll15POPrEo5vt/a3NNTq9uU7+CRTdnAX4=
Subject key identifier: B8:41:4D:C8:6E:A3:75:25:13:B0:7D:AC:90:38:0F:62:46:18:FB:F7
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial: 019748C331611BF6C701F108D9816B0DD7C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 05:00:40 +0000
Manifest this update: Sat 07 Jun 2025 05:00:40 +0000
Manifest next update: Sun 08 Jun 2025 05:00:40 +0000
Files and hashes: 1: FIv37bh0ZRTnGv0_RzWoQo8NJHg.roa (hash: 7fKZSi422ANEwoYfgRX2lfWBp8KGEhw9eJL3r9FHZjI=)
2: mWhSvkUBXsFafV4R5CtF1RFCi98.roa (hash: SLf4YYuqQC736cXUt3YUMZMsShhNwZceRr+OVNF0Bxc=)
3: xyIeQCmYq8HwNUdeFYt06MdpIMA.crl (hash: 3jQ+mNsyYgxm/QCpqS783WnuIAcJntO5Go4Nsb5wcoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:31:61:1b:f6:c7:01:f1:08:d9:81:6b:0d:d7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
Validity
Not Before: Jun 7 05:00:40 2025 GMT
Not After : Jun 8 05:00:40 2025 GMT
Subject: CN=b8414dc86ea3752513b07dac90380f624618fbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:20:e1:4b:78:7c:d3:39:0f:e4:44:24:7b:
c3:f6:19:e4:8d:fe:41:e5:e7:00:bb:45:3a:e2:9e:
97:d6:15:23:47:62:86:3b:fd:ad:4e:d9:b7:0f:4b:
fb:7f:e0:86:d4:d4:03:71:21:9f:cd:b0:cd:68:0a:
a8:fd:1d:24:12:a7:ed:63:55:53:53:70:1c:7c:73:
d3:ae:07:16:26:4a:f4:48:b2:a5:92:2c:e5:37:e2:
ea:98:d4:65:32:38:c7:b4:9b:9a:16:82:73:91:01:
cc:22:5b:17:d5:d1:f0:63:74:c9:d8:12:7b:3e:03:
ed:76:b0:e0:35:4f:56:7b:82:50:90:cc:bd:1f:a5:
df:01:77:c6:68:1c:ee:df:c1:26:f0:4e:6e:52:94:
9f:2e:16:9c:59:ae:83:49:05:8f:46:3c:df:f6:a4:
61:0f:c8:b9:3b:d2:da:51:58:a2:96:8e:4b:2c:03:
00:ee:65:dc:52:17:b5:42:5c:b0:c3:50:12:d5:bf:
57:c4:f8:2e:33:16:a4:55:f2:ff:f1:10:0f:fc:30:
85:8e:cb:ff:a8:0d:07:74:6a:0f:38:3b:f7:32:e8:
cb:3f:df:39:aa:ad:67:12:f4:eb:bf:74:fa:41:c5:
26:33:e4:d7:3a:bf:6d:1c:4e:9f:d1:ba:a6:b4:8f:
12:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:41:4D:C8:6E:A3:75:25:13:B0:7D:AC:90:38:0F:62:46:18:FB:F7
X509v3 Authority Key Identifier:
keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f1:35:a9:ed:fd:35:0e:26:90:f0:37:9a:4f:c1:12:4e:71:
7e:e4:61:f3:22:a0:0b:82:26:a6:ee:9c:9c:3d:08:8b:8e:e4:
6b:10:51:88:bd:7f:a3:60:18:8a:9f:a1:4a:89:d5:75:9c:75:
3b:6a:b4:58:87:6a:10:7e:5f:2b:90:3d:dd:6c:7e:9d:47:ce:
aa:3f:5a:28:ec:c9:f9:15:a3:5f:41:b9:4e:5f:ee:59:12:13:
af:c6:d4:91:cf:c9:0c:e5:81:00:40:10:d0:12:9b:03:6c:b6:
cb:8b:f7:0f:55:3a:a0:85:39:fd:ee:52:a9:8e:86:69:69:a0:
c0:6a:72:47:e4:26:43:20:f0:64:f8:a4:93:aa:f2:a1:ce:a6:
bf:a2:ff:96:7c:4f:0e:da:5d:c4:6e:41:e7:62:7c:7d:0f:e5:
ca:b4:59:97:70:98:ad:20:2f:cc:89:57:6b:cb:dc:2b:b3:fd:
df:0d:f0:ed:dd:7d:8f:82:e2:39:c3:59:c1:e5:a9:68:0b:ba:
5f:54:df:93:3a:f0:28:22:21:5f:ba:cd:10:af:c1:bf:b3:a7:
cc:a9:e6:95:1b:b8:87:d0:31:ea:f5:10:99:1a:3b:01:06:63:
76:6c:00:ab:2a:fc:8a:48:58:95:e4:d6:92:c4:13:ba:92:b0:
d0:c9:1e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:54 2025 by rpki-client