Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: v0a9e83WEK1TzRCGEO/ZJgYEGrn8Z3ErDSNZqTqd5qc=
Subject key identifier: F6:B2:2A:FF:9D:AE:C2:BD:F9:69:A9:2A:F7:D4:7E:58:F9:C6:BE:07
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 01974C3244138E0A15A99D6F59C6AC01D9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 158C
Signing time: Sat 07 Jun 2025 21:00:52 +0000
Manifest this update: Sat 07 Jun 2025 21:00:52 +0000
Manifest next update: Sun 08 Jun 2025 21:00:52 +0000
Files and hashes: 1: CxW9CMhkxVrayKYNgSlraHOeOQM.roa (hash: Pd98lEBP8p/URa6hKL85tikarNFnXac6Jxt7ytM5JK0=)
2: U66mGG3Y8A4sBRmpQym2qej1efo.roa (hash: TlVlbRHV8GRl2ttGfufATtjwAKcckCzgbeG9Ag3deSU=)
3: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: VqvsElfuu6aTRjC/dzC1JIpax7rFz91Vr4dIPk1fq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:44:13:8e:0a:15:a9:9d:6f:59:c6:ac:01:d9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Jun 7 21:00:52 2025 GMT
Not After : Jun 8 21:00:52 2025 GMT
Subject: CN=f6b22aff9daec2bdf969a92af7d47e58f9c6be07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:ae:8d:3b:c4:4e:08:6e:1e:cc:2b:68:12:
7b:3f:b0:46:07:03:16:01:c0:e7:b0:e6:cd:ea:57:
9a:ea:58:47:13:f5:ce:4e:fe:ee:14:fc:8e:8f:6a:
3e:d0:fc:10:83:a6:67:29:95:a4:e8:93:2a:d4:3b:
7e:26:56:2c:69:04:20:db:e2:e2:db:3e:ae:42:2a:
44:4b:e8:e7:0a:93:c9:1f:06:66:95:9c:2a:33:4b:
fa:74:d1:23:d1:00:ec:89:54:b4:ec:65:7f:9a:03:
49:c8:f7:55:23:6d:b1:d4:f6:58:bd:f9:2f:16:0f:
c5:7b:67:b3:82:08:d0:db:4d:fd:4e:cf:c9:ce:10:
b3:28:1f:21:79:00:c2:e1:b6:8b:df:da:b8:0a:24:
df:55:e5:73:bf:90:96:14:3d:9e:6e:a9:3a:63:71:
01:c4:00:3d:4b:6b:64:77:e2:f9:c0:d0:47:ae:3a:
63:7e:08:b5:0d:36:ef:1b:69:93:b8:4c:8e:1f:74:
36:09:68:cc:5e:d8:17:55:76:93:61:e4:75:77:f0:
2a:60:da:dd:57:30:9e:a1:9f:49:27:03:da:13:64:
86:a2:ff:da:06:dd:ae:96:6c:34:f3:52:3d:c3:eb:
f5:a7:8e:4d:a0:63:61:b8:9f:49:0d:f1:85:3b:c2:
f7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B2:2A:FF:9D:AE:C2:BD:F9:69:A9:2A:F7:D4:7E:58:F9:C6:BE:07
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f0:87:d2:cc:08:dd:85:47:08:5b:a7:0b:59:42:c0:54:e5:
20:e8:79:c3:12:7d:94:4f:de:de:1f:32:08:24:5a:fd:f2:9e:
05:c9:e3:e8:67:30:42:9f:7b:c1:22:f6:47:d4:05:53:6e:20:
78:4f:ec:bc:be:63:1e:c8:d1:ad:b6:1e:c7:31:b9:e2:0b:1b:
52:23:1b:4e:47:3a:c4:86:21:8c:df:2d:12:4b:1b:87:70:1c:
d4:c6:bd:6f:7d:8e:fe:ef:1a:6e:65:07:3a:77:1a:fd:61:91:
43:3c:1b:a9:bc:43:75:50:2f:2f:39:e8:89:54:3f:c0:81:13:
1b:69:ae:ab:21:18:8a:be:44:b5:b7:63:0e:cc:45:ac:f5:ea:
0b:96:0e:1e:68:02:d1:a2:51:8a:ad:e5:21:6b:27:d9:3e:e3:
e0:b1:42:a3:28:de:77:98:38:3f:1b:0b:45:42:35:ee:97:f5:
c9:a2:11:ee:90:31:3a:49:00:bf:97:e2:79:b3:87:49:68:48:
1e:c9:c7:8c:ed:42:cd:bb:23:22:04:29:d7:31:4b:42:ed:91:
e5:cb:a8:a0:19:c1:e8:3a:15:ce:6b:95:a3:f3:52:a5:ec:b7:
f1:7e:10:8e:24:d2:f1:00:1e:b1:1c:32:37:82:1d:91:bc:71:
67:fb:d0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:26:08 2025 by rpki-client