Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
File: xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json)
Hash identifier: 8hz3W342aLH7lh2q4DvYVKC38nxaNN7YEPjwIDGeZkw=
Subject key identifier: 74:7C:6F:2F:14:E9:A0:E0:12:3E:CA:1C:A3:CE:7B:62:22:66:BA:09
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 019771F5FB51A1CE158775BA91320FA0192A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 05:00:35 +0000
Manifest this update: Sun 15 Jun 2025 05:00:35 +0000
Manifest next update: Mon 16 Jun 2025 05:00:35 +0000
Files and hashes: 1: Wmc5yYVaGJ7uHE24vbc7tW45DOM.roa (hash: eqf1mvXxL8vo0q3xITeHe/8//1Yj7TaFakzQyNyDmc8=)
2: ijYRlmNl6uA744Qux7JZwJCActg.roa (hash: pRc6ysDWq8mR6b4C/2Dfn02VAUo5UWjYvCBDj+PrKhE=)
3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: b+sN+2v4Twjr6n0fk/uENaJTSXukz1MpVi2q2BN23JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:fb:51:a1:ce:15:87:75:ba:91:32:0f:a0:19:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: Jun 15 05:00:35 2025 GMT
Not After : Jun 16 05:00:35 2025 GMT
Subject: CN=747c6f2f14e9a0e0123eca1ca3ce7b622266ba09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:fa:6f:bf:69:47:77:5b:c0:c5:78:d0:69:
5f:7e:b8:fe:00:ef:32:cf:34:c1:1e:d1:ae:9e:c3:
e1:80:1e:e8:96:7e:9a:95:71:96:ae:04:9a:3f:aa:
f3:ea:c6:73:fa:12:1c:75:8d:bf:cf:89:d6:aa:22:
70:65:15:4e:9d:3d:3d:4f:22:10:d9:ff:c6:43:e3:
b5:88:b5:08:82:d9:c7:c4:1d:c0:54:2e:67:c5:ae:
3f:90:b8:08:bb:08:12:a2:2e:03:74:aa:21:4b:a0:
26:69:f8:d7:b9:34:c7:2e:09:75:0e:d5:43:9d:d8:
62:05:b1:3f:93:6d:11:15:31:c7:c2:04:19:9d:ad:
aa:b7:9f:3d:db:ab:88:9b:0a:24:dc:e1:05:76:bd:
e1:ed:94:a4:e3:78:c2:5a:61:ae:d3:b0:19:4b:62:
df:1c:8b:87:02:2e:23:92:49:5b:79:25:7d:15:a4:
73:37:2c:3c:ea:1d:76:08:0f:c2:8f:e3:90:e8:33:
fb:df:7a:10:40:c8:96:c5:fd:0b:f0:ac:d4:6e:f6:
02:14:52:29:9a:df:8b:a6:da:71:18:25:40:11:e0:
42:2d:fd:a3:28:7d:0b:8e:aa:ae:55:28:09:a3:68:
0a:3a:e2:5a:7e:13:62:6d:83:db:ef:6e:c7:9d:ab:
09:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7C:6F:2F:14:E9:A0:E0:12:3E:CA:1C:A3:CE:7B:62:22:66:BA:09
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:43:56:ed:de:6d:3f:5d:fc:67:41:4e:f9:71:23:cb:ff:a9:
72:c5:0d:b8:db:a8:22:b0:37:09:5f:65:08:67:69:29:0b:a1:
cd:17:a7:af:3e:15:96:0e:ea:73:39:8c:96:17:e6:c4:0d:36:
88:40:20:16:df:68:aa:48:1b:79:43:cb:e0:d1:84:ae:88:63:
dd:51:55:df:f5:ad:3e:72:5e:46:ab:b5:2d:f9:8f:45:53:23:
56:a9:cd:7c:d0:b6:d6:b1:8d:5d:cf:c4:bd:2d:dc:0e:01:c0:
ce:c5:d6:06:39:60:2b:7c:03:f8:34:8d:c0:42:e6:05:bc:7f:
69:f7:3f:d2:bd:4c:c9:23:31:a8:49:75:ff:80:57:5e:bd:e0:
08:23:1f:62:9b:04:04:fe:55:b4:53:3f:8a:3c:88:76:d4:44:
49:d0:74:3d:ee:5c:0d:d6:a6:63:b4:75:39:db:de:93:56:76:
02:5f:26:83:73:cf:aa:99:05:52:78:de:f3:79:87:87:4e:f0:
b2:18:14:e2:95:58:94:f9:62:bb:48:97:6c:6e:a7:92:bb:14:
6a:03:10:7c:de:e5:e7:9e:85:d9:1a:14:60:fe:d7:78:e9:43:
91:94:73:73:20:a5:9a:fd:48:f1:a1:5e:5d:00:58:c8:b8:2c:
e0:99:d2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:52 2025 by rpki-client