Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
File: xN29nyMJGTIb9WcG8QaTd5JhGfk.mft (raw, json)
Hash identifier: 8InglpPqPunRIP1jGreHPweku2E5j4YR2hEKDwLjthg=
Subject key identifier: CE:FD:5C:76:9C:9D:A9:51:CC:CC:77:7A:F9:73:97:CA:B1:60:7D:DD
Authority key identifier: C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9
Certificate issuer: /CN=c4ddbd9f230919321bf56706f1069377926119f9
Certificate serial: 0197586D81A4F2E9F65F3C47B68322938D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
Manifest number: 05A3
Signing time: Tue 10 Jun 2025 06:01:00 +0000
Manifest this update: Tue 10 Jun 2025 06:01:00 +0000
Manifest next update: Wed 11 Jun 2025 06:01:00 +0000
Files and hashes: 1: 7qr12EYwsdyti-EmLWqRDogionQ.roa (hash: 5LhmlqfCFcdrvGQgZrfHuGwVjCahrEpoNBu5iKMaA/w=)
2: JEh62edtGcPK6W4aI6E72di6xCs.roa (hash: PD42vAZ0BIX3jY6yqazrN5UUOFytkMhASMCFsoaVQJg=)
3: xN29nyMJGTIb9WcG8QaTd5JhGfk.crl (hash: eshVX7JRrjvDOCwMUXdYqQmLVUeJscQjkh1iOd6Krrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:81:a4:f2:e9:f6:5f:3c:47:b6:83:22:93:8d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ddbd9f230919321bf56706f1069377926119f9
Validity
Not Before: Jun 10 06:01:00 2025 GMT
Not After : Jun 11 06:01:00 2025 GMT
Subject: CN=cefd5c769c9da951cccc777af97397cab1607ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:6d:de:25:de:81:94:37:d5:b6:16:2e:0c:
7e:af:5c:18:60:22:c0:e1:3e:97:48:ed:7a:3f:52:
10:08:f4:79:23:1e:f2:7c:f5:cd:85:35:a5:92:9b:
08:bd:d1:62:13:9f:9c:00:5c:d1:a7:ff:22:66:3f:
bc:e9:3e:1b:d5:42:d8:20:2f:14:2d:28:c6:f3:05:
e2:2e:3a:d0:b0:81:ed:70:93:9f:4a:36:6e:e0:b8:
0b:cd:ba:54:d8:f3:7b:5b:48:1a:89:99:e5:08:50:
6b:66:cf:5b:39:1b:41:31:09:42:90:50:eb:c2:5d:
bb:16:1d:db:9a:e5:fd:4b:3b:10:94:e2:ab:63:fc:
93:81:11:5e:3b:bf:f5:d8:32:44:80:7e:64:01:09:
29:7b:ff:f0:f1:6b:94:41:cf:01:7d:9b:00:45:74:
12:fa:e8:92:1b:e5:0e:ac:d0:e9:9c:90:0d:c5:8f:
e3:16:57:8f:98:2c:3e:32:6d:1c:9e:e2:77:cf:07:
2a:b3:0b:f9:57:f6:5f:bc:47:86:b1:3d:59:41:37:
70:78:4e:f7:15:fc:bf:f7:3a:d5:1a:03:8c:81:8b:
0d:56:7d:f3:cd:58:c8:98:ec:7d:70:e6:d2:f3:d5:
fa:76:9c:b1:30:6c:38:9a:a0:fc:1a:1a:8e:ec:dc:
ee:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FD:5C:76:9C:9D:A9:51:CC:CC:77:7A:F9:73:97:CA:B1:60:7D:DD
X509v3 Authority Key Identifier:
keyid:C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:45:9c:8a:5a:6e:e7:2f:ab:f3:59:b2:a3:5f:31:2e:81:25:
72:e7:ec:5a:d6:bc:b5:1f:1d:4b:22:56:4a:34:57:70:70:76:
83:b5:ed:89:32:37:c4:65:5a:8c:0c:2b:6c:f3:2f:9e:48:b1:
4e:40:b8:81:20:fc:8f:19:d7:f1:ee:42:a6:13:28:18:b7:88:
dc:49:b7:dc:c7:fa:50:28:1e:1c:66:5f:d4:c4:e3:73:56:31:
9c:8e:a4:08:d6:f9:7a:57:b6:fb:f4:fe:5e:64:2d:9c:34:81:
d4:4c:4c:7d:2c:50:b9:e9:0b:fc:56:1b:0a:ae:ef:83:2d:58:
eb:5a:59:10:ff:bc:83:43:ee:dc:1a:dc:b0:20:c7:70:ec:bc:
a3:b9:4d:e5:3b:d3:3f:0f:35:1b:d3:16:e6:5a:26:40:96:64:
f3:91:31:9d:91:d8:2a:88:cf:a9:ea:b8:7a:6e:8a:1a:e8:8e:
bd:dd:0e:ee:7f:33:e7:63:9f:9a:2b:09:e9:06:95:ad:26:78:
61:2a:4d:64:04:26:a7:e6:52:29:2f:1b:c9:d4:15:12:5f:d1:
48:46:9a:79:cd:75:bc:a7:4c:72:27:3c:7d:89:6a:ab:32:6b:
83:f3:99:94:72:b5:3b:70:27:13:45:e9:6c:1b:fd:93:fd:31:
5a:e4:e3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:05:35 2025 by rpki-client