Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: Bs1PkCwclBB0tZbW6YHnazZfFK/X7GLOSR97gz5nth8=
Subject key identifier: 07:C1:8C:D4:9F:FF:85:CA:A6:52:AC:6B:77:57:0A:A3:46:6E:8B:C4
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 01976F2C1D69A6E3F205DAB5613BFFEA71A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 1597
Signing time: Sat 14 Jun 2025 16:00:51 +0000
Manifest this update: Sat 14 Jun 2025 16:00:51 +0000
Manifest next update: Sun 15 Jun 2025 16:00:51 +0000
Files and hashes: 1: 1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa (hash: mKtZwD+iuzmAhkLKZ2UYytr92oY2lNBDkGBNEW7xkLg=)
2: Et3EjfyShVqsXEJ0-il-9h75pBI.roa (hash: 7NwgLcL7u8H9AHMShaODStUwLh9+b7vWHMW72q0np80=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: oAB1OdQaYTdgg4IpUZZd+c/OAD70Wpfkw2FIRjX4oHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:1d:69:a6:e3:f2:05:da:b5:61:3b:ff:ea:71:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Jun 14 16:00:51 2025 GMT
Not After : Jun 15 16:00:51 2025 GMT
Subject: CN=07c18cd49fff85caa652ac6b77570aa3466e8bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:92:6a:6a:89:4d:b8:c4:45:d3:b4:46:ec:d4:
27:a1:95:0e:06:74:c7:1b:06:22:9b:cd:13:76:3f:
f2:b0:74:70:73:e8:b3:ed:3a:2b:bf:0c:a2:af:f3:
3f:73:ca:ac:e7:9b:2a:77:9b:ae:6b:e9:f3:5c:82:
b7:2a:65:54:eb:8e:d5:43:d2:c4:e9:d4:c3:db:48:
26:14:71:eb:8f:85:ca:bb:f3:6f:b0:ad:04:2b:4c:
52:50:28:4e:20:26:4b:8e:1c:2d:5a:f3:82:00:75:
bf:4e:7f:f6:50:f4:79:36:40:09:1f:c7:b6:66:94:
5b:78:f7:cb:9d:69:4e:d1:6a:21:69:7a:f0:f8:0e:
98:8a:06:1b:87:f4:99:cd:17:05:7b:8a:62:05:59:
ea:4d:ea:ed:31:10:3d:82:4d:c8:cb:2d:d4:eb:19:
58:2a:09:32:4e:2c:17:a2:12:0d:a9:3d:60:42:99:
bf:d8:2a:1c:c0:1e:fe:ab:8c:f9:fe:af:a8:e1:79:
90:fd:ad:09:ab:03:a8:9c:ca:96:53:17:46:27:ef:
5e:a6:16:18:4f:c4:c6:e1:8c:b2:d2:85:2e:e6:37:
f5:f0:c4:d5:35:23:42:1e:0d:e0:30:61:f8:76:d0:
7b:74:d0:95:82:97:62:02:be:d2:03:83:a9:eb:3b:
6e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C1:8C:D4:9F:FF:85:CA:A6:52:AC:6B:77:57:0A:A3:46:6E:8B:C4
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1f:bf:28:06:ce:07:27:de:e3:8d:28:f1:ff:d3:02:f6:1f:
45:e1:d8:74:16:97:35:14:08:6d:2b:c6:4a:d3:12:58:a6:6e:
fe:96:a4:fe:63:37:f1:dd:4c:60:ce:be:5f:19:22:09:51:ce:
15:d5:5a:a0:ec:f2:da:16:77:ed:b9:b1:55:9c:d5:cf:35:06:
07:54:a8:94:4a:79:ee:b5:1c:83:7d:43:f0:95:4f:26:57:8c:
e1:3e:87:6f:39:a1:36:d2:a6:9e:dc:8d:91:a4:22:c5:9e:5a:
f5:1c:4a:29:85:a3:0c:97:f8:52:1e:6e:b8:68:54:45:67:d7:
1f:6e:e9:45:bc:ef:a0:29:c0:cc:4b:1d:1d:86:1c:39:11:6a:
16:1d:e7:19:09:d1:27:b5:47:86:ce:c4:7f:e1:a4:cc:8b:e0:
99:f6:e7:22:c5:84:bb:b2:4c:4c:aa:c3:58:fe:71:45:66:b1:
ce:3b:a3:0a:fc:11:03:53:c3:d6:b9:89:56:94:98:ee:6b:52:
71:bf:41:01:cc:f7:c9:e4:0a:b5:c9:bf:69:e7:22:ed:be:b9:
46:f4:4d:4f:7f:38:bb:87:de:4c:79:28:a9:59:ee:39:13:cf:
91:78:4a:40:a2:95:fa:a4:f0:f5:b1:f1:6b:a0:80:1e:11:1f:
03:ba:5d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:54:59 2025 by rpki-client