Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
File: xX4MBpirwZpWiv7OaxkM7QM6coU.mft (raw, json)
Hash identifier: RNqbrbRJUbEzsEjrNLsnqIyzoBhOlIIwS1UJ0AzkDwg=
Subject key identifier: F8:91:7A:73:8F:20:2E:64:94:DD:09:C7:AF:18:20:D0:02:6A:20:71
Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
Certificate issuer: /CN=c57e0c0698abc19a568afece6b190ced033a7285
Certificate serial: 01976C2B020BA368B7F21E06D01936D4869C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
Manifest number: 148C
Signing time: Sat 14 Jun 2025 02:00:47 +0000
Manifest this update: Sat 14 Jun 2025 02:00:47 +0000
Manifest next update: Sun 15 Jun 2025 02:00:47 +0000
Files and hashes: 1: 7mkqMSDi-HCLbWFxZVVqp4oDZV4.roa (hash: AgQ4cj261uo6E9KSd61RuHIpkNasVN9RKxcJv5djL7w=)
2: xX4MBpirwZpWiv7OaxkM7QM6coU.crl (hash: RhdgIwPzkYbO6HU9K0Z9ruKKCTNSgN8SJ2kKTyOmm0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:02:0b:a3:68:b7:f2:1e:06:d0:19:36:d4:86:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285
Validity
Not Before: Jun 14 02:00:47 2025 GMT
Not After : Jun 15 02:00:47 2025 GMT
Subject: CN=f8917a738f202e6494dd09c7af1820d0026a2071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:6f:99:9a:e2:a5:b1:0f:98:53:c1:29:e3:
1a:79:af:81:2b:1c:6f:39:1e:7f:c5:78:5c:8e:ee:
25:c6:b0:54:81:8a:55:68:45:08:80:47:19:83:3b:
1f:49:7a:55:6d:2a:ec:fb:1d:43:01:1a:37:0b:16:
39:f1:72:77:a1:0c:0a:c8:89:54:c8:04:a1:ee:65:
2b:b4:48:4c:70:c1:1c:78:f9:d9:0e:cb:22:d2:7d:
d6:89:08:f7:c9:ee:fe:29:1e:6d:30:0c:29:d4:9d:
7c:5e:12:22:99:96:dc:73:08:76:df:55:4b:7b:f5:
57:23:3a:62:53:c6:66:77:5b:be:e6:b2:c7:db:f8:
5d:0a:a0:2e:0f:38:91:0a:6d:64:8a:e1:5d:9a:da:
31:25:44:25:51:fa:a4:4b:3c:41:cf:16:40:e9:a7:
03:30:b3:84:69:d5:91:7d:4f:67:d7:18:ef:77:fb:
bc:d9:d8:fe:bd:38:e2:99:88:5a:ab:c5:41:d2:a6:
18:dd:ce:22:55:90:89:4c:13:84:b3:8b:7f:e4:43:
dc:bc:59:29:70:41:b2:e7:1b:9d:03:6b:7a:e1:84:
8f:ea:d5:f7:bd:38:98:34:fa:44:3e:f9:75:06:dc:
33:fa:8a:6d:a5:85:92:3c:2e:a9:cd:fa:1a:b1:22:
86:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:91:7A:73:8F:20:2E:64:94:DD:09:C7:AF:18:20:D0:02:6A:20:71
X509v3 Authority Key Identifier:
keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1b:3e:88:e8:3d:2d:3b:e0:b1:a7:94:a6:09:b6:bc:38:fd:
a0:20:9a:e2:ed:53:3b:e8:c8:d1:70:4a:72:a4:08:6f:74:a2:
25:44:f1:6d:07:b8:ac:be:71:78:d4:57:68:ca:8b:20:0b:2d:
9b:04:a8:2d:86:ff:5e:e8:ee:29:73:62:48:c8:14:d5:f6:21:
1d:d6:f0:e3:d7:b1:65:79:bc:38:7c:75:3f:ba:33:ab:78:c2:
07:17:68:08:72:ca:a2:06:4c:d5:01:b8:1b:45:84:90:43:ee:
12:9a:dc:38:97:25:2a:89:71:70:41:13:54:89:06:63:1f:ae:
e4:54:02:f2:c6:87:3b:f0:48:1b:b9:63:dc:43:57:cd:a1:4f:
b9:db:6e:b7:25:53:fd:78:ac:20:90:c6:71:46:11:6a:b6:e7:
66:9e:02:ba:6e:33:5b:6d:d0:cb:a6:a7:9c:62:25:35:9a:64:
d3:3c:1d:b2:3d:a1:70:05:70:a3:8c:70:2d:ce:3a:a6:3b:9b:
d3:59:b8:1b:44:8c:86:1b:91:8d:1d:b3:43:6d:c2:19:91:8f:
1e:76:5e:d9:6c:39:ae:51:a4:a9:7b:76:91:9e:39:2b:10:7c:
56:9d:52:7b:a9:60:55:8d:64:8a:41:50:8b:d9:87:c0:2b:19:
b3:a5:f3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:39:42 2025 by rpki-client