Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier: /HIhNiD/TxXE9aSvFBX3yJA6q2AOhWeF3M01Ge6DNPU=
Subject key identifier: B1:32:C5:45:DE:AB:F9:62:0E:32:FE:50:90:C8:C9:50:B2:FF:30:76
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 01974E2029FA57DB48DF3B31BD81AED19934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number: 0473
Signing time: Sun 08 Jun 2025 06:00:20 +0000
Manifest this update: Sun 08 Jun 2025 06:00:20 +0000
Manifest next update: Mon 09 Jun 2025 06:00:20 +0000
Files and hashes: 1: dL6NU49k6HbeSIU7QVDGoeBlKvM.roa (hash: D8I1MGPzQuGFKjsxT8JBT5WNbzUdy6FOkd6uHqQy/oo=)
2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: 9WlejqekMPJftHt0Qlf5wTqEFy3whSmvf994C8bTP48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:29:fa:57:db:48:df:3b:31:bd:81:ae:d1:99:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: Jun 8 06:00:20 2025 GMT
Not After : Jun 9 06:00:20 2025 GMT
Subject: CN=b132c545deabf9620e32fe5090c8c950b2ff3076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c4:ff:52:9c:97:66:51:68:cf:91:a9:13:e6:
d8:ec:08:00:22:01:6b:a4:25:25:03:3b:af:55:14:
ae:c3:4c:46:98:e4:d0:b7:b0:be:dd:6a:8f:72:10:
56:17:2d:e2:bb:1f:99:a3:bc:ae:92:ed:ee:52:41:
89:a0:a1:4d:58:23:8f:85:a0:a3:da:d1:fc:ec:ea:
09:65:51:a4:58:22:3d:34:14:46:83:bd:d5:a4:9a:
0c:b7:f6:f0:3a:ff:39:0f:0d:58:2b:3e:ba:c9:da:
29:c5:17:a6:d2:58:1a:a0:b0:cf:ce:c1:64:dc:a0:
84:64:65:b8:14:36:dc:58:41:31:b9:30:37:f8:7b:
77:b1:2b:f1:88:e7:de:27:23:a9:fd:d3:a6:2b:fd:
76:83:15:09:8c:3d:69:15:02:ee:c3:65:82:25:53:
24:c3:c9:8d:40:c4:bd:48:e4:14:9a:e8:10:86:e1:
9a:0b:e4:ce:ad:8c:2a:9d:49:1a:ca:99:fc:3f:10:
19:14:ba:66:cd:83:cf:c2:79:0f:c2:80:02:94:3c:
5a:7f:9e:ac:0e:f3:dc:d0:72:56:a7:d1:04:d2:94:
59:9b:44:12:22:bc:67:35:38:9a:9c:19:03:3b:fc:
66:47:20:0d:e8:91:b5:94:2f:01:88:e2:9d:38:30:
ec:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:32:C5:45:DE:AB:F9:62:0E:32:FE:50:90:C8:C9:50:B2:FF:30:76
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b3:7a:8c:75:e4:3b:47:85:fb:4c:23:f9:8e:6c:8d:5f:a4:
97:c4:75:ee:df:04:0f:ec:d7:2b:66:d0:34:f7:1c:0b:86:98:
24:0e:61:f7:5d:5d:d5:a6:6f:1e:a9:54:e2:ec:36:99:03:47:
17:fa:42:ee:1f:c0:90:19:d8:7a:6f:a9:ea:cc:b8:4b:0f:0c:
7e:49:f0:66:fc:f2:1b:80:68:52:50:f9:fc:44:05:58:f2:43:
fb:e6:f0:a8:d2:b0:ae:fb:52:45:89:28:6f:c3:01:d6:60:a3:
23:65:d6:96:50:b1:3f:94:d2:b2:59:58:90:d2:94:73:8d:38:
8c:d3:26:95:6a:4c:f5:68:c4:68:e8:1a:04:cb:9f:b4:cc:5f:
31:d0:b3:71:4e:b0:c3:3b:e6:c0:c4:0f:74:05:64:02:a3:2e:
4b:7f:56:2a:ed:7b:0c:e3:0d:19:63:95:ae:bf:4f:85:d8:0e:
c1:8b:e6:27:a7:0b:02:6e:bd:97:7b:84:88:73:25:12:28:ee:
11:a0:ba:69:12:1b:6b:98:35:2b:52:6d:ff:f4:8b:55:d5:bc:
c3:38:4d:eb:7f:a7:69:a4:3e:71:b4:39:e2:de:6c:1f:45:d2:
8b:bc:18:8d:de:08:94:05:d0:4c:29:48:50:89:2e:83:3f:51:
7c:16:38:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:58:53 2025 by rpki-client