
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
File: xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json)
Hash identifier: 2dlzok3x4pCUnDHf6xMUMR/GVPBiFWSTG5xaMwmpEt8=
Subject key identifier: 54:A5:40:5C:5E:22:47:41:CB:50:EA:FE:C8:3B:0D:45:E3:4A:55:4D
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Certificate issuer: /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial: 01976471153D08C04C25E6857D3BE5BA6620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
Manifest number: 0BA4
Signing time: Thu 12 Jun 2025 14:00:21 +0000
Manifest this update: Thu 12 Jun 2025 14:00:21 +0000
Manifest next update: Fri 13 Jun 2025 14:00:21 +0000
Files and hashes: 1: P4yNArORhRajtqPmpQlRZeYbVZ0.roa (hash: ovgY1UfKMguzJWbAh8dinNkUhXWsmPXDNNDIC/A76qQ=)
2: hR41RYuMBKXN5Hx2ppbw_fKnwEs.roa (hash: xBN42LVsiTw0l1r5bKypPkW/0D8ZgYMg2XduaOrWfic=)
3: wmwzHnavsbNneHL_oBiaJZvkaxE.roa (hash: uKd6LFv+jY/CzqKajEjXp9d0rGUr+SNw31zSoDV1LhM=)
4: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: SSFc9W0olnq4ObhLkg85wTnEPbNQYA0YizJiULHFnl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:71:15:3d:08:c0:4c:25:e6:85:7d:3b:e5:ba:66:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
Validity
Not Before: Jun 12 14:00:21 2025 GMT
Not After : Jun 13 14:00:21 2025 GMT
Subject: CN=54a5405c5e224741cb50eafec83b0d45e34a554d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:8b:8a:d9:fe:04:d1:ee:a7:6e:5e:f3:b1:
27:70:ef:a8:25:ee:67:3f:cc:56:7a:68:18:42:e7:
f8:94:59:b3:55:be:ef:e2:27:7f:68:96:51:68:79:
35:19:fd:2f:67:63:fd:54:83:65:b0:89:bf:bd:c3:
37:0d:c7:66:20:d7:ff:3f:db:90:f4:1c:76:3a:24:
93:0a:cb:c0:88:49:e5:99:ea:8c:55:5e:02:03:3f:
85:eb:14:33:d5:92:25:b5:d3:41:bf:0c:5e:1d:07:
34:84:b9:49:f0:4b:ce:c6:54:ce:cf:cd:48:bf:bc:
3c:b2:42:4f:56:7b:83:7d:3e:3d:6f:a9:d6:ff:0a:
c9:f0:38:ba:be:eb:8b:63:39:28:57:8a:aa:88:68:
1c:7a:e2:dc:94:d8:39:9e:88:86:98:97:1f:b8:ca:
d0:8f:02:5e:67:96:63:bf:d8:9f:80:f9:08:1f:ea:
1a:26:a9:16:2e:84:8f:8a:7c:ef:89:8f:8e:70:bb:
2c:8e:7c:b1:4b:10:38:e6:df:d4:07:09:c7:12:03:
ec:21:e7:c8:0f:ea:de:98:75:13:a2:b9:f5:27:35:
85:59:8e:3a:85:7b:5d:68:84:88:36:8a:07:93:e5:
b5:b9:a5:f9:af:d9:a5:72:b8:03:d7:f2:8d:eb:0f:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A5:40:5C:5E:22:47:41:CB:50:EA:FE:C8:3B:0D:45:E3:4A:55:4D
X509v3 Authority Key Identifier:
keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:64:c7:15:75:d4:c7:bb:fc:c9:e3:21:cb:1c:b2:6f:f8:f7:
69:1d:7d:e9:d3:26:d6:29:bd:71:16:d9:15:94:5b:9d:d7:91:
e4:8f:2a:db:68:3b:a8:3b:83:27:fe:1a:b1:00:db:39:4e:7f:
55:4d:8f:ac:3e:62:86:df:e6:5e:42:29:e2:74:0b:bc:b5:d4:
c0:79:cd:dd:ea:cf:0c:d8:f0:8d:18:d2:b6:16:18:4b:0b:49:
4c:f0:c9:f0:32:a3:44:57:a2:20:c5:b7:62:ce:e5:3f:8f:20:
d3:d5:d4:60:8a:94:82:3b:55:53:ed:38:48:75:e9:09:55:dd:
98:84:55:2b:3a:d4:43:e6:82:fe:49:1d:16:58:1d:cb:8b:7b:
66:e9:27:61:fc:d6:c0:25:60:b2:b7:c3:86:5b:7f:d7:32:c8:
26:29:6b:9a:01:b5:6c:67:11:a8:9f:45:ea:ef:3e:52:29:1a:
45:8c:73:c2:f3:b3:08:aa:df:07:34:12:6a:91:1c:28:d8:97:
44:b4:b4:a2:9b:2f:2a:9a:48:c8:99:3a:df:a5:1c:59:cd:a3:
0e:21:e0:a0:7d:5c:f1:dd:2e:99:3b:2d:1d:e9:34:8d:56:03:
df:b4:b1:9d:76:2e:c9:81:2d:7c:7d:39:c5:8f:9a:cc:6d:61:
45:56:05:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 19:17:34 2025 by rpki-client