
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: y2OmnyKcKtfyK75N7D9KNlLQSqNII13Sfh8wwTjXIHc=
Subject key identifier: 06:F8:7E:3E:D3:16:BE:D8:F5:0C:2F:B5:8E:05:87:FB:CE:D1:AF:F7
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 01974E57F4A366B5F55E9F89F3C6A4717CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 07:01:16 +0000
Manifest this update: Sun 08 Jun 2025 07:01:16 +0000
Manifest next update: Mon 09 Jun 2025 07:01:16 +0000
Files and hashes: 1: nywPQh9QP-OhqhIRdI1AR086REo.roa (hash: fyTq9cJsDKGICMb+AhPPiPfngZOBuqPjdSV/9OfNj10=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: 48sgsTMW5TQR9OS1lgF4yllGQq+Y71sk1ighgZzz7bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:f4:a3:66:b5:f5:5e:9f:89:f3:c6:a4:71:7c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Jun 8 07:01:16 2025 GMT
Not After : Jun 9 07:01:16 2025 GMT
Subject: CN=06f87e3ed316bed8f50c2fb58e0587fbced1aff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:90:1c:75:65:cd:3e:08:df:83:27:4a:1e:f8:
09:13:7b:26:d9:f2:8d:50:6b:7a:e5:98:ff:51:51:
1f:2e:cc:ee:19:4a:6a:5a:a2:8e:5e:f3:f9:d9:00:
0b:d4:2f:ce:a5:fa:cd:ba:c7:0e:6f:4c:fe:c6:ee:
ef:9b:2f:52:4b:ee:85:39:03:fa:e2:7e:09:f4:a1:
b7:27:91:5e:4e:9d:a2:d3:98:ca:47:4e:63:14:2f:
5d:df:cf:26:b0:f6:e3:e1:75:0d:0e:2e:c0:55:8c:
b0:2b:b9:cf:3c:40:b2:57:af:b1:45:c8:71:de:e5:
9d:02:0a:c0:72:57:73:d1:40:9a:36:9c:07:de:ec:
92:e6:f9:96:0c:60:d0:c1:08:01:7f:68:fc:fe:6e:
8a:07:34:55:36:d2:80:8c:46:d0:bb:1f:ee:11:e1:
3f:8d:31:06:9d:1a:46:a8:89:1b:11:10:54:7e:a6:
f0:ab:69:81:1f:8d:b5:5a:dd:60:2e:f9:21:e2:dc:
ad:ac:fc:43:73:b4:c9:c7:12:75:22:6e:17:55:3f:
86:77:8b:8e:8b:f1:0f:01:64:6e:3b:c3:7b:54:f0:
2a:e1:20:2d:90:ae:1b:d2:fe:c7:0f:a6:7d:7f:ab:
91:54:45:9a:68:07:3e:b0:2d:c7:2b:67:a3:99:8a:
bd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F8:7E:3E:D3:16:BE:D8:F5:0C:2F:B5:8E:05:87:FB:CE:D1:AF:F7
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c3:68:d4:02:fa:39:4b:e2:95:0b:50:f3:2b:ab:7a:d3:e1:
31:8c:ca:7b:03:45:52:d7:5c:00:fa:4e:81:e8:d8:85:79:08:
7a:e4:a9:24:3a:90:5d:07:f8:05:fa:a0:c0:fd:c5:0e:b9:a2:
dd:24:c6:d0:90:65:e6:1c:55:b6:68:bf:57:24:81:0a:8e:c4:
94:f0:b7:f5:7f:3d:19:05:73:07:3a:39:68:8f:b0:98:7f:72:
22:b1:11:4a:e9:fe:1b:20:4a:83:b3:ed:9d:80:1f:7e:a2:b7:
5f:71:9e:40:f2:c2:97:46:f1:67:6b:9c:d9:2a:56:af:27:63:
b4:a8:77:71:69:45:80:28:fc:d7:1f:5c:22:13:84:95:d1:a7:
a3:04:57:2b:36:64:23:2c:1c:11:a5:b0:36:8c:7c:8f:88:0a:
45:0b:df:17:a5:43:58:76:96:16:0a:9b:9a:3e:38:46:54:e8:
b7:1a:c2:df:a4:aa:db:20:d1:05:c7:6b:e6:1d:62:80:aa:5d:
36:80:cc:0f:50:34:80:88:e0:a9:41:50:22:a4:37:21:94:c8:
9a:16:b0:f0:f0:41:6e:90:7d:78:48:a3:e2:e1:67:8c:d1:66:
1e:53:56:10:ec:56:10:e4:a0:fc:f8:72:f0:ee:24:55:95:46:
8c:4d:e2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:47:33 2025 by rpki-client