Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: z9y75/G5dMTw+H3xnoNwpYyP6k9azGIoDm7vflYAuBw=
Subject key identifier: 8F:D5:7A:5C:60:71:CB:6F:2C:B0:64:A0:19:21:48:56:2D:30:E4:62
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 01974AE8FF53D9F9C4B7FE1D41344CB8579E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 0E04
Signing time: Sat 07 Jun 2025 15:01:13 +0000
Manifest this update: Sat 07 Jun 2025 15:01:13 +0000
Manifest next update: Sun 08 Jun 2025 15:01:13 +0000
Files and hashes: 1: 5stymyV2VXExRNfPDRHs0SsKv84.roa (hash: LAJy81D8Y1W3Al27GIYu76cE8aqvZvfTwIjGsrUN8O8=)
2: wX4zTXXZMo2WWHOKinMvyAiRYeE.roa (hash: dkBnWGmwxThQE3RCE6xz1EoswQLwUBpuloKrWzo2tUE=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: VYEp0MP/V+JIPvJNR+hIR7oOyRzWHlHkHBKXlHss+pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:ff:53:d9:f9:c4:b7:fe:1d:41:34:4c:b8:57:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Jun 7 15:01:13 2025 GMT
Not After : Jun 8 15:01:13 2025 GMT
Subject: CN=8fd57a5c6071cb6f2cb064a0192148562d30e462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:7c:1e:22:bd:f3:c7:e6:5a:c5:aa:fd:e3:
1c:d0:45:ab:34:af:a4:40:fd:e4:ac:e1:62:71:74:
7a:92:67:1b:44:db:d8:be:cc:79:05:ae:a4:af:bc:
01:96:8f:78:ed:5c:9b:2a:5a:f5:62:09:2e:2b:c7:
af:e1:b1:73:82:4b:5a:50:ec:ea:e8:2f:52:68:f8:
98:c0:a7:f5:80:31:94:05:6b:bc:b2:7c:9a:4a:9d:
07:b5:2e:c2:4c:cb:94:40:b8:7d:61:01:7d:63:5f:
50:f6:4a:6f:41:57:a7:3c:16:eb:34:7f:2e:7f:fa:
80:e5:e8:40:9a:a8:85:ea:98:ec:2a:d6:be:f2:df:
5d:34:bc:d1:30:59:89:22:e4:a8:95:96:0f:07:3f:
86:90:78:7e:4f:db:c7:a7:e1:76:8b:e6:38:1c:06:
89:b4:2f:c4:07:01:46:ed:38:21:06:53:82:4d:9f:
70:90:2c:f8:81:b9:c6:e1:1e:33:ff:c4:75:61:db:
bb:8f:7a:e5:c1:73:bb:0c:af:5a:25:c3:bd:12:b9:
66:b4:10:0a:9f:fd:27:31:09:76:0e:33:d2:f8:13:
12:df:08:e0:83:88:ba:1d:4a:e9:13:18:8c:82:e7:
87:bd:bf:8e:e2:2b:42:69:2b:e4:56:65:51:aa:f9:
dd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D5:7A:5C:60:71:CB:6F:2C:B0:64:A0:19:21:48:56:2D:30:E4:62
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fa:9e:8d:95:17:da:5d:26:b5:b1:05:74:1d:ab:2b:2d:fc:
3d:95:ee:89:1e:53:a9:d7:42:6f:98:46:a4:4b:e9:cb:2f:1c:
32:8c:b0:75:5f:7d:28:18:57:42:1f:89:49:73:d3:90:27:3d:
2e:09:69:66:ec:fd:90:5b:d8:59:e2:cb:9c:2c:59:95:66:91:
54:b3:72:9d:5b:6e:ff:f7:b3:05:ef:c8:05:fe:3e:08:f4:4a:
cf:fa:af:5f:56:c1:ba:d2:d9:b8:00:7c:3a:3a:9f:70:8f:b7:
16:84:a5:a0:db:dc:33:b6:e4:ae:b8:21:b8:c7:5e:d8:4a:ba:
ed:f5:47:8f:98:10:22:f0:a0:b1:23:38:5c:92:0e:b9:ad:0d:
87:a4:bb:c6:82:6c:14:5e:51:6b:9e:92:16:b5:69:c1:24:87:
29:ae:05:e3:5b:80:e9:fa:01:34:35:b8:c2:89:f2:c7:f4:ee:
98:14:42:89:9e:a1:b2:c9:e6:12:7d:74:a2:15:17:c8:c2:e9:
34:a6:3c:3b:a4:04:7e:90:11:ee:3c:ba:19:92:21:35:2f:ac:
b3:5c:9b:71:45:7c:69:f8:83:23:0e:de:86:60:71:2b:01:13:
85:2f:8e:94:16:fe:7c:cc:75:20:26:05:39:b5:a3:27:05:22:
88:92:40:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:27:41 2025 by rpki-client