Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier: 8T4ksctnEUQGKtt6PJEjlhMZuf2lMHcrIW+elg3I2oQ=
Subject key identifier: C4:75:3E:7A:D3:70:51:C6:D5:1A:62:2E:3C:13:4D:37:55:1C:D3:3B
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 01976884F5124E5E3DF09A2DED4A61AE727E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number: 0A7D
Signing time: Fri 13 Jun 2025 09:00:33 +0000
Manifest this update: Fri 13 Jun 2025 09:00:33 +0000
Manifest next update: Sat 14 Jun 2025 09:00:33 +0000
Files and hashes: 1: J8DHZy4tMi-CFo8AY9DJvx0HWac.roa (hash: 5pNADEij5vtMepG8+Pp6x2k3eZ8RSfQB0arADw8u/hQ=)
2: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: 4BjN25Q+mUZEyxyAqBgGYeP/xc0D39LKbaOjPITpukM=)
3: bm8bVIPNaA-bltdEZPHxvRw4XQU.roa (hash: DdBeXwj6zhT54fs1VrM1Iq2GimR5mvINmSrgTPAY9tY=)
4: fcJb-6V4S8Ggt4XkeQ4z4NeOvBg.roa (hash: Ok0E8qecmwKHIVZlR2uj+ZosbjuqbuM99KMf84z3ECc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:f5:12:4e:5e:3d:f0:9a:2d:ed:4a:61:ae:72:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Jun 13 09:00:33 2025 GMT
Not After : Jun 14 09:00:33 2025 GMT
Subject: CN=c4753e7ad37051c6d51a622e3c134d37551cd33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:7e:c0:8e:44:1f:29:1f:6e:f1:a8:8d:b6:
c3:d0:ba:60:76:69:0e:4a:24:ea:1c:23:fe:1f:e3:
ad:ee:25:2e:ef:f5:62:10:ab:33:34:31:76:c8:af:
4c:3f:a9:76:a4:7b:c3:12:37:47:b0:2a:53:d5:46:
8f:01:ef:6c:fc:2c:1e:bc:5e:31:cc:33:e6:6e:ec:
40:36:72:5a:4e:ef:23:3c:84:7c:b5:d7:e9:97:34:
3a:c7:92:8e:58:48:51:5f:0d:6e:71:26:70:42:8e:
d9:6c:78:84:cc:e6:1b:52:a4:4f:47:63:0f:dc:72:
93:56:66:38:63:57:c2:a6:5c:e2:5c:e3:89:e4:bb:
32:09:55:1c:a5:c9:77:c9:32:f7:5f:64:cb:2e:fc:
e9:b6:d9:aa:0d:8d:58:1b:59:27:f9:69:82:ed:92:
08:73:9b:44:cf:4c:04:bd:96:da:69:78:e4:84:c0:
13:78:5b:f0:34:85:13:78:a9:0e:dc:3e:39:c3:a1:
b1:fe:39:80:79:75:f9:27:20:36:1d:98:70:ca:e1:
26:75:e2:2c:ec:0a:9b:35:98:dd:69:ae:4f:dd:85:
b1:bc:d5:b0:1f:08:64:68:5f:ae:66:c7:63:f0:f8:
1c:b6:1b:7d:86:dd:7c:76:62:91:bb:d3:30:9b:e9:
da:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:75:3E:7A:D3:70:51:C6:D5:1A:62:2E:3C:13:4D:37:55:1C:D3:3B
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:91:0c:ed:fc:f4:af:56:13:70:fe:28:7b:9a:23:43:55:df:
89:93:25:bc:6e:8a:8b:f4:09:10:e3:f2:7a:28:39:ba:8e:97:
64:39:74:ce:cd:68:9c:2c:d2:c0:79:97:b8:a2:01:93:cf:f6:
e5:d7:70:6d:98:7e:80:26:a3:01:db:12:e2:10:39:61:29:5e:
f4:86:e0:d9:be:f4:6c:9d:01:db:e2:fd:c3:7f:34:86:de:f8:
f9:6b:9a:7d:ef:fa:c2:ce:fe:83:d0:69:91:85:85:b5:5e:c3:
15:4c:44:41:24:d7:37:ea:6a:3f:5b:ab:8c:d4:4e:0e:a1:e0:
59:da:4f:07:14:73:31:74:b9:47:19:de:f1:a8:7a:ec:71:e2:
c5:ee:36:be:6b:27:b4:b0:fa:b7:dc:a4:ad:dd:42:3a:5a:c4:
30:f2:0b:20:1e:c9:12:d7:12:ae:c2:09:ad:58:0c:96:d0:3b:
0c:56:ae:b6:1f:f4:1a:8e:8b:df:42:cf:e6:84:1b:05:e3:09:
45:d9:55:3d:b0:cc:6a:27:9f:50:f7:2a:cd:a7:6d:82:29:6f:
c2:4f:af:5f:fd:11:26:ac:25:cf:66:28:6e:0a:c3:c7:f1:5b:
98:a2:a4:2b:3d:77:90:53:0b:f2:d8:8e:02:e7:69:fa:80:87:
c2:ea:78:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:43 2025 by rpki-client