Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
File: xKMWKFZYILOlo-HPyHdz4oP7lcE.mft (raw, json)
Hash identifier: MRvYdZ8mNnhp6OKZU9295VUDfg50ESVbiM1bMF86lQ8=
Subject key identifier: 46:98:18:BF:AD:F7:8C:74:14:B8:36:92:8C:A4:6E:08:BA:EF:84:40
Authority key identifier: C4:A3:16:28:56:58:20:B3:A5:A3:E1:CF:C8:77:73:E2:83:FB:95:C1
Certificate issuer: /CN=c4a31628565820b3a5a3e1cfc87773e283fb95c1
Certificate serial: 01974FA0AE61E7526321B473ECB93CAAA23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
Manifest number: 0AC5
Signing time: Sun 08 Jun 2025 13:00:19 +0000
Manifest this update: Sun 08 Jun 2025 13:00:19 +0000
Manifest next update: Mon 09 Jun 2025 13:00:19 +0000
Files and hashes: 1: O7JK_R6ip6iR244uyf3DBgROHco.roa (hash: GKH7o0xxF7nZfmB+4s7mUapBQQrsXrRHoDwbM7Hh8hA=)
2: xKMWKFZYILOlo-HPyHdz4oP7lcE.crl (hash: dapb8SSpOS5Tq4aSKHFFLfGaDHMetrnDDiCeRM0rbXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:ae:61:e7:52:63:21:b4:73:ec:b9:3c:aa:a2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a31628565820b3a5a3e1cfc87773e283fb95c1
Validity
Not Before: Jun 8 13:00:19 2025 GMT
Not After : Jun 9 13:00:19 2025 GMT
Subject: CN=469818bfadf78c7414b836928ca46e08baef8440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:01:57:05:d1:66:83:a2:f8:3d:9b:e1:ed:82:
89:05:cf:6a:60:73:ba:e2:90:2e:44:d5:e0:43:15:
53:70:63:3e:3b:14:b8:64:94:a7:c6:cd:c2:bd:68:
f1:df:e8:8d:cd:d4:27:78:f0:83:3e:fd:6b:f7:c1:
21:b6:36:b1:f6:b7:37:71:52:e8:bf:f8:30:a5:d4:
9f:d9:ac:2e:59:a0:22:d3:d5:06:49:18:7f:97:2a:
26:27:9b:13:fb:35:fa:2d:2d:07:45:7c:78:55:e0:
0a:39:49:b8:27:9e:00:98:94:ee:b8:3b:57:77:5c:
08:2b:5b:ec:57:95:3e:f4:f6:06:0b:55:6a:b1:2f:
7d:26:98:6e:5c:ec:09:d7:b5:9d:e5:c8:dc:dc:ae:
1a:66:b9:86:ea:31:00:33:55:1f:27:ec:37:65:6b:
dc:0b:1d:b7:0a:3f:8c:bb:27:ad:78:48:fe:24:80:
05:56:76:54:40:70:20:6d:de:da:ba:70:4a:52:04:
30:04:6d:cd:be:94:16:8f:c0:ff:24:db:3d:ef:f1:
6d:da:91:1b:1a:c0:e1:e5:f7:cf:08:8f:bc:5b:25:
90:73:97:23:5e:7d:66:f1:21:18:99:f1:14:b2:54:
66:fa:fa:e7:cc:fb:02:c1:6f:20:ad:25:24:6a:11:
f2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:98:18:BF:AD:F7:8C:74:14:B8:36:92:8C:A4:6E:08:BA:EF:84:40
X509v3 Authority Key Identifier:
keyid:C4:A3:16:28:56:58:20:B3:A5:A3:E1:CF:C8:77:73:E2:83:FB:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:33:3f:ab:5a:fc:47:62:ac:16:21:61:f0:a0:6d:c6:0b:19:
18:7b:27:01:d7:9d:56:d0:b8:ca:cf:83:e8:c2:01:1d:65:67:
2b:28:80:5d:88:b9:73:2c:c5:e8:a1:7e:ec:0e:46:ea:63:2e:
f2:bf:5a:50:c0:37:91:03:fa:3e:d3:f8:d1:8b:08:ab:30:f5:
21:50:31:bf:3e:91:df:da:01:c6:4c:a6:80:e0:52:9d:02:a9:
f2:ac:9b:63:00:5d:b7:c7:82:e9:2e:54:19:61:a1:87:2d:ec:
c1:03:ce:03:0c:2d:ae:4d:39:73:25:e6:5b:b3:1b:93:79:ff:
b7:14:54:ed:35:00:60:ad:58:b4:75:71:a1:59:53:50:88:85:
95:c8:9e:22:f7:86:b0:14:03:3f:1e:ab:6f:bc:da:5d:9f:3d:
59:77:94:69:30:92:1a:55:97:a3:a0:8f:8d:10:b1:2d:f5:a7:
cc:50:69:e5:66:97:ee:32:23:ee:81:ba:3a:bb:6f:b0:07:f5:
db:eb:04:37:00:1d:50:56:f6:ed:ee:17:1d:1e:6a:55:ff:6d:
9e:48:0b:b0:cb:f9:52:ce:e1:cb:67:31:56:b0:01:0a:24:ae:
57:6b:9c:7c:86:1f:a6:1c:37:ec:7b:ee:82:8d:54:a9:c4:a5:
8a:60:bf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:28:43 2025 by rpki-client