Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json)
Hash identifier: uTaSEzd5iZ9pp+wwLX3wVfq0Jtyv/y+CiHNVriV5xb8=
Subject key identifier: E1:FC:44:0E:74:72:88:E7:AA:21:A1:D7:D3:19:0B:9D:20:C1:0D:F9
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 0197556C7EA47585BA9A65BF97DCECB0BC9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 16:01:02 +0000
Manifest this update: Mon 09 Jun 2025 16:01:02 +0000
Manifest next update: Tue 10 Jun 2025 16:01:02 +0000
Files and hashes: 1: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: xZd3AbzffDyTgqSRQ8kHu9ZxIJBkqMEpaN8A/wzMPSQ=)
2: hmvS4nDPTxWW6kYfDbr8j0yfqsA.roa (hash: lNR9K/eeK5h6bqGDhHsX+aTIDMdTknqLa5mK45GIX18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:6c:7e:a4:75:85:ba:9a:65:bf:97:dc:ec:b0:bc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: Jun 9 16:01:02 2025 GMT
Not After : Jun 10 16:01:02 2025 GMT
Subject: CN=e1fc440e747288e7aa21a1d7d3190b9d20c10df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:ee:7b:53:1d:0a:15:37:70:01:fd:98:9a:
6a:0f:ca:1d:f9:bc:25:87:75:f4:ee:1f:8d:68:35:
e8:4e:b3:b4:d6:b6:12:25:a7:7b:4e:8d:19:74:24:
52:8f:2c:c1:bc:c8:a3:4f:57:2e:82:c8:4d:97:ae:
a9:e9:6f:5d:c1:de:d2:79:98:5f:d9:df:fd:79:52:
9d:84:02:cc:d6:1c:09:f0:5f:a3:38:4c:ea:71:b3:
85:ff:1d:42:b4:2f:45:30:f9:e2:cb:f7:7d:08:bd:
f6:a2:b4:c6:e3:42:05:6f:2d:d8:eb:c7:0a:c6:2d:
11:ee:3a:71:31:c5:96:03:e5:6c:b7:51:0e:36:03:
a0:97:51:d9:01:a7:2c:97:43:96:1f:68:b6:06:6a:
c0:b9:14:f5:4a:0c:a8:2d:a6:12:20:36:d7:b1:ae:
c9:5b:69:d7:8b:d4:69:1b:a2:36:8e:f4:a6:93:de:
e5:9a:91:ad:95:46:5d:99:c5:aa:34:72:00:5d:2b:
81:32:f9:26:4a:9f:68:61:35:ef:f7:20:7a:d7:68:
30:f6:6c:36:16:98:45:c3:24:ac:7f:c5:76:d4:12:
f5:7e:2a:73:cb:b4:dc:b8:82:72:f0:08:6e:cd:e3:
74:05:8b:b6:50:95:48:b2:d7:60:d6:25:79:50:60:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FC:44:0E:74:72:88:E7:AA:21:A1:D7:D3:19:0B:9D:20:C1:0D:F9
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:91:78:f7:1c:38:0a:1e:21:71:c7:32:c0:eb:30:87:96:5f:
da:8b:24:91:f0:29:21:94:b8:ef:94:6c:a0:4a:39:eb:38:4d:
c5:4f:84:db:b0:08:ef:c2:f5:71:56:49:43:98:4a:2e:dc:30:
2a:1f:86:77:70:2c:30:6d:29:a4:af:50:40:a1:d1:ab:f2:7f:
48:db:09:2c:e8:7b:84:1a:86:f6:55:75:2a:c3:2d:73:bb:51:
b2:3d:b2:76:df:29:03:2c:e1:13:cb:7a:d8:56:db:d1:de:d1:
87:21:4c:b3:40:73:f9:fe:2e:dd:05:b5:63:9c:19:be:78:3d:
8e:9e:2e:bc:0c:2e:6e:98:9c:1b:38:9e:6c:7e:db:1d:30:fc:
1b:4e:20:c1:39:5d:93:44:cf:2f:61:19:29:b6:17:1e:67:cf:
92:45:29:a8:43:c3:ad:bc:4d:08:c6:9c:f4:99:4d:c4:3a:27:
c1:3f:c2:51:62:aa:18:7a:f7:4e:32:9c:b7:ad:bf:c5:36:e6:
c9:60:19:b3:da:49:99:e6:86:db:46:a2:2f:38:c6:bd:55:a0:
cb:33:97:99:80:7e:67:13:2d:1c:75:04:ea:84:32:ed:c6:0b:
7b:10:84:a1:41:30:99:35:71:98:2f:1f:6e:0f:19:07:17:6f:
28:a7:71:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:09:16 2025 by rpki-client