Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
File: xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft (raw, json)
Hash identifier: Oe8yJ8ZKgWSYqtdSTwCxv+N6kn2FEW9DHIj7ZRC0k8M=
Subject key identifier: 1E:42:4C:15:A9:3E:77:BF:A2:9A:DC:8B:EE:3B:9F:14:DD:97:EE:20
Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
Certificate issuer: /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Certificate serial: 0197499F1A7DD86418E06C68BC601C628909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
Manifest number: 14D4
Signing time: Sat 07 Jun 2025 09:00:53 +0000
Manifest this update: Sat 07 Jun 2025 09:00:53 +0000
Manifest next update: Sun 08 Jun 2025 09:00:53 +0000
Files and hashes: 1: C3xZoR3LtseXs9YgZ15-hhPr18E.roa (hash: 1WbsEFbzKO5s8iSa/8CXV3aiHCeUKDOXCmds/8JgsxY=)
2: xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl (hash: LD8NPb6AEwK+YT1o23BIhEVE9MSO2NmaZ538xNFiZ6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:1a:7d:d8:64:18:e0:6c:68:bc:60:1c:62:89:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Validity
Not Before: Jun 7 09:00:53 2025 GMT
Not After : Jun 8 09:00:53 2025 GMT
Subject: CN=1e424c15a93e77bfa29adc8bee3b9f14dd97ee20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:92:e5:d7:99:5a:1a:34:6e:7e:03:56:10:
1b:f7:b0:f8:ae:bf:41:46:cb:ab:2c:d2:6b:b5:e5:
c8:27:99:16:ed:e5:81:2f:b0:9c:9a:92:89:74:3f:
e3:93:6f:ea:18:56:12:bf:f9:6c:21:de:43:47:a0:
aa:43:4d:50:3d:d9:0f:b5:d0:58:f5:8e:ff:3d:29:
7b:31:86:28:cc:d0:59:76:db:03:10:2c:d0:60:64:
f0:1a:80:aa:cc:36:33:2f:1a:e1:ed:2a:89:66:d8:
87:ba:e9:7b:30:3f:4e:3a:57:f2:dd:96:8a:fa:7d:
72:dd:d7:c6:48:da:30:f3:2c:d8:6a:e2:54:d8:3c:
6f:cb:f0:27:d0:78:9c:fa:3b:21:f1:64:22:4a:8b:
09:50:e7:ce:d9:a3:bd:c6:70:b3:14:0d:30:bb:0d:
43:d1:a6:ec:79:2c:5f:82:65:85:4a:ab:78:dc:c8:
3c:88:6d:ee:25:af:5a:11:dd:3d:57:75:90:75:e2:
81:4b:d8:8e:77:0a:ac:e7:9a:65:fa:bd:e5:84:95:
cc:70:3a:a3:db:68:54:da:89:27:73:97:53:ed:5d:
53:b8:26:8f:df:6f:eb:b9:03:ec:6f:16:32:86:b1:
ce:ea:2d:63:79:58:f9:af:5b:2f:df:2d:7a:1a:cd:
cb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:42:4C:15:A9:3E:77:BF:A2:9A:DC:8B:EE:3B:9F:14:DD:97:EE:20
X509v3 Authority Key Identifier:
keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:63:f9:c1:4a:ad:88:95:33:68:45:fe:73:0b:34:a0:38:6a:
e9:ff:c3:67:ea:01:86:c6:35:7b:ea:39:49:44:fc:e4:9e:e1:
df:a6:4e:63:74:5a:12:9a:3a:c0:5e:4c:37:77:dc:b0:99:97:
69:f2:76:e4:dc:5f:82:98:6f:93:85:bc:e0:c4:ee:8b:f3:af:
24:cb:e0:a5:85:4c:9b:63:c1:39:00:94:86:45:5a:14:c9:37:
e1:1b:7b:19:41:8e:9f:b6:04:09:e3:b3:1f:73:20:29:f5:aa:
fd:e0:82:48:28:1f:cb:3a:fa:21:6f:e0:b9:40:df:b2:7a:fe:
41:9d:8f:8f:ea:42:34:86:04:28:36:23:1a:7c:31:b2:40:3d:
c8:16:4d:c1:bd:fa:ab:b0:39:0f:87:36:8d:0b:2c:4d:24:de:
8d:72:c3:9d:c8:41:06:e2:36:a5:bc:4c:a3:c3:4d:7f:d5:b7:
db:e4:76:57:85:d2:f9:2c:9a:0c:46:d8:50:06:13:87:af:f6:
9f:51:fe:e0:45:7f:d7:d6:ec:a3:0b:28:2c:60:45:33:59:6c:
81:d0:f6:6b:e2:8b:7a:88:97:9c:51:f7:b9:5a:6e:48:8f:42:
83:00:a0:59:d4:b8:60:b2:98:2a:01:27:0a:77:23:5d:c3:82:
ee:5a:12:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:49:50 2025 by rpki-client