Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
File: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft (raw, json)
Hash identifier: pRtgWrSoYPJcDqzmrATSWPRzrwXUthwR/uyMiCYtsTA=
Subject key identifier: D6:BA:0A:91:01:85:3E:58:3E:73:0D:59:0B:BD:4A:17:AC:57:E8:A5
Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f
Certificate serial: 01975045F7BD7DBF480E7C0D6A19D4E299FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
Manifest number: 0191
Signing time: Sun 08 Jun 2025 16:00:51 +0000
Manifest this update: Sun 08 Jun 2025 16:00:51 +0000
Manifest next update: Mon 09 Jun 2025 16:00:51 +0000
Files and hashes: 1: GUbgPZS8b1mJVA-CDXEfke3rKwU.roa (hash: DGiTGvvsu+oEkX+7jMPXSS7hmVWxoFzlEXAOHRpDGto=)
2: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl (hash: ddoJLu2YPCTPWU/juiyV+3gCFSLdzcOoujNiogkZwcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:f7:bd:7d:bf:48:0e:7c:0d:6a:19:d4:e2:99:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f
Validity
Not Before: Jun 8 16:00:51 2025 GMT
Not After : Jun 9 16:00:51 2025 GMT
Subject: CN=d6ba0a9101853e583e730d590bbd4a17ac57e8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:9b:54:56:42:2a:0a:a4:73:63:42:4b:ba:
19:7a:ac:cf:e8:12:57:c0:90:4f:74:13:91:0f:d3:
8f:79:fc:78:7b:b0:34:b0:9c:49:de:5e:d0:a9:c2:
a9:f1:25:c6:ae:fb:41:23:1e:c0:94:c2:41:eb:e5:
41:4a:d6:1c:be:f2:77:d2:ca:fa:ad:17:cc:ff:1f:
48:00:1b:20:37:9b:35:4c:22:ff:20:04:da:0e:cf:
47:49:56:b1:f2:aa:01:1a:6f:21:ba:d4:0b:81:cd:
33:14:b6:58:92:48:bd:54:d6:52:1b:ad:7f:6a:99:
5d:e0:1a:8a:d0:52:29:d5:19:67:d9:97:4e:28:3c:
87:e1:33:41:0c:97:98:0f:9b:54:d5:45:ba:f4:a9:
e7:77:6f:27:ea:7a:83:7b:87:fa:2c:2d:fe:96:17:
07:88:1c:86:b6:c5:0b:5e:07:20:af:f8:57:e0:fe:
a7:3d:1e:f0:ac:90:2b:e4:f6:82:15:b3:21:f7:f8:
4f:99:26:ba:4a:c7:35:2d:54:65:c2:be:de:80:2c:
df:a0:79:7e:e1:7e:6c:d7:11:1a:5a:48:97:45:81:
42:99:f2:e7:ea:ab:97:7e:13:f1:70:1b:b5:9d:ff:
b6:9d:f4:c3:ed:d1:b9:b4:81:28:23:4b:f3:5f:7c:
b2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BA:0A:91:01:85:3E:58:3E:73:0D:59:0B:BD:4A:17:AC:57:E8:A5
X509v3 Authority Key Identifier:
keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e1:a9:a1:5b:a8:b3:c4:bb:70:98:4f:e3:b2:45:6b:58:b5:
fe:75:ba:3c:bf:5f:a5:1a:9f:c6:0d:c4:86:cc:81:35:e6:dd:
77:8a:04:ac:fc:35:01:25:9f:cc:87:1f:53:59:09:07:65:98:
2e:68:15:03:c8:dc:2c:73:b9:80:b7:89:d9:33:65:69:d3:b2:
a2:b5:2b:56:99:75:59:6a:77:d5:38:94:be:bf:ad:4a:b6:25:
c9:4e:79:5b:76:fa:ad:af:57:98:86:01:22:76:70:4f:e7:d5:
bf:6f:86:8e:3b:ae:31:79:dd:10:53:2e:72:3c:b3:60:86:38:
1a:83:b1:be:2c:e2:50:76:1b:b5:18:de:f7:aa:a4:01:9e:0e:
5f:06:14:97:3f:81:3b:85:7b:2a:89:ba:a0:1f:3a:11:be:27:
1b:2b:6b:6f:b1:9f:74:e2:27:1b:42:82:14:10:33:3f:78:d4:
37:58:f4:03:c3:ca:bb:30:e5:5b:ff:03:d3:49:5c:0b:bb:98:
8e:7b:31:ad:d9:a6:3a:aa:33:f5:74:36:db:83:0d:f7:92:9a:
ee:d4:6d:d8:57:50:8b:38:0a:75:95:3a:e8:c3:36:03:ff:0e:
1e:fd:68:eb:05:f5:cb:27:48:21:b0:c7:1b:cc:df:d1:fc:61:
ac:86:86:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:18:20 2025 by rpki-client