Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json)
Hash identifier: f73pwvhPh4hKfEak5yTWewke4pFiI6GGLl0IB/CraWU=
Subject key identifier: B4:A4:33:11:B4:DB:1C:3A:FB:72:74:70:98:3A:CF:E5:90:A6:00:9C
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial: 0197711B453D23BD2F7EFF0A77A43D154AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
Manifest number: 1590
Signing time: Sun 15 Jun 2025 01:01:41 +0000
Manifest this update: Sun 15 Jun 2025 01:01:41 +0000
Manifest next update: Mon 16 Jun 2025 01:01:41 +0000
Files and hashes: 1: jsXee12bvu-ZP57QT85jN04UL6E.roa (hash: SgymiTyUTEyWZzfgt2pHDPt0K6rPB+UsNgaHx3jCAao=)
2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: 9jWEWouweTnZ8AW5qklfDkyGHN6Kd4p2UArdW1n1gEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:45:3d:23:bd:2f:7e:ff:0a:77:a4:3d:15:4a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Validity
Not Before: Jun 15 01:01:41 2025 GMT
Not After : Jun 16 01:01:41 2025 GMT
Subject: CN=b4a43311b4db1c3afb727470983acfe590a6009c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:35:4d:2e:c0:39:0a:e1:df:f9:33:28:d1:a0:
4c:ed:a4:53:c2:e4:58:5d:d9:58:ba:1f:92:30:94:
f9:94:59:c1:b6:52:69:bc:c3:76:d3:d7:b3:6d:01:
31:e7:bb:c3:62:60:65:87:c8:bc:c1:c5:f3:26:04:
f0:78:9f:26:99:68:68:e9:93:cf:17:2e:cc:0b:e0:
6c:30:a6:2d:60:bf:ce:48:f9:51:40:35:b7:41:f8:
11:d8:8b:b2:a7:7f:60:b9:59:da:20:e7:4f:d5:67:
95:40:ff:6f:da:e3:e0:43:a6:c8:b8:c9:b6:80:d7:
2a:a8:d2:d5:7e:f2:16:74:ad:87:6d:9a:44:19:e0:
a1:9d:33:81:1f:f9:01:78:9a:92:55:4a:c3:87:58:
1c:61:99:08:57:bf:42:e8:12:9e:d5:f9:a0:37:cd:
89:5e:de:16:43:98:b3:c1:fd:5e:83:9c:70:67:ff:
a4:c6:4f:b1:19:78:52:50:8f:7e:79:de:8b:50:55:
97:cb:90:a0:e1:17:08:f2:9b:c1:22:83:9f:fa:1b:
11:05:67:c4:ec:2a:4a:6f:a4:92:e4:aa:a4:59:01:
6c:4f:5f:e9:2c:68:80:5e:eb:46:3a:9c:8d:8c:6d:
e2:22:e5:44:73:9a:4b:85:8e:25:ed:99:45:3f:82:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A4:33:11:B4:DB:1C:3A:FB:72:74:70:98:3A:CF:E5:90:A6:00:9C
X509v3 Authority Key Identifier:
keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:48:24:66:a7:b8:58:e3:ac:2f:48:9a:d0:75:c1:f0:f1:8c:
fc:3b:3d:73:80:05:23:26:eb:43:7e:49:82:e9:65:00:d2:67:
4f:1c:e5:4d:f8:82:db:c3:ad:98:fe:4e:5c:fe:2c:e8:16:a9:
7c:24:bd:07:73:cb:d5:7a:f8:05:17:6e:1b:87:da:6b:9f:c4:
e3:03:91:24:1f:6d:90:63:92:16:28:ff:b3:bc:8d:77:ec:60:
67:04:db:d4:89:e8:f6:44:10:6c:26:4a:38:d9:39:f2:ae:cd:
ec:14:0e:f4:5b:a5:0d:15:74:f1:6e:26:17:c8:69:14:a8:99:
82:c6:f7:f3:a3:bc:5c:e7:e5:fd:63:ef:98:bd:02:fa:a3:83:
90:bb:d5:f7:10:ec:d4:86:61:20:8a:bd:84:21:11:96:93:47:
2e:f0:9e:08:8f:9f:8d:dc:90:d4:4f:b8:8d:ec:1b:14:9a:da:
5c:b8:38:f0:cc:e3:0e:11:60:5f:a4:4f:52:f8:02:ea:32:38:
32:84:dd:e9:5a:6d:54:42:db:32:f5:88:de:e8:ad:90:60:06:
2e:cb:fd:5f:4d:3e:46:86:0e:d9:4e:98:b7:c5:4b:6a:79:2e:
c5:46:2f:d4:67:3f:2f:80:95:25:a4:4f:d1:ec:72:80:0c:50:
0b:2b:cd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:44:00 2025 by rpki-client