Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
File: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft (raw, json)
Hash identifier: IuLhmDqQcLXkyAtCGVldNNi0U3x0z2Bd6zuOargatyc=
Subject key identifier: 95:DA:FF:31:CD:5F:FE:0E:3D:57:A3:40:59:60:52:FE:3A:0D:34:16
Authority key identifier: C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
Certificate issuer: /CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Certificate serial: 01976D74BABBBA70944EA9400D581325455D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
Manifest number: 04C6
Signing time: Sat 14 Jun 2025 08:00:55 +0000
Manifest this update: Sat 14 Jun 2025 08:00:55 +0000
Manifest next update: Sun 15 Jun 2025 08:00:55 +0000
Files and hashes: 1: IiIPmmM-nxlvi6X_BDwclVK8nN4.roa (hash: 70bCr4c8aponltkSleoGsfNe8bySTBqaNCakdvrbnEM=)
2: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl (hash: JQBCFNiQWT9qxIJ6UNsNUVT1IxMzBvjM/1tLVUDMpVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:ba:bb:ba:70:94:4e:a9:40:0d:58:13:25:45:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Validity
Not Before: Jun 14 08:00:55 2025 GMT
Not After : Jun 15 08:00:55 2025 GMT
Subject: CN=95daff31cd5ffe0e3d57a340596052fe3a0d3416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:e4:28:81:5a:97:ca:93:37:56:bf:3e:b4:
45:66:ee:77:9e:e9:e6:d3:2e:a5:60:6e:fc:1d:40:
30:ca:79:7d:34:df:b0:7d:b6:f9:26:ed:29:53:0a:
dc:75:30:51:23:3e:c2:a8:be:24:87:00:a7:56:24:
9b:55:3b:d1:60:5d:49:eb:d8:09:45:0c:35:8d:3a:
c7:88:60:37:08:52:0f:96:6a:a2:06:43:a3:85:cd:
dd:1a:0d:fc:a4:2a:db:80:ca:3c:0a:d6:c6:18:20:
78:da:25:be:42:65:dc:2f:1a:bc:59:65:70:b1:1c:
ff:f0:6d:40:8a:68:5f:ae:cb:7b:f6:d4:e5:9a:c6:
4d:a0:17:63:80:d9:ac:a5:2c:79:f7:a4:26:26:a8:
95:24:4c:de:54:ff:28:f1:4c:e6:dd:e1:80:0d:eb:
6f:40:5f:eb:97:e2:14:63:4b:ac:8f:2e:e2:82:ff:
e1:cf:aa:08:17:3f:03:c9:98:f3:c4:01:8d:f3:98:
21:59:e5:52:d5:b2:3d:a4:ed:19:19:20:d9:31:7e:
64:9a:69:0e:f2:67:42:7a:91:5b:cf:1b:82:41:30:
5d:70:af:24:76:8c:68:1b:f5:c0:48:5d:32:17:bd:
83:03:13:91:53:5b:ae:7b:c7:d8:1e:6f:e4:1e:d0:
75:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DA:FF:31:CD:5F:FE:0E:3D:57:A3:40:59:60:52:FE:3A:0D:34:16
X509v3 Authority Key Identifier:
keyid:C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:94:46:0a:5d:02:88:ff:6c:9f:cd:6d:07:f9:a0:d3:51:80:
c8:be:56:96:7f:ac:d2:24:dd:6d:ed:ac:07:62:b2:21:5a:12:
b5:e9:90:37:9e:17:29:0e:81:70:88:86:37:a0:67:07:56:bb:
d4:0e:fb:c5:59:4e:d6:a5:b9:13:b8:02:b9:8e:e3:55:9e:a8:
98:20:6b:8d:de:c6:27:f9:9f:71:37:d5:0c:0b:0d:01:1a:db:
87:74:88:c5:8d:dc:39:99:ef:2d:a0:f0:7b:63:d9:3a:1e:a9:
f5:ac:15:8b:3a:96:2c:e3:5d:8c:7d:a4:3d:74:39:3c:71:a4:
38:4e:cd:a1:5e:b7:98:fe:05:54:d4:9b:37:4b:8f:b2:c4:72:
7b:f8:b5:4e:da:5f:2f:87:e9:33:f9:cc:36:95:54:a6:8f:76:
8b:84:87:22:ee:c8:a9:f6:15:f1:05:f7:f9:0d:bb:55:af:96:
63:56:16:ff:4e:84:4c:19:4d:86:11:fc:1f:54:66:1f:ed:90:
7e:35:98:45:ab:b2:f1:e6:44:6a:75:6a:a2:bc:93:4e:a2:7b:
87:36:71:04:a4:cb:d4:d6:bc:f1:7a:bb:9c:ab:41:b9:07:cc:
59:2a:10:1e:c6:cf:eb:e7:40:72:b3:69:13:fa:dd:c3:69:31:
f8:19:00:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:01:24 2025 by rpki-client