
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
File: xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json)
Hash identifier: ib2fY3ueZtzS3lOFk4u/z1LgbRlxQ/xhXyPqTjEQRF4=
Subject key identifier: E2:49:1D:BE:AA:B5:B1:D9:23:31:7C:7F:C5:39:7B:61:F6:00:B0:F0
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial: 01976C61EF35FA2ACAE2F031D840DEC35728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
Manifest number: 14A3
Signing time: Sat 14 Jun 2025 03:00:46 +0000
Manifest this update: Sat 14 Jun 2025 03:00:46 +0000
Manifest next update: Sun 15 Jun 2025 03:00:46 +0000
Files and hashes: 1: 0D1cZUMTiqausR0yB4Xw8AGD91Y.roa (hash: P0VFSa5grr5g9c7ABjsVrUERemiG8ev+nwOdbvgc3k0=)
2: QPusgTTEf8Wg1WVLNKmPSmYCqFU.roa (hash: 06h/pyTSclOFt6N4vyOy5CCJkDE5PrqzeDGGP4Ri+K0=)
3: WjOmLQNoXIGKQgnNRMvsBtSl2rg.roa (hash: wNgkpDpelkaLW9cw3ktDA884g92/B+HsSMkXWMNF8/4=)
4: evx28IXwOssrh2ERCzJjqUVnHiA.roa (hash: UTeUnE//0NUZdu2DWXKhAAFi5WcYzx4EajufTh1aEMI=)
5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: aBWFjrDwtf9KjrMqHDcTqceVFrjToZIrT/Gbm+EiWP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:ef:35:fa:2a:ca:e2:f0:31:d8:40:de:c3:57:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Validity
Not Before: Jun 14 03:00:46 2025 GMT
Not After : Jun 15 03:00:46 2025 GMT
Subject: CN=e2491dbeaab5b1d923317c7fc5397b61f600b0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:07:e3:87:fd:47:12:4f:04:24:f9:1c:64:
39:8f:4e:79:c2:3f:b7:ff:98:1a:71:77:f6:ec:89:
bb:fe:b4:f2:a0:ba:3e:4c:0c:d9:ae:9e:7d:eb:38:
8c:ae:39:28:fd:02:d5:f4:a9:e5:5d:06:95:58:58:
18:63:22:f6:c5:24:1a:ee:08:c8:3c:34:3a:19:db:
a0:96:bd:d0:2f:4e:35:e4:f6:5f:64:57:d8:f4:51:
55:da:cb:11:c5:6a:bf:b3:b5:25:29:ab:00:6e:52:
b1:12:bc:48:7a:f5:36:88:14:2c:39:42:02:83:85:
d3:82:a3:03:63:19:5d:a0:23:31:f2:1d:81:e3:66:
1f:f2:87:79:32:fe:27:c9:3b:eb:28:35:90:53:04:
87:36:70:f2:2e:ee:97:2f:d1:ac:29:22:cd:b1:cc:
52:1f:a6:f4:0d:db:ca:0f:1e:cf:96:76:c0:b1:68:
30:b1:45:fe:f3:e3:6f:6b:ba:39:d8:e7:b7:85:3f:
3a:13:50:b0:87:5b:d1:aa:eb:33:ce:72:aa:da:64:
18:0a:3f:a5:d2:f1:8e:c8:4c:08:dc:37:1f:8d:60:
34:4e:b4:fb:a1:86:af:c4:9d:de:2b:13:c8:3b:cb:
2a:85:69:f8:25:a2:6e:c7:b8:7e:28:f1:d4:63:03:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:49:1D:BE:AA:B5:B1:D9:23:31:7C:7F:C5:39:7B:61:F6:00:B0:F0
X509v3 Authority Key Identifier:
keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6d:8f:99:45:15:d7:76:e8:94:22:ca:b4:dc:0d:7e:cf:de:
60:04:90:7e:38:bd:20:6b:26:b7:77:54:b4:43:30:67:0c:97:
83:1d:47:39:8e:be:d1:0a:26:12:dd:4f:c4:1b:57:76:b4:b4:
f9:14:b9:e6:04:e6:79:b2:e3:ed:b9:f7:c7:aa:0e:d0:51:cd:
83:44:bc:d2:89:9f:ec:e2:35:7b:89:f3:b8:55:71:17:95:ad:
79:cf:ee:34:22:9a:e3:4a:e9:d2:7d:f5:e9:bd:76:a9:81:d9:
d5:91:bd:87:38:24:03:35:c3:4d:d9:bc:9e:fb:8d:34:5b:eb:
35:60:46:63:d0:7b:78:17:8e:a3:c7:61:f8:74:25:1d:7c:81:
05:3d:f2:6d:f7:85:f7:b9:57:c2:ab:b6:f0:4e:9e:e1:a4:44:
93:0a:3b:25:43:89:e6:65:e5:61:4a:bc:b8:85:1c:66:a1:eb:
1d:f6:89:8d:93:c5:15:f1:06:37:c6:75:51:28:1c:61:fd:3f:
dd:0b:5c:05:dd:3e:be:53:92:49:89:59:86:07:73:a2:06:c7:
3e:30:c3:17:cd:c2:dd:db:77:02:23:51:84:2e:3a:b9:5b:55:
07:54:fb:dc:5a:f1:c8:e3:e0:57:fb:58:45:fe:b3:fe:c9:85:
82:26:fd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:42:32 2025 by rpki-client