
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: gP4U9U2qn53oitkU1FrknrmPJ4M3VRNXWch93+AWc2s=
Subject key identifier: 50:35:31:C6:35:11:00:11:37:18:D1:69:0A:00:E5:C2:81:E3:CA:5B
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 0197469DD5B47266B5B196BA73A3C609DEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 1294
Signing time: Fri 06 Jun 2025 19:00:38 +0000
Manifest this update: Fri 06 Jun 2025 19:00:38 +0000
Manifest next update: Sat 07 Jun 2025 19:00:38 +0000
Files and hashes: 1: 39NfMlHhrMH0zRyfZciiqR6mIWs.roa (hash: y/nnfdi8YIAf5ZNy+0/8yGvD2yVcPkZoC4V02tMUx4U=)
2: Kj_GYCscFmlVFFmndDSFfAkuFwY.roa (hash: 6AgFYxmuaSYjaFZUd8eJPcRWj8cD+HYqY6zQ9lI9XGM=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: aFmWE/JaPvgDjSDYvXCWLs/clH0CeQWuHZtRqoadMsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:d5:b4:72:66:b5:b1:96:ba:73:a3:c6:09:de:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Jun 6 19:00:38 2025 GMT
Not After : Jun 7 19:00:38 2025 GMT
Subject: CN=503531c6351100113718d1690a00e5c281e3ca5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:36:dc:e3:ce:1e:a4:41:f6:a5:17:1b:5d:dc:
3d:78:94:fe:20:2a:2f:c0:33:66:67:8c:82:aa:90:
34:02:44:da:be:cb:1a:e9:23:ae:71:53:7c:95:5e:
b9:cd:e0:4b:e2:e9:52:6d:35:82:7b:e0:c1:03:43:
59:0d:c2:68:0b:20:c9:d1:83:ce:38:a1:fd:b3:ca:
7e:30:26:74:19:c6:f7:c9:35:3d:5b:e7:a1:e1:fb:
0b:1f:01:04:07:52:4c:3d:d5:74:da:e2:50:7c:53:
81:ec:a4:40:eb:62:2a:2b:55:eb:c9:5a:03:ae:21:
8f:f7:fd:2b:ec:f7:e7:3a:c7:9e:25:53:8b:d4:06:
a9:bd:c6:67:e7:e9:c0:b6:cd:dd:47:31:1a:b2:85:
ee:9d:78:dd:4a:64:19:05:2d:69:c4:36:9a:9e:f3:
6e:6a:9f:4a:61:d8:c1:2f:3a:d6:45:7a:4b:1f:5f:
b5:f6:a9:49:b2:79:c1:85:60:6d:13:19:92:09:86:
fb:7e:9d:a0:87:5f:a7:1e:47:9f:6a:12:7e:96:9b:
84:4e:5a:bb:bd:bf:dc:9a:33:54:70:70:5b:7c:e0:
4b:c8:91:48:69:64:51:b7:c5:75:5a:7d:00:65:4e:
b7:93:3e:60:cb:de:1d:46:d1:e5:21:fb:29:5c:88:
2c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:35:31:C6:35:11:00:11:37:18:D1:69:0A:00:E5:C2:81:E3:CA:5B
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ad:6e:54:5e:79:b9:ee:66:0d:b4:e4:03:94:3a:32:65:69:
93:02:37:64:0d:5a:81:72:44:cb:a7:3a:f9:41:76:5e:d4:91:
f5:75:6e:83:58:85:fd:9b:6d:48:75:5b:ca:e2:ee:02:6f:ec:
e2:cd:ca:35:8b:71:0b:b5:d9:69:f9:23:32:4e:45:24:0d:6b:
57:fa:ce:17:06:8e:1b:90:be:4f:ff:bb:de:4b:1a:5f:85:8a:
69:65:c5:86:57:12:48:ac:19:68:79:ca:48:e0:7c:38:45:04:
f4:8f:d3:cb:e7:c1:f2:b0:79:d2:d4:a7:bf:f6:f3:5a:e2:42:
63:67:c8:85:50:63:12:13:e4:c5:62:25:df:db:ee:1c:b1:93:
d6:2d:84:cc:c8:2e:82:80:9f:1d:a7:2b:3e:7f:93:52:a2:30:
db:38:96:36:54:89:ba:ce:7d:01:1c:b9:e0:56:f9:71:b7:59:
11:11:85:49:7b:f2:29:3c:39:31:ac:0b:ea:0d:1c:ca:86:fb:
b2:10:09:67:8a:68:c2:57:cb:d9:6d:0f:bc:a2:ea:3b:13:b5:
c2:cf:4f:86:c9:c3:d8:ea:e9:62:6f:7a:6d:eb:1d:59:44:5a:
79:5f:5f:fc:85:34:2f:b7:f5:93:91:8b:23:20:48:ed:fd:6a:
c8:9f:20:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:45 2025 by rpki-client