
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
File: x2sILxfCC126JFzqbk5unGCZzvc.mft (raw, json)
Hash identifier: 6sEhxM1DpdMAS4EeHG2P/zORcVFCagjP79nPWuYYCQk=
Subject key identifier: 30:DC:BC:20:33:83:BC:70:40:39:D5:C2:27:96:8C:F5:3B:B3:55:3D
Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
Certificate issuer: /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Certificate serial: 0197684E5C58557C5724D3F8A2B163A60241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
Manifest number: 0869
Signing time: Fri 13 Jun 2025 08:00:55 +0000
Manifest this update: Fri 13 Jun 2025 08:00:55 +0000
Manifest next update: Sat 14 Jun 2025 08:00:55 +0000
Files and hashes: 1: 3LcFCg7RM1aLPbE3Ib_6QCxrJwE.roa (hash: FJ26OKzgHHeltXGq/dly/S1GCLExUrR4LooVCROsPhY=)
2: x2sILxfCC126JFzqbk5unGCZzvc.crl (hash: CisOeo9pXehRAC1RUcxsvqPsP5b6+BhyqMJItnVaYS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:5c:58:55:7c:57:24:d3:f8:a2:b1:63:a6:02:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Validity
Not Before: Jun 13 08:00:55 2025 GMT
Not After : Jun 14 08:00:55 2025 GMT
Subject: CN=30dcbc203383bc704039d5c227968cf53bb3553d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7e:1c:24:16:9c:dc:49:ad:97:4b:d8:74:45:
f8:a8:62:3f:ff:00:ab:a0:f6:b7:70:c0:5c:24:68:
b2:e8:78:5b:f7:b1:a1:9b:33:09:ef:27:8c:2d:72:
64:13:f2:a5:25:c5:2b:4e:bb:c2:e9:df:bd:14:5e:
b7:ac:07:c7:30:e4:ec:67:10:2e:32:e8:40:b5:ab:
88:4a:05:ae:a4:cf:d4:b3:33:10:67:01:7f:65:51:
34:83:03:33:28:df:fc:c4:99:95:71:f8:0e:26:4d:
b8:5e:92:a1:0f:af:fa:12:c5:54:8b:51:89:3c:e8:
50:c1:1d:47:c6:5c:84:92:dd:2e:f0:c9:f4:fb:fb:
7a:a2:8b:e4:f9:ab:da:07:d0:f4:66:26:91:2b:cd:
78:45:5e:53:8f:16:b5:f7:27:cf:2a:e3:d0:21:23:
3c:9b:f8:87:39:2f:9a:fc:24:77:ae:d8:f9:f2:d4:
04:33:12:d4:d1:03:f9:5c:e0:72:84:7c:4c:e1:7c:
b1:05:52:35:e9:85:ab:11:7a:86:e2:7c:b6:2a:6b:
af:12:47:71:89:52:b0:d0:27:0d:ee:9c:a8:11:ca:
1a:7f:db:53:d7:f4:8b:e4:71:8d:8f:5a:53:21:2c:
eb:13:b8:8b:bb:7d:05:ce:70:ee:07:fb:b4:1a:7d:
9c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DC:BC:20:33:83:BC:70:40:39:D5:C2:27:96:8C:F5:3B:B3:55:3D
X509v3 Authority Key Identifier:
keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d2:72:db:81:82:78:00:b6:48:4d:9c:5f:d2:4b:af:db:2a:
c6:1c:d6:4f:36:7f:b3:64:ce:9f:dd:b4:8b:71:9c:9e:dd:e1:
3c:42:48:d1:97:33:58:56:fe:54:97:2a:47:d8:31:3b:50:b1:
af:6e:1f:d3:94:73:ad:f6:8e:8b:cd:88:af:d2:21:20:2b:48:
f0:52:ad:82:60:bc:c9:e0:d0:89:1f:d4:bd:57:7d:95:1c:0e:
0b:8d:b4:f8:24:27:ae:d5:cf:72:06:60:0d:6b:60:b3:2e:f8:
65:6c:fe:25:58:73:6f:ea:b4:8c:0a:57:19:48:3f:6a:31:b6:
93:c8:64:fc:96:d3:77:ba:d1:eb:e8:0a:2c:43:f7:83:53:ec:
3e:6e:f7:38:a2:78:64:56:61:0d:36:21:8c:9d:3b:d6:8a:db:
96:33:d3:9f:62:51:51:6b:5d:3c:54:6a:fb:b1:75:83:79:0b:
f6:2f:3c:c9:b1:63:67:b9:f5:e3:df:c0:81:4a:2d:72:29:d8:
91:f3:b3:86:72:2b:6e:d6:9b:ac:36:73:d8:ef:b0:55:30:4f:
5e:41:fa:e7:24:40:d3:e3:19:be:a0:c3:18:69:6b:fc:9d:35:
b8:46:c3:63:cb:71:e7:2a:0e:4a:c8:25:32:0e:ff:6a:b6:dc:
79:25:c0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:39 2025 by rpki-client