Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: JM5jpIE0uRI4Lka66d90XIwSxphQyBnxZFfRG1N/ubk=
Subject key identifier: F7:13:8A:5B:77:39:EF:FF:E3:87:C0:51:D3:BA:BC:01:91:46:1E:50
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 019763954DDAA6D2635B8D2C50539B94BF07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 151E
Signing time: Thu 12 Jun 2025 10:00:18 +0000
Manifest this update: Thu 12 Jun 2025 10:00:18 +0000
Manifest next update: Fri 13 Jun 2025 10:00:18 +0000
Files and hashes: 1: MPJbxNfI4E3-o9R3b5LoavuNf_M.roa (hash: YmpwW40yFr+eOmaR9up2PE3Zd5XCNeKEz4dO44qxY0o=)
2: dRZw3Usb2yz3p3d9m-6XMO158wI.roa (hash: JliEihs4bCSiKbM0gL/JHcl4AanPExI+3YUAO/UsNWk=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: lkQcSzUU7VjzysW2MuXf2f3rbpvDFZH8eUkWo3sljMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:95:4d:da:a6:d2:63:5b:8d:2c:50:53:9b:94:bf:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Jun 12 10:00:18 2025 GMT
Not After : Jun 13 10:00:18 2025 GMT
Subject: CN=f7138a5b7739efffe387c051d3babc0191461e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:68:e2:7a:44:ee:ce:08:7a:59:6b:f5:4b:
d1:c8:c0:de:85:7b:cb:be:1e:f8:ca:52:79:8b:98:
a5:e3:b8:5f:22:a0:a9:f8:37:7e:c7:74:2f:ca:dc:
e8:9c:0f:04:5d:e5:9f:dd:35:33:f9:57:5f:f5:20:
f1:45:b1:64:cc:d9:97:c6:70:4c:08:42:14:25:27:
5c:fa:17:e7:8e:00:8a:3c:7c:92:02:b9:dd:d1:e7:
38:64:48:e3:72:40:79:1f:cd:c8:9c:f7:22:f4:5e:
8c:ff:d5:c5:d1:66:d2:6d:7e:e6:5a:29:c7:0a:aa:
63:6b:9b:8c:55:04:6a:89:63:d1:96:2a:00:8d:0b:
43:34:ba:d9:73:23:e0:33:fc:37:5c:51:13:04:f0:
55:74:13:a2:78:b5:62:41:2f:2a:ea:82:75:34:d2:
1e:7c:43:5f:b0:72:48:1a:13:14:3e:09:15:0a:76:
57:59:2b:6d:a3:cc:e6:00:49:0c:b0:81:cd:ee:86:
7e:e6:ee:2d:bc:93:f9:a7:87:a5:4e:10:8b:69:f3:
4e:64:f7:d2:70:74:f9:0d:31:54:55:0e:48:da:38:
5b:e1:1d:ee:1a:07:47:0b:60:65:b9:e5:9e:e0:2f:
1c:eb:92:b3:74:72:95:af:49:02:f8:7c:07:a9:88:
c0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:13:8A:5B:77:39:EF:FF:E3:87:C0:51:D3:BA:BC:01:91:46:1E:50
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5b:f3:59:a3:96:99:13:79:50:9a:af:da:f9:95:49:8d:83:
6f:62:3a:55:32:95:99:e9:e2:84:53:df:a9:be:36:17:72:67:
0e:70:b0:c5:62:3c:c1:59:b9:80:79:15:8e:d6:9e:d5:a1:55:
93:a9:0a:cf:7f:92:cb:68:15:40:89:af:7c:05:d1:e4:10:3b:
a2:11:b0:69:e7:61:13:d9:4f:5f:1c:0f:76:33:36:b7:2f:24:
33:7c:fc:f9:a9:d4:25:d7:f7:c5:ec:8a:f8:b1:23:fd:14:6c:
36:23:7e:f5:b6:4b:fe:23:32:a1:9c:d1:26:07:ac:48:26:73:
53:1f:58:7b:df:ac:eb:82:37:29:df:58:ce:6b:81:06:68:2d:
82:b2:14:7d:32:92:a8:19:cb:a8:4c:a0:74:c7:6a:d4:60:6e:
9f:ae:e8:9a:34:eb:55:09:6b:61:ca:92:94:6b:db:ef:7e:a4:
89:78:ad:1a:75:f8:74:45:96:65:06:ea:a4:29:b0:45:00:5e:
16:5a:73:bf:27:cf:00:45:e5:bc:c4:85:33:82:c5:82:f3:ac:
39:d2:34:30:63:40:7a:fe:7a:d4:c0:39:92:ef:83:4b:cc:b3:
a3:e0:c9:e2:78:5f:ee:26:4d:8b:0f:d4:eb:58:a5:15:c7:2e:
50:31:d4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:12:04 2025 by rpki-client