Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
File: xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft (raw, json)
Hash identifier: jC0m8dky20fdd9Au3zd9b5mVUdBg4L5maiDgaFomHgc=
Subject key identifier: A4:D7:75:62:0E:E8:05:6B:BF:77:27:16:A7:82:DF:F0:37:52:4A:BE
Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
Certificate issuer: /CN=c72e716353ec733ab4b5085308b386d89a74f147
Certificate serial: 0197500EDC18C531A6815D633A17058FF0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
Manifest number: 0DCC
Signing time: Sun 08 Jun 2025 15:00:40 +0000
Manifest this update: Sun 08 Jun 2025 15:00:40 +0000
Manifest next update: Mon 09 Jun 2025 15:00:40 +0000
Files and hashes: 1: i4OTVeCSPxgmFusN2MGQeEwphSs.roa (hash: swOQwwO4f3RtKfp1taiB7zCxN/mO3jgsarXonpS2zBQ=)
2: xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl (hash: PnvejgB7D8HhcdB/wJTMmY2x9lNgm4a9TGwhh68NO7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:dc:18:c5:31:a6:81:5d:63:3a:17:05:8f:f0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147
Validity
Not Before: Jun 8 15:00:40 2025 GMT
Not After : Jun 9 15:00:40 2025 GMT
Subject: CN=a4d775620ee8056bbf772716a782dff037524abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:f6:75:60:2e:1a:65:62:e5:2d:e7:6f:c8:
93:e6:df:9e:98:75:8e:2e:ab:b1:75:5a:37:c0:be:
b1:03:80:ec:28:91:00:b2:b4:ba:6b:15:f2:52:64:
11:2b:fa:d6:2e:17:91:91:8c:f5:26:78:b0:6a:e9:
a4:67:62:df:36:81:13:94:22:03:c5:18:2e:90:63:
90:fc:6f:24:13:a4:77:3d:8b:01:d0:58:66:e1:f7:
be:36:ad:4d:6b:29:ad:bc:d7:77:37:76:ed:e2:74:
c8:37:f7:94:85:13:4c:25:bb:a2:20:71:10:14:f8:
66:08:4d:3f:7b:2b:e5:ef:5a:9a:e3:91:28:31:15:
e0:39:f9:0a:e8:98:8e:2b:59:f9:6a:7c:88:ab:b7:
ff:3a:42:6a:95:f8:63:3a:d7:e6:d3:2a:b2:35:9b:
f5:8c:bf:ee:39:c7:a3:07:ae:4a:8c:5e:2c:ca:6d:
5d:ee:12:72:a8:c0:22:4c:ef:aa:5d:21:ed:bd:ae:
81:bd:10:a6:d2:ac:a4:e4:fd:07:d7:7c:0c:a2:db:
5a:4a:b7:92:f9:44:1c:a4:88:4f:ab:76:85:14:9e:
9f:2c:59:64:b4:fc:26:3d:e0:68:0e:fa:bf:3a:41:
3a:49:c4:a0:c2:43:ec:70:66:28:94:e3:94:99:f3:
0b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D7:75:62:0E:E8:05:6B:BF:77:27:16:A7:82:DF:F0:37:52:4A:BE
X509v3 Authority Key Identifier:
keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a7:9d:f0:0c:e1:e7:fd:34:83:0c:84:61:ec:34:09:7e:d9:
6d:d5:0c:3e:57:d7:4f:08:4b:d5:ca:d5:f2:44:80:6b:97:da:
66:35:11:22:ac:90:9c:5a:0b:ab:33:03:14:39:e0:b2:c4:97:
88:92:7d:0b:14:66:3c:1d:a3:0a:ee:df:86:ce:93:56:5e:0e:
11:e0:94:e4:76:69:98:7b:77:25:2e:bb:02:e0:26:00:5b:26:
d0:d6:62:93:19:cd:2f:5a:2f:5e:b2:ea:16:4e:67:2c:ea:b8:
62:0d:c0:02:01:99:fa:e2:25:68:11:79:b3:dd:54:e1:3f:60:
ea:26:5c:db:6f:79:10:79:70:80:44:5b:36:44:9f:fb:a3:73:
57:e1:e6:18:b4:3c:86:57:c6:58:65:ad:33:3a:34:8d:28:d5:
0a:b8:c7:fb:78:b9:b1:e3:4f:a3:a7:6d:0f:40:46:f5:10:b1:
92:c2:b4:d9:be:df:e6:7b:a2:db:79:62:0e:2f:08:ac:8c:93:
6f:fe:32:0d:42:b7:61:85:9f:53:08:30:b9:3c:d0:a7:74:52:
c6:f4:27:91:39:4c:2c:fe:54:7d:f7:6c:f8:94:9e:a6:b0:19:
99:bc:fe:d4:91:48:79:dc:3d:9f:04:7f:e6:20:27:ca:97:0d:
e2:fb:b6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:25:32 2025 by rpki-client