Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File: xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier: gBdbt6WPCcg4nf4APSnMS3cAN1GKiq3rbZ+r2fjxAFI=
Subject key identifier: E9:1D:46:A2:19:CB:2A:51:C1:DE:0B:1C:89:D6:1A:94:CB:19:02:43
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 01976F99BB2F773ABCE98613B2D9CFA83C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number: 1595
Signing time: Sat 14 Jun 2025 18:00:35 +0000
Manifest this update: Sat 14 Jun 2025 18:00:35 +0000
Manifest next update: Sun 15 Jun 2025 18:00:35 +0000
Files and hashes: 1: 5MLAJJhZUqxE0r3U4OzONARKrWM.roa (hash: uzxNaFRQSXU6HSS8pS9HTMaQBaBvl861ChSN96+0v7c=)
2: HR55_v7tU_nk_jRUWYmfJtQR9WA.roa (hash: /dID2iZYF2CUzIicZ7+Z023I6NUW7EvfBXCTVjJ/V0M=)
3: TCBCoiqsdjtnt0QWg_pGGqcuefY.roa (hash: 2VffKASaJzsixiO8CsFevC9I7clRJaUqZ1jWVGGpfFc=)
4: WP71_y34vxzD5x7BOioebxCCHyo.roa (hash: E5yzZO4QIaYJL7VozBk+Y+K8Kjs53pwyA0H4+gidJRs=)
5: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: s1AzBIm55Nfpkq/kRyUp3FQe4Y5tT7DVIRBp/fPpZnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:bb:2f:77:3a:bc:e9:86:13:b2:d9:cf:a8:3c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Jun 14 18:00:35 2025 GMT
Not After : Jun 15 18:00:35 2025 GMT
Subject: CN=e91d46a219cb2a51c1de0b1c89d61a94cb190243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:27:c7:bf:42:82:39:3a:1a:a3:f3:49:cb:e4:
ec:86:11:05:54:e8:23:5e:56:15:fb:d5:07:0b:33:
d8:c9:69:7b:f4:8e:bd:97:27:1f:c0:a9:f9:87:cc:
0e:f8:51:e8:82:aa:ae:87:c3:ea:1c:d0:3c:01:41:
97:39:14:53:f1:e8:28:10:78:dc:fd:60:e6:8e:8f:
4d:ab:4d:b4:97:8a:7b:16:d2:49:f2:0e:83:0a:cd:
8e:a5:3a:30:85:e4:1b:5d:bc:d8:a6:62:37:ef:ff:
47:d4:93:bb:33:ba:3a:52:b4:66:a1:fc:fb:02:80:
0a:95:37:76:0f:94:a9:3e:19:df:82:b6:5e:51:55:
5e:5f:b1:cb:2b:01:36:75:cf:f6:78:60:89:57:b3:
78:1a:9c:2d:3c:e2:07:82:ff:aa:43:a9:40:28:05:
5a:82:82:9d:10:6b:99:9b:b0:bb:f9:c9:c3:db:04:
0e:7c:81:9d:a7:bd:7c:0f:04:11:2b:eb:f4:cc:53:
c9:73:b2:7f:ea:c2:87:d9:38:6e:a9:ed:1c:66:41:
e8:3b:db:83:f9:61:8c:d8:e9:78:3d:82:bf:37:3c:
14:bb:63:6b:85:93:a1:09:06:94:19:f6:15:6b:3a:
b4:1d:3a:6b:f0:93:a5:bb:39:a4:df:d0:2d:c3:a6:
09:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1D:46:A2:19:CB:2A:51:C1:DE:0B:1C:89:D6:1A:94:CB:19:02:43
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:31:17:fa:11:a3:cb:b5:f4:8a:51:05:cf:a2:a1:8c:6e:41:
78:32:77:95:8e:41:01:97:f8:eb:99:ad:27:45:ec:df:55:65:
41:ec:5d:d5:e6:28:24:bb:cc:a9:07:64:a5:6b:e1:00:a1:2b:
9c:11:7f:e3:f6:9f:dd:9a:68:cf:a4:f3:a8:2b:db:0f:62:8c:
7c:40:1c:a7:fb:cf:ab:5c:b8:cc:bb:1b:2b:65:28:ca:60:e5:
59:09:7f:30:66:46:42:01:e5:d4:be:c9:01:8c:ab:d9:dc:ee:
76:60:89:85:cd:bf:45:e2:42:7c:dd:e4:7a:28:fc:7c:ac:bd:
d0:44:41:ba:73:05:5e:28:2a:f9:92:39:c2:b3:40:54:32:31:
ad:27:3e:7a:0a:e5:5e:6c:d4:0a:a1:cd:ff:c7:64:3d:2f:e4:
f8:91:6c:c1:14:b3:61:be:6b:4a:53:c8:90:08:2e:2a:a4:cf:
31:66:fa:df:d9:66:4b:31:15:a4:d7:bd:63:06:95:f3:b2:56:
3e:44:c7:62:ed:e9:5a:1b:76:5b:53:a1:10:8c:2c:11:c0:bb:
46:02:c8:79:a2:7d:de:06:92:64:f5:de:34:bd:83:92:68:a6:
7c:b7:01:e3:ea:93:0d:07:81:ec:d8:d5:03:44:04:eb:6a:3f:
c6:0f:99:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:08:47 2025 by rpki-client