Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: 4UPi4lvmB49OMADLCLvl1fFvsKin/o4IYcEv4Tm/SbA=
Subject key identifier: 28:BE:48:42:FD:82:4A:42:17:1F:0B:CF:25:7F:A5:02:87:E0:62:E1
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 01976961A42573E4022591B7A5E865A71723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 114B
Signing time: Fri 13 Jun 2025 13:01:35 +0000
Manifest this update: Fri 13 Jun 2025 13:01:35 +0000
Manifest next update: Sat 14 Jun 2025 13:01:35 +0000
Files and hashes: 1: 1ylHoCjP82H2cRlJcKOWxCiIA9s.roa (hash: c062Fjrkbud1S9wrUUG9+yQLXJvgcVhnwrbsUatXzgg=)
2: 6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa (hash: mnVCxlV7vM9sKmc4seeqVJ1+v+wCWGn9k8XntKlO+8E=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: HwiYMZrA8x5iBllwmoMy+49X2vLk6UJt0x8Hll9PSzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:a4:25:73:e4:02:25:91:b7:a5:e8:65:a7:17:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Jun 13 13:01:35 2025 GMT
Not After : Jun 14 13:01:35 2025 GMT
Subject: CN=28be4842fd824a42171f0bcf257fa50287e062e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:e0:3d:15:69:1b:d5:98:7a:3c:e6:36:42:
b4:d2:d5:cc:4e:7a:4a:73:52:be:21:02:cb:5e:ad:
59:a9:eb:7b:17:6d:2c:92:a5:04:7f:88:6f:ae:ac:
f0:49:76:92:93:0d:df:a3:6a:db:59:3b:21:13:76:
37:aa:46:4d:21:26:c8:7a:70:ae:49:67:8a:51:b9:
a7:83:77:c8:23:2a:3b:36:14:dc:9a:29:c3:7d:9e:
f5:ab:8f:76:25:86:7a:92:27:d1:73:27:68:6c:58:
e9:b3:f8:39:54:3d:48:70:88:80:a5:1c:77:d0:61:
8b:fe:37:f4:51:dc:cd:81:3c:86:fe:34:e2:75:f7:
cb:b1:49:a9:5b:9c:e0:69:7c:4b:fd:a8:a8:63:b2:
b7:1e:0d:a6:45:ed:d6:c1:ae:18:bb:8f:51:d6:e1:
cb:8a:81:d4:57:0d:d3:87:11:ab:36:a9:ad:38:15:
1e:a4:42:ce:d1:08:27:44:3f:57:d0:48:40:0d:2a:
46:c5:c2:b4:2f:e6:1b:08:ee:a9:58:e0:6e:82:e2:
49:d0:34:d9:8e:b6:ce:8b:ae:d4:26:df:ee:04:d5:
51:d0:9d:43:37:cd:a9:8b:9c:80:a8:87:d9:16:51:
b3:bd:77:cf:ac:cc:66:94:d5:ed:3c:a3:a1:d7:eb:
bf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BE:48:42:FD:82:4A:42:17:1F:0B:CF:25:7F:A5:02:87:E0:62:E1
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2f:ae:35:53:ad:ae:e5:3c:0d:fc:d7:0e:91:38:1e:c3:b0:
08:24:65:75:91:b2:9c:7d:a0:bd:41:18:db:0e:de:77:f5:46:
a5:8a:95:4d:41:71:9a:de:08:4a:04:99:b9:d2:86:e7:d9:c8:
a1:e6:cb:e4:4b:61:b3:0d:6f:58:fb:df:d4:b9:a4:ed:ea:cd:
95:37:89:29:b1:ff:11:0e:f1:c9:b8:a0:2c:04:c2:0e:97:f8:
7c:8d:c4:77:13:71:b4:43:86:8c:c2:07:e9:e8:75:e8:ae:c1:
38:3d:15:68:75:c6:56:70:7e:15:00:ae:66:00:57:c2:bd:96:
0e:a3:9d:46:8e:70:9a:81:49:fc:ca:02:d7:ea:62:18:ee:2f:
79:ab:94:9a:47:08:a9:49:37:a9:6d:f4:2c:f0:7b:bd:bd:0e:
10:1b:94:a0:35:4a:9e:8f:ed:b3:32:90:ad:3a:b3:0b:2c:49:
76:b4:4d:4c:59:47:9a:6d:4f:b6:a1:8c:ea:15:55:cd:76:bf:
89:be:77:d6:b7:b2:7b:79:da:83:4c:a2:97:a0:28:81:d1:53:
32:fa:3a:75:77:a7:be:68:03:79:a2:7d:7f:db:2a:b9:46:1e:
eb:3c:06:34:88:37:10:29:ad:ea:a2:17:12:f3:f3:9d:be:9a:
01:83:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:18 2025 by rpki-client