Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier: HHyXP2bysMJChD3yFhQSIEcBeWxwTuHw5H0EaWRrIoU=
Subject key identifier: 20:A9:66:BE:22:D3:D9:4B:7B:39:D4:5D:9B:2A:0E:40:3B:6D:80:65
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial: 01974DE97E567C43EBB0F387710856E5F648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number: 0AE1
Signing time: Sun 08 Jun 2025 05:00:37 +0000
Manifest this update: Sun 08 Jun 2025 05:00:37 +0000
Manifest next update: Mon 09 Jun 2025 05:00:37 +0000
Files and hashes: 1: kF7mXs8Y_UB13udEpA0xGHCjAro.roa (hash: /PhN9JbWE0fzSWBg1QkZrpWYEK+tJrQFKSHOqe1g6qY=)
2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: sPHOz2oFO8K5LHnozMfMi67yBwU/LUw1qx0rMAp3Htw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:7e:56:7c:43:eb:b0:f3:87:71:08:56:e5:f6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Validity
Not Before: Jun 8 05:00:37 2025 GMT
Not After : Jun 9 05:00:37 2025 GMT
Subject: CN=20a966be22d3d94b7b39d45d9b2a0e403b6d8065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:93:51:65:35:03:35:b9:f5:48:8a:f1:d0:
a2:b6:74:b9:f5:80:01:22:10:14:aa:dc:1d:c2:03:
b8:2b:2a:e6:c6:34:69:60:7e:fe:47:89:ec:ea:21:
ca:d3:73:29:7c:b4:c4:48:0d:87:d4:98:70:e8:7e:
04:77:75:c0:fa:8a:aa:6f:51:6f:20:88:a9:b2:e8:
24:f1:fb:0d:6e:b4:d7:4e:09:0d:f5:db:6b:d1:ae:
6a:8d:c4:b1:f8:4f:f8:ce:78:dd:26:0b:cf:92:ee:
52:5d:91:01:19:b1:83:61:21:bc:04:ab:eb:f4:27:
8c:8b:0e:fe:54:05:84:b2:fa:7e:03:e3:98:40:35:
0b:7c:95:f2:58:a6:cc:24:42:0a:d8:cb:ab:4c:de:
6c:a0:0d:8b:48:6e:5f:a8:d3:8f:d9:a3:a0:4f:5e:
5e:99:a2:7b:6a:3e:43:68:4f:54:c8:ba:b5:4e:f8:
05:e8:fd:11:2a:3a:63:67:ac:43:28:32:ae:8b:ba:
30:de:f1:40:c0:52:13:98:c0:34:41:1a:ab:bf:9f:
44:ed:e3:2b:0a:f3:91:f4:bd:0e:a1:1a:bd:eb:a2:
06:37:0b:e8:fd:d0:42:ab:aa:70:dd:81:c2:5b:1f:
4a:e8:bd:a8:c6:0e:84:c8:22:9c:2d:97:20:ac:ea:
ce:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A9:66:BE:22:D3:D9:4B:7B:39:D4:5D:9B:2A:0E:40:3B:6D:80:65
X509v3 Authority Key Identifier:
keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:62:cb:60:b6:cd:41:ca:5e:36:12:2d:9c:ed:a8:b0:d8:d6:
70:d3:a8:68:be:c0:c4:ef:a1:f5:d4:03:f4:85:b2:02:e4:bf:
3b:1f:89:cc:23:36:45:c3:5a:15:05:50:45:7c:40:43:d4:1a:
f9:d5:f2:f1:1b:65:37:61:e2:a1:c0:a9:1d:c9:1e:79:1e:a3:
b0:f9:30:21:fc:c3:13:77:91:9c:5d:af:34:b3:2a:41:76:fb:
39:e4:e4:6c:4d:69:fc:68:c1:a8:b3:7d:e7:5c:da:31:90:0e:
91:da:23:31:05:ab:47:de:55:9b:01:f3:f0:b5:46:2d:7b:77:
0d:71:50:43:0b:5f:40:d1:be:5f:8c:a2:a6:e2:61:52:1d:31:
b6:df:b3:ab:e8:b8:7c:a7:9b:85:8b:8f:c8:da:9a:2f:73:22:
5f:32:38:27:4e:63:c7:ec:dd:f8:58:3d:6e:25:a4:8d:47:3c:
5f:63:9e:bb:45:d0:a9:26:e3:79:f0:a5:e5:a9:4e:ed:84:77:
d9:89:30:e4:d5:3f:14:2e:0c:1c:13:c9:14:d3:0f:23:24:59:
51:4c:91:8f:0a:9c:6d:b3:ef:6d:ac:14:1f:2f:ed:d4:e2:e8:
db:9e:aa:e5:82:28:82:1b:86:ac:99:24:11:2f:8c:ac:eb:d1:
6f:8f:40:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:50:15 2025 by rpki-client