Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
File: xzic6Ca8jSaGm0UvPNk2kCxVL78.mft (raw, json)
Hash identifier: h6S4aCwMnvWk7c5DHlectPlOs84gPti1e21qnXdFflM=
Subject key identifier: FA:AF:2B:B6:44:51:CB:2B:B7:07:99:6E:E1:ED:A7:AF:F0:34:DC:35
Authority key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
Certificate issuer: /CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Certificate serial: 019769CE5603538C78F302D88D6DB677EF4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
Manifest number: 0B01
Signing time: Fri 13 Jun 2025 15:00:19 +0000
Manifest this update: Fri 13 Jun 2025 15:00:19 +0000
Manifest next update: Sat 14 Jun 2025 15:00:19 +0000
Files and hashes: 1: Zjp5spJdh84vGP_NYi-8y5LIKQU.roa (hash: rWVrxK253VGyHCI0i7PfPHvDu/qTwuTk4y8VuJ8okKA=)
2: xzic6Ca8jSaGm0UvPNk2kCxVL78.crl (hash: c7n9Dsj75EAUSg8I4Y52xDTdrsAbqKO5QBT8z/AIU2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:56:03:53:8c:78:f3:02:d8:8d:6d:b6:77:ef:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Validity
Not Before: Jun 13 15:00:19 2025 GMT
Not After : Jun 14 15:00:19 2025 GMT
Subject: CN=faaf2bb64451cb2bb707996ee1eda7aff034dc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c9:87:3b:b6:a0:5f:f9:b7:fa:18:37:8d:9e:
b1:82:be:60:1a:c3:12:e6:01:fd:ef:7c:15:fa:b7:
5d:66:3c:67:de:16:55:ed:0a:38:19:9c:d5:0c:a6:
c5:f1:cf:d0:99:c3:86:16:af:5f:b9:e2:0f:71:2e:
da:f3:a1:cc:b0:2e:8c:f6:f5:c8:eb:77:5d:72:16:
46:ad:ef:6d:3e:a0:d4:e8:c7:d1:bc:a9:cc:5f:86:
40:9b:f1:fb:1b:31:6a:83:d3:7f:04:c6:c8:8a:b4:
09:8f:81:9f:87:41:34:b2:5c:cb:d2:96:1b:e2:84:
d4:ff:4c:17:d7:1a:4e:92:ab:4f:d3:a8:1f:0a:6e:
36:b0:76:ff:d2:80:10:bc:19:5c:43:10:d8:4e:69:
86:23:d1:90:48:e3:d2:c6:71:47:76:94:fc:1e:cd:
eb:e2:4c:42:1c:b9:e0:b6:f3:03:bb:60:d8:b4:07:
23:a9:18:7a:29:ad:c0:a5:16:42:a0:cf:61:7d:e0:
e1:b2:d7:3f:be:86:31:a8:0b:b8:45:91:5a:e7:23:
71:45:c0:37:11:bb:29:19:95:08:db:15:66:bf:5a:
e7:86:d4:0e:56:8e:ee:3e:56:10:00:0d:f4:4e:ff:
75:23:09:d4:ff:95:25:52:8b:97:a6:1b:2f:9d:d1:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AF:2B:B6:44:51:CB:2B:B7:07:99:6E:E1:ED:A7:AF:F0:34:DC:35
X509v3 Authority Key Identifier:
keyid:C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f4:ea:9a:03:24:6b:b9:a3:59:53:d5:f4:dd:bf:cc:b1:31:
57:29:8e:d3:5e:f7:6b:db:78:1f:da:84:44:f2:e9:ec:7a:09:
9c:ef:c4:36:ec:88:db:84:54:1b:e7:27:73:4e:38:05:80:e5:
c3:4e:bd:0f:31:43:9e:9e:4d:4f:5c:13:b0:ab:15:0b:91:c1:
b6:f6:3f:53:0c:85:a6:37:bd:3c:8d:af:61:c5:46:52:75:df:
74:f4:56:11:90:f4:8a:d3:bf:ae:a7:25:fe:d9:f8:a4:48:7b:
f1:64:46:35:c1:4e:2e:c0:12:a6:b6:b0:e6:f8:60:6a:49:72:
5f:d0:fa:20:a6:21:f7:01:44:7e:8a:5c:98:9f:1c:ab:9f:09:
3b:c3:42:ac:15:42:25:e4:e6:6a:43:12:12:a7:de:d9:8f:0b:
fa:65:f4:12:4f:b9:9b:60:80:43:54:ed:50:ef:38:a9:1d:34:
36:97:e2:b4:ce:f1:0b:4a:3e:9a:87:12:72:16:7d:50:9d:fa:
00:dc:35:a9:91:90:6e:e2:09:aa:8c:7a:cb:ed:b1:c9:b5:8e:
ef:53:89:4a:44:54:e5:bd:34:2b:54:4a:54:62:f0:f7:bc:cf:
0f:df:cc:72:4f:c6:fd:cb:a1:d8:83:b0:ad:c6:dc:af:67:ec:
ec:30:44:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:49 2025 by rpki-client