Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
File: xNN466ZI9D5TpKQeE0uQExypPNg.mft (raw, json)
Hash identifier: l7eV3bsM5gFcq6BaIBQH1OKHcSUfn+sywMGjRXuusM0=
Subject key identifier: CD:9C:5F:3F:DB:56:91:1C:89:8A:26:F2:11:F0:62:C5:97:F9:20:FE
Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Certificate serial: 0197586DEC37066CDA42573B75C580D5D8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
Manifest number: 0AC5
Signing time: Tue 10 Jun 2025 06:01:28 +0000
Manifest this update: Tue 10 Jun 2025 06:01:28 +0000
Manifest next update: Wed 11 Jun 2025 06:01:28 +0000
Files and hashes: 1: gsd0lN6ZnIrIQD5lIwOejLd2Dv0.roa (hash: n34ueBlgPlEEtyoifu0C2ju9FVvPJQshh3AnTXlwP14=)
2: xNN466ZI9D5TpKQeE0uQExypPNg.crl (hash: g764gpRt31Q3RkN41jAka1zqDZ+4OEgQCY6jvPK+J7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:ec:37:06:6c:da:42:57:3b:75:c5:80:d5:d8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Validity
Not Before: Jun 10 06:01:28 2025 GMT
Not After : Jun 11 06:01:28 2025 GMT
Subject: CN=cd9c5f3fdb56911c898a26f211f062c597f920fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:56:c9:de:c6:36:93:4c:09:56:10:bb:9e:71:
f0:33:12:40:f5:40:0f:26:2d:14:0b:6d:b0:ca:f1:
10:80:12:69:88:53:27:7e:90:7a:e3:99:a9:5c:cb:
e9:43:07:46:3d:79:99:1e:c9:ec:58:1d:dd:2e:9a:
38:52:f3:38:e9:57:dd:cf:2d:ae:c6:5a:9a:04:fe:
b1:0b:fc:b7:70:d2:82:8a:dd:15:4b:03:9f:f7:48:
f2:bd:79:0f:84:a0:ea:90:1f:a3:36:74:c4:fb:99:
81:be:60:ea:84:ff:dc:6e:77:38:b5:0c:40:b2:ae:
a6:3f:dc:af:31:da:bb:c6:8d:e2:c9:2e:4e:76:be:
19:35:b5:ff:f4:2b:f3:13:ef:91:ae:6c:3a:bf:ff:
54:15:ec:42:d0:69:70:5d:90:3a:65:4a:b1:7b:0a:
60:05:d2:c5:48:bb:99:86:17:9d:a6:30:55:6d:e1:
c2:77:77:d2:e7:ed:bb:61:28:fa:7d:b7:41:96:1f:
b8:74:f7:27:94:37:27:f9:1f:a4:d4:73:29:0d:22:
2b:81:9b:27:24:14:3e:3e:e8:8d:e9:9e:68:3e:c9:
6b:c0:0a:1d:7a:4e:d7:65:75:d6:0b:7c:80:c4:64:
89:39:5e:30:e5:4b:d4:e4:97:29:8c:48:15:51:cb:
dd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9C:5F:3F:DB:56:91:1C:89:8A:26:F2:11:F0:62:C5:97:F9:20:FE
X509v3 Authority Key Identifier:
keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4c:38:64:4f:68:04:a3:72:30:44:3f:e0:b4:e5:df:60:e0:
33:a1:df:ab:51:51:26:0c:de:b2:ed:ac:97:42:c6:74:02:d7:
9c:06:9b:43:ff:93:5f:6d:78:83:f2:b5:d2:1e:dd:51:5c:63:
80:eb:cb:50:05:8d:5b:cf:62:5b:fa:73:82:ef:f4:2e:4b:b1:
58:8c:70:c1:c4:a6:a5:95:7a:03:13:c6:f1:60:e3:fc:fd:2c:
96:e0:40:96:4f:65:e8:67:f7:2b:51:bc:02:5b:4d:12:a0:50:
77:5d:f0:c6:74:20:53:15:03:9a:bd:b2:1d:c5:35:f7:03:50:
2f:35:0a:42:4b:68:83:f6:0b:4e:82:1e:83:0d:6e:e7:94:cd:
0c:7c:ba:a1:24:67:4e:d8:d8:1d:72:11:1a:f2:91:9e:3c:93:
24:e8:1d:80:cd:06:c9:56:6f:bf:46:d1:a8:10:dc:56:55:dd:
69:b5:d9:a6:eb:a2:32:ad:0e:c1:8e:17:a4:55:0e:9c:be:c1:
0f:0e:3f:44:3a:1c:88:f4:09:41:83:5f:8e:ce:d5:1d:c0:d9:
f6:54:7d:eb:68:2a:17:55:d5:e5:72:40:4a:24:6c:35:2c:80:
64:7d:e6:25:21:2f:09:21:a0:26:77:4b:6f:89:3b:76:20:40:
e3:12:b8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:30:25 2025 by rpki-client