Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
File: tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json)
Hash identifier: RXTPIQDWvJ268nVe2i5CRLIFZCwDx498JQzDSGoxY8M=
Subject key identifier: 9E:92:3D:F2:5F:66:9C:AB:7A:64:CA:61:0E:8E:FE:18:EC:17:1F:E5
Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
Certificate issuer: /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Certificate serial: 019770078AB95550091B83A9AB6189FDC99D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
Manifest number: B6
Signing time: Sat 14 Jun 2025 20:00:31 +0000
Manifest this update: Sat 14 Jun 2025 20:00:31 +0000
Manifest next update: Sun 15 Jun 2025 20:00:31 +0000
Files and hashes: 1: 0NGpBZClfqdkwT-g1SQX2TG7Voo.roa (hash: SbCdNlkd4RVvBhJ9C9nlFY+4pjkHAYs+BVh1BZ1ld+c=)
2: FrJWtoZemJx4JKpSKfeY_d7A8KU.roa (hash: mn6H512YQAxp8Xgyg/tGQdGcCEfihV9UXWWT70uzA50=)
3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: 5BpPW+j0dpUWioe5LdE02+BpseYSz59a8gNn8cWBMds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:8a:b9:55:50:09:1b:83:a9:ab:61:89:fd:c9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Validity
Not Before: Jun 14 20:00:31 2025 GMT
Not After : Jun 15 20:00:31 2025 GMT
Subject: CN=9e923df25f669cab7a64ca610e8efe18ec171fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7a:93:d6:3b:88:f7:de:11:45:5a:b3:09:eb:
39:55:2d:35:a3:2c:12:e5:54:7b:df:4a:f5:f5:95:
af:6d:42:59:76:ae:c8:fe:71:9b:e6:a2:68:8a:ff:
69:f6:93:35:41:df:1f:90:c3:5b:0c:f3:1a:74:37:
6e:7d:b1:f3:cf:76:0c:d2:c8:74:30:2b:65:2e:27:
a2:85:53:0b:07:3f:53:92:89:e7:85:df:dd:ad:71:
e3:eb:15:71:01:d6:57:cd:a5:fa:0b:fe:ff:88:12:
12:ab:b3:61:45:f3:7d:4b:53:f3:f2:9d:b5:ea:64:
00:ce:d2:09:82:3a:c4:3e:e3:cd:f9:39:ee:e0:bc:
02:49:2c:91:5e:7d:5b:e2:fb:6c:9a:ca:e9:6f:cd:
58:fa:ef:5c:93:da:14:a8:8b:af:5d:94:db:1e:5c:
74:7a:6c:06:fd:a6:cb:d9:2b:37:e1:58:26:1f:a5:
cc:e5:92:f1:f5:d7:b7:d3:4d:e2:c3:6a:dd:1d:80:
8e:13:5a:d3:0b:f0:77:c1:74:78:38:38:3e:56:84:
e7:05:8b:40:0d:dd:3d:38:e3:f5:e5:49:04:6d:ce:
5a:1c:65:a1:a7:35:47:d1:09:86:41:7f:05:71:72:
0c:7d:29:39:10:8f:ba:d8:67:9f:85:16:c6:83:e6:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:92:3D:F2:5F:66:9C:AB:7A:64:CA:61:0E:8E:FE:18:EC:17:1F:E5
X509v3 Authority Key Identifier:
keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:28:95:3e:32:f7:08:8c:fa:f6:7b:dc:af:d7:b5:ce:c1:b9:
e7:ff:10:a5:b0:be:41:dd:cd:48:3c:3d:c5:09:d0:f0:bf:ed:
4c:80:1b:b5:2b:b7:41:1c:b3:58:b4:fd:c5:dd:f8:3a:9a:34:
ba:d3:db:b9:ca:75:f6:ae:97:dc:40:84:29:76:ae:24:37:45:
1c:d7:27:eb:04:3e:5c:bd:f0:78:a5:13:45:b2:6b:71:35:06:
c6:ae:df:c7:0b:50:61:51:22:02:b2:5d:92:3b:2d:b9:a9:a3:
42:08:b4:ff:cb:e2:5d:d2:0e:85:8e:83:7f:fe:47:e0:fc:b5:
c4:49:a8:2a:c0:8f:0e:a9:ef:15:b7:f1:7e:6f:d5:91:5c:94:
be:4d:ec:da:8c:48:99:15:b4:66:d2:53:63:10:8f:15:38:1d:
fc:eb:41:3a:70:48:cb:45:e3:7e:9f:89:de:dd:ff:81:f3:d8:
b7:dd:ab:8b:dd:f0:25:32:87:af:50:82:c2:6e:f8:b8:c0:29:
d3:fb:ee:f9:cf:d3:6e:63:a6:00:10:9a:cf:7b:de:e7:e7:ed:
fb:d0:3e:1a:8e:88:1c:8c:51:3c:63:e1:8f:57:3d:0d:9f:e2:
61:53:bd:66:51:56:ed:63:98:30:c3:99:e5:f6:95:90:2f:73:
6e:31:4c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:41:13 2025 by rpki-client