Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File: xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier: mB8jMkJC3MY7Xnf7622CdCc5WIYAstX6IoQU95uTbSs=
Subject key identifier: FD:4F:40:9E:B5:92:69:8E:B8:FE:1C:07:E2:34:36:DA:72:0F:09:61
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 01974D7BDBE8C37FAC5481899F2E653234CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number: 14B0
Signing time: Sun 08 Jun 2025 03:00:52 +0000
Manifest this update: Sun 08 Jun 2025 03:00:52 +0000
Manifest next update: Mon 09 Jun 2025 03:00:52 +0000
Files and hashes: 1: PzyzSWT4zWJ7K4Xqd4I7pv369ec.roa (hash: kQSQuA7MhqelhKVGJ/f7HDWMP3sBIAz6W/9i3q+k7jg=)
2: afz7BRJzqEPxj8BZVsdOin_5y-4.roa (hash: 8P/qRECRaiQdIehiJb8DPPkG7wuZbj1mnaUAo4ZwGHI=)
3: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: 7EAQiW5goFVNzrZcgvfxkAyoEtKaDIMvGRlWr+aAVvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:db:e8:c3:7f:ac:54:81:89:9f:2e:65:32:34:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: Jun 8 03:00:52 2025 GMT
Not After : Jun 9 03:00:52 2025 GMT
Subject: CN=fd4f409eb592698eb8fe1c07e23436da720f0961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:10:d3:68:ac:0e:80:4e:38:55:eb:f6:c7:
84:03:1f:1d:ee:98:5a:ab:4a:93:55:18:d5:be:dd:
d8:4b:ad:6e:53:01:9a:f8:ff:48:dd:f4:ab:70:4a:
f8:6e:df:84:ff:47:37:93:40:0c:87:09:f4:2a:0b:
2d:94:32:f8:2c:2b:e2:c2:46:9a:bb:c8:fe:ca:37:
03:06:db:04:7a:35:79:62:27:37:af:12:ef:9c:2e:
57:6c:e8:cf:09:39:bc:37:15:52:f6:99:7d:0c:d3:
4a:58:4d:94:24:a0:11:9c:59:c7:c9:fb:c7:fe:60:
d5:3c:9f:bf:e4:29:c6:1e:b6:95:93:59:14:86:fc:
7d:ef:15:37:c6:06:03:58:9f:27:af:57:34:8b:c9:
f7:c7:6b:3e:a8:f6:38:db:f4:45:fc:22:1a:bc:94:
08:89:7c:73:f8:4c:60:a7:0e:27:41:fc:ef:3b:e0:
ad:3a:9b:6e:49:f8:49:48:6e:47:76:1a:34:0d:2c:
52:04:9d:77:99:bc:e6:aa:2b:c2:1e:1a:52:d5:52:
c7:84:30:e5:ab:7e:e4:1b:c9:bd:ce:c2:51:aa:cb:
9a:9d:c7:0c:a8:76:95:38:15:a4:7d:67:3d:c3:b7:
9e:aa:24:ae:c0:76:39:97:49:e7:a6:2e:4c:1d:4d:
54:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4F:40:9E:B5:92:69:8E:B8:FE:1C:07:E2:34:36:DA:72:0F:09:61
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:72:10:fa:63:e3:1a:7d:54:84:ec:52:9c:0a:79:fe:d7:81:
89:e5:de:a0:8a:dc:0e:f0:e0:f7:e2:5e:b4:a3:ce:78:9d:c3:
f0:fc:c8:d1:ed:d0:01:fc:f3:ec:9f:f0:4c:7d:64:13:05:b7:
da:ac:71:ea:b9:8f:62:79:2c:d8:d1:85:48:14:60:0e:38:4d:
a0:d8:52:1a:ad:4c:c0:0a:cc:89:72:d9:d8:e5:c3:78:9d:41:
15:a5:ca:4c:a1:0c:1a:ef:88:be:4e:d8:16:89:72:79:af:4f:
f3:58:59:0b:ae:99:aa:54:ae:3d:7e:94:d4:78:5f:2f:0a:c4:
be:28:3c:e5:c0:05:b2:a9:11:eb:0c:c0:19:c2:e3:a7:21:43:
27:ff:9b:3d:a9:0a:b8:28:f1:b2:db:d3:47:ff:12:d7:1a:77:
85:75:f3:fe:21:94:19:a2:19:1f:e3:c0:66:8b:3c:83:7f:ef:
68:84:d9:c3:2a:7c:7e:a9:5f:3f:9e:4c:a7:02:84:53:1f:cc:
0e:b2:0b:fb:8b:22:13:4b:ee:96:ba:ab:3f:72:ca:90:8f:ce:
06:af:c1:63:a0:8d:43:29:51:ff:30:21:81:3c:f6:f0:50:ad:
b5:4e:46:98:a1:03:cd:a4:be:e0:c9:67:72:df:ac:5c:b8:68:
65:a3:46:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:04:15 2025 by rpki-client