Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: dSQ+AiHeGAS9m8sBmytGVc0pw06VNq0DDgOB6elyvjg=
Subject key identifier: 75:FB:82:F9:2C:78:18:C6:4F:BF:FB:4A:BC:E8:F0:D2:88:D5:6C:ED
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 019748FA982BE73F993434A6C86459E83913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 06:01:11 +0000
Manifest this update: Sat 07 Jun 2025 06:01:11 +0000
Manifest next update: Sun 08 Jun 2025 06:01:11 +0000
Files and hashes: 1: Ebbi4EbWyyrPidgJRRp68vOL4Bs.roa (hash: 9WQWjNic/0FRDbfcOWjEWw5V6hoDVQ6qvX3p7F6e6MI=)
2: VPM_H7o9qmHlZtW2Loh4LTUo-hc.roa (hash: vD0q++SStKTA4LMIpc6XJyVKbTisVo5txPsQMD5ggGA=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: phtQ07CgeZ4ogHJvsR5ufTOb9TOfbsKIXqecrxhnsRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:98:2b:e7:3f:99:34:34:a6:c8:64:59:e8:39:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Jun 7 06:01:11 2025 GMT
Not After : Jun 8 06:01:11 2025 GMT
Subject: CN=75fb82f92c7818c64fbffb4abce8f0d288d56ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:da:ed:a1:99:ea:90:e7:02:86:de:32:e8:
4e:59:b8:51:e7:d6:94:23:44:4d:34:aa:62:4a:47:
27:69:56:93:b7:75:17:9b:ce:b9:f3:bc:8f:31:85:
88:a4:ab:22:e1:fd:5c:31:e2:3d:cd:8e:75:25:84:
ca:a3:84:32:40:0a:2d:3d:a1:fc:32:be:0f:30:c9:
7d:b6:0e:cb:2d:2f:c7:50:f4:e7:0d:fa:9c:f0:3e:
c2:79:83:5c:c5:a4:06:4d:c0:eb:30:0d:6b:8c:5f:
b1:be:4f:16:e9:aa:b4:1b:92:98:7d:0d:0f:7c:1d:
67:3b:ab:42:5e:f7:48:46:93:25:74:89:41:80:b0:
99:ae:08:27:a2:e4:2e:88:92:ef:fe:ea:dc:23:51:
17:f5:21:d6:3a:b1:c1:76:fe:bd:3a:81:d5:a0:97:
a5:df:e4:3b:59:c0:f2:a7:04:12:de:22:3d:dd:5c:
7c:cb:69:f3:b8:97:54:08:ee:74:c6:8a:93:0d:04:
cc:96:33:e7:1f:50:75:4b:ad:fe:18:97:52:0a:e8:
bb:47:0f:f0:91:8c:be:76:43:d6:54:00:d5:26:c9:
21:42:32:6f:b1:64:e6:55:db:ce:af:59:98:fa:ee:
0a:96:63:2f:95:b6:9c:24:b6:9f:26:92:94:7f:7e:
ba:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FB:82:F9:2C:78:18:C6:4F:BF:FB:4A:BC:E8:F0:D2:88:D5:6C:ED
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:80:56:10:6b:48:fc:81:1e:70:10:ef:d5:69:69:05:01:5a:
ba:5b:4c:c5:30:65:81:a6:c9:bc:6e:6f:7f:e1:96:af:55:e7:
91:bd:b1:24:bc:50:47:90:00:90:12:3a:df:64:67:ed:ed:04:
a2:a7:23:bd:e9:d6:ef:76:31:01:5f:96:73:0b:81:20:b5:ac:
1f:6b:24:a0:22:67:0d:40:3d:6b:06:c0:a3:c8:4e:26:27:eb:
d7:69:64:f1:8d:ba:25:4e:73:fd:12:0e:3b:29:07:ee:e1:d1:
79:d7:61:c4:93:f5:1e:4b:1f:3f:64:f3:ce:65:e3:ba:07:61:
15:50:37:d0:e6:c8:db:6b:d0:02:4c:cf:9e:04:31:7e:14:b9:
68:2c:81:0d:cb:fe:aa:7b:9e:85:2d:b7:a5:05:26:d6:f7:da:
89:09:53:d5:88:61:97:6d:c8:93:3d:06:57:19:46:c9:55:73:
2f:7f:b1:5b:a5:47:e4:6b:7c:45:32:45:d5:21:4b:76:d2:5b:
60:ff:f5:3d:6b:4c:44:40:65:77:8d:1f:f8:33:41:39:21:41:
c0:07:e1:9a:93:32:38:16:44:cf:80:81:95:6f:65:3e:14:5d:
f1:e7:06:36:8e:9f:ab:f4:c1:fe:15:85:c4:95:b2:c5:69:84:
eb:20:61:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:35 2025 by rpki-client