Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
File: xqvTc8xZUGDxozB2tT4RYlEsPNc.mft (raw, json)
Hash identifier: SYweePK8AjxIowuycHZ9OFT5kk1796uftT7wYHF7hUY=
Subject key identifier: E8:D0:40:62:A6:1D:36:B4:60:08:14:BE:D5:DA:60:24:4F:62:41:2A
Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Certificate serial: 0197504663EA482302C1D3D7CE9EBF5F98EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 16:01:19 +0000
Manifest this update: Sun 08 Jun 2025 16:01:19 +0000
Manifest next update: Mon 09 Jun 2025 16:01:19 +0000
Files and hashes: 1: Ry6CjTQauY6jePfF9K1aXRBPI1U.roa (hash: c9CRHRXe2zz0jhFDuzmDe52TtCa+3RwGF3AlfmTp4Fo=)
2: krks6C9REj8M_gHzn6hFi3S_Skg.roa (hash: GygsjxyP//HYKQINGkFpfbyTmj1FmIDGcflx1a5rTfo=)
3: xqvTc8xZUGDxozB2tT4RYlEsPNc.crl (hash: LBWb6O5ZcOvgs0SlDHgz1+czBEuqrhgBOv6btNzgKCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:63:ea:48:23:02:c1:d3:d7:ce:9e:bf:5f:98:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Validity
Not Before: Jun 8 16:01:19 2025 GMT
Not After : Jun 9 16:01:19 2025 GMT
Subject: CN=e8d04062a61d36b4600814bed5da60244f62412a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:95:49:bd:2d:df:e7:73:6c:5b:fe:a4:20:
38:bd:b9:e7:51:d5:6b:39:17:0e:87:f3:d3:71:ab:
71:f2:e3:60:a4:d8:dc:f3:27:40:13:ed:d2:4e:a9:
fb:70:f7:b3:48:bc:69:e4:27:48:89:9e:dc:be:d4:
93:10:04:b0:02:c3:70:3c:1b:b4:b2:cc:22:26:c0:
15:c6:3d:11:f4:ab:88:31:61:30:98:4d:f5:0c:b6:
ce:4c:76:26:f5:ba:e4:cf:d7:f3:50:64:7a:d4:e7:
18:5e:eb:6e:19:b5:d4:06:e1:57:b3:62:66:2b:09:
23:42:a6:87:09:77:17:75:bf:78:bc:da:cd:80:4d:
1d:ca:a5:6f:76:27:e6:8c:6f:6f:fd:d1:20:3a:66:
da:c5:06:d3:5a:14:d2:9c:7d:76:70:dc:54:d5:27:
9d:1b:c4:ce:49:bb:2d:bc:56:72:f2:95:20:b5:c7:
a3:55:92:8b:8b:75:06:eb:f9:86:ac:ad:0a:a4:b6:
d2:a7:4d:cf:23:0c:25:12:6d:b9:37:75:73:fd:1d:
46:57:07:80:6c:13:19:44:03:ad:82:25:de:ed:64:
61:a8:f4:9f:bf:98:7d:77:a4:64:3a:27:b0:bf:0a:
d0:ac:40:4b:41:e3:59:16:d6:f5:cb:76:3c:56:42:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D0:40:62:A6:1D:36:B4:60:08:14:BE:D5:DA:60:24:4F:62:41:2A
X509v3 Authority Key Identifier:
keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:22:6e:87:26:8a:d6:43:1c:2a:6c:3e:10:37:7c:6f:c3:89:
78:f0:3f:55:dd:28:70:46:93:2d:1b:ec:e4:ab:15:45:3f:8c:
75:83:5a:94:ba:40:f7:88:91:d6:ae:bd:1d:17:26:ca:35:8a:
72:54:23:1e:76:fa:a6:86:4b:0f:15:8f:a6:d2:82:bc:86:80:
e2:e4:e8:7a:e7:37:4b:98:df:97:bc:9a:7f:a4:73:5d:ad:32:
fd:70:ef:ce:40:29:58:a3:36:31:66:6b:3d:54:09:b0:80:d2:
c7:5c:ec:46:31:81:7b:cf:0a:c9:9a:d5:d2:38:81:ce:48:01:
a2:f0:da:61:3f:80:e5:e7:7a:56:ae:81:e2:36:26:4e:c9:9e:
fc:41:01:48:82:c7:b9:8d:09:07:f5:30:6e:56:88:38:9a:9a:
2b:9d:c5:a8:3a:fa:ed:16:7f:d4:e8:a8:20:65:93:58:d3:c7:
63:a4:63:48:84:e8:1e:24:3f:73:86:f1:ea:34:f2:b6:fe:91:
8a:7f:12:32:c7:1d:4e:c6:17:fe:29:f6:8c:54:92:1d:dc:27:
a8:94:20:1c:af:60:62:f8:ab:e8:19:18:7c:5e:30:aa:7f:fa:
7e:02:93:a4:f0:50:78:95:aa:55:be:58:61:61:66:36:e5:61:
2c:43:35:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:27:34 2025 by rpki-client