Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
File: xmpfK0aNs161Yr034fNuzqgTzKw.mft (raw, json)
Hash identifier: KMzgyAxVDs7hWFpOYj9a4T2WQIF3WZaOnvlbEQmOYtk=
Subject key identifier: A3:F0:21:58:B6:E3:AC:2A:16:7A:27:AD:D2:BE:CB:A2:4F:4A:E8:7B
Authority key identifier: C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
Certificate issuer: /CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Certificate serial: 0197D7ABE30E41D8C72BA3CFC75EE922A3A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
Manifest number: 15C7
Signing time: Fri 04 Jul 2025 23:00:55 +0000
Manifest this update: Fri 04 Jul 2025 23:00:55 +0000
Manifest next update: Sat 05 Jul 2025 23:00:55 +0000
Files and hashes: 1: TWq28Ae0YWlnL9QMmIL7aFBiUGw.roa (hash: +h8RDHE7R4Fi6gqXkHnd/C2ymQ77DKFkbRcxLwhFxSk=)
2: xmpfK0aNs161Yr034fNuzqgTzKw.crl (hash: 4WqNLhp9ze2xSN0HezyZzz0rRGWa378uVvc09o81hkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:ab:e3:0e:41:d8:c7:2b:a3:cf:c7:5e:e9:22:a3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Validity
Not Before: Jul 4 23:00:55 2025 GMT
Not After : Jul 5 23:00:55 2025 GMT
Subject: CN=a3f02158b6e3ac2a167a27add2becba24f4ae87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:c2:a5:9e:0c:c8:73:b6:bc:b3:be:b1:24:
b5:f9:98:0f:f2:e9:e7:fb:17:87:47:2f:fd:e2:d3:
08:99:1d:eb:0d:4f:c2:7d:94:9e:ed:a2:d2:55:1d:
04:17:d3:f8:8e:84:a0:57:4e:9c:55:17:db:1b:74:
99:9b:9a:ab:60:a4:4e:12:86:09:c8:72:ca:e4:12:
43:a4:d9:8e:ed:a6:fa:aa:1b:ab:0a:7a:4e:cf:66:
dc:bd:c6:b1:2a:93:c5:1a:f6:fa:1d:20:c0:da:f3:
61:10:2a:20:09:b2:3d:46:4f:3e:97:28:c0:c0:d0:
13:e2:ab:d4:6c:c1:82:14:c7:84:d5:1a:50:df:96:
a3:dc:64:c9:39:22:d9:dd:a1:00:c7:27:b4:3d:f4:
ce:9c:82:35:6b:af:d0:f2:97:04:28:d3:01:4a:90:
22:b9:70:74:26:bb:eb:7d:d7:33:4e:ed:58:c0:5f:
f1:e3:1b:94:df:b5:a9:96:09:3a:3c:52:f9:77:2a:
3f:62:09:86:73:e3:e9:c1:84:92:b1:3d:23:c4:ae:
01:4a:0d:1a:eb:ce:11:20:38:dd:4c:9e:3e:16:72:
62:44:d6:20:a0:eb:08:1f:1b:ea:d8:9f:b1:13:ef:
71:9d:c3:9f:1f:fb:9d:7a:68:85:3e:67:f1:c8:fc:
64:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F0:21:58:B6:E3:AC:2A:16:7A:27:AD:D2:BE:CB:A2:4F:4A:E8:7B
X509v3 Authority Key Identifier:
keyid:C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e2:29:be:a9:92:98:e9:75:7e:42:25:ec:9d:92:0e:b7:be:
e9:d2:5b:f1:be:6b:cf:bc:2f:35:bd:6e:4a:cc:9d:50:98:a9:
9a:3e:64:df:50:d0:cf:96:e3:81:74:be:0d:ba:2f:4b:f7:8e:
bf:c3:76:cf:42:60:6a:e8:8f:04:b3:93:f1:5f:ce:5f:89:32:
da:f7:96:ef:01:94:71:b8:dc:c9:99:c4:7a:18:48:05:64:3d:
7e:0f:3d:fb:5f:56:64:4d:87:ac:3b:ba:13:e6:fb:a6:ac:0c:
f0:e5:b3:1e:7a:39:b6:27:fe:25:f7:f2:a4:b7:f1:c7:20:22:
b5:1d:d3:9c:00:eb:4c:91:35:e6:b2:62:10:0a:3e:60:ba:7f:
94:cc:5a:ed:04:65:ba:90:da:51:9e:14:85:9f:10:53:3d:5d:
ae:0c:0e:79:33:d9:97:67:e9:b3:82:49:f3:14:a1:e4:f1:0f:
81:a5:b3:4e:2b:92:16:e5:55:92:5f:cc:1d:33:03:d8:ac:de:
81:d9:92:49:6f:e6:07:9e:86:4d:f4:71:b0:6d:05:d7:ef:11:
3f:97:a6:ab:53:d3:47:cd:b6:f8:87:fb:a0:bd:ab:cd:e3:fb:
1a:2d:9c:ad:52:bb:39:4a:87:bb:b9:c5:86:e5:05:1e:9d:81:
04:b9:f8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:38:27 2025 by rpki-client