Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json)
Hash identifier: SmGkHqdVbrC18SpBWCIxt/8up8j2K0sbMn28r1pN2Zg=
Subject key identifier: F2:86:3D:BE:96:D7:8B:69:08:72:B5:CA:56:DC:4F:6E:BD:0E:EA:57
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 019770E3592F4257E26AA203FA928F2986E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
Manifest number: 0383
Signing time: Sun 15 Jun 2025 00:00:37 +0000
Manifest this update: Sun 15 Jun 2025 00:00:37 +0000
Manifest next update: Mon 16 Jun 2025 00:00:37 +0000
Files and hashes: 1: S8F_BqZIysXEe93wY7E7gYPrrEE.roa (hash: yxA+Gb1gegChlT9RImwWVjBq+UzqZu56Rk2vXQ11x70=)
2: mHdbhQxgyf7CV9jCGJvliFVilXc.roa (hash: 4CdqTf57TkDxaRHOcnXl2aFyjkgmNRswPmW9ZMUYxw8=)
3: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: UpnKHbhG4Rcp5co++TLIz0DuEAv2CXhDOY8YW3/Ds/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:59:2f:42:57:e2:6a:a2:03:fa:92:8f:29:86:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Jun 15 00:00:37 2025 GMT
Not After : Jun 16 00:00:37 2025 GMT
Subject: CN=f2863dbe96d78b690872b5ca56dc4f6ebd0eea57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:36:2a:d7:26:a7:0a:9e:42:1f:68:90:ee:15:
bb:19:10:be:47:92:4f:c7:5a:2a:37:4f:42:12:55:
b4:45:86:30:10:78:46:bd:1d:5d:b8:e0:de:f0:c6:
6b:ad:01:69:10:9d:77:de:4d:50:ba:94:d4:78:46:
d8:e1:4d:63:0f:d0:9e:92:ab:f2:2c:a6:99:42:47:
83:af:29:2c:35:2d:ca:74:0b:a7:63:2e:a8:06:fe:
16:b0:7a:76:0f:29:2c:b9:95:e6:15:a5:4b:a7:4a:
be:3b:8f:93:95:a7:6a:53:17:5b:9d:d1:91:bb:78:
b9:31:c3:f2:e8:cc:ad:18:36:0e:87:a0:f2:35:06:
00:d7:53:c8:e8:0d:72:79:0b:94:f2:98:33:0d:bf:
80:5d:e5:1a:3e:d7:4c:6a:5a:ed:22:eb:84:a6:39:
71:7d:f0:40:a5:c0:e4:e6:03:35:08:22:1b:51:c0:
f2:b2:ed:a3:ba:e5:3d:b2:9b:0e:01:bd:46:ad:90:
3a:de:c6:46:63:b6:17:3a:22:ea:e9:d5:49:49:e9:
9e:18:01:8f:8a:33:30:0f:83:a1:1b:39:52:c6:9d:
9b:3c:90:0e:de:36:c8:0d:2e:37:ff:21:e0:4d:77:
6a:b9:a6:33:8a:14:48:40:6c:db:f8:56:39:e1:45:
c3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:86:3D:BE:96:D7:8B:69:08:72:B5:CA:56:DC:4F:6E:BD:0E:EA:57
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c8:57:83:55:ff:56:3b:a5:98:c9:99:3a:e4:79:91:a6:93:
88:b9:20:48:17:a5:43:8d:90:31:61:e4:4e:94:87:d6:07:ce:
a5:48:bf:0c:8c:8a:23:eb:a3:6b:c2:68:9b:15:57:21:70:15:
8f:0c:3c:09:21:96:f2:15:79:c0:1a:f8:0e:99:cf:12:4a:2c:
09:56:7a:0f:da:2a:41:25:ab:c2:53:65:b0:05:29:47:0f:37:
c8:f6:56:29:e6:26:96:4b:ba:65:45:dc:6c:54:a7:0d:3a:3d:
9c:0c:b7:54:b8:c1:be:62:1e:79:3f:b5:77:d2:35:72:af:ef:
c3:3a:4e:d8:e9:da:3d:36:4d:6d:0c:8d:ab:e9:fe:ca:8a:7d:
85:b4:83:e9:c2:a9:7a:cc:7c:2d:56:9f:66:88:fd:8e:41:f2:
95:41:ca:b6:6c:7f:9d:38:0b:a0:38:3e:b9:d8:26:92:d1:e4:
8d:55:df:ba:4b:d3:c0:29:5c:a1:91:8f:99:87:bd:29:3a:20:
4d:e7:c4:aa:77:f4:f4:c0:a2:51:f3:55:8c:61:38:c5:a7:00:
bc:1f:50:04:dd:29:b6:1a:48:9c:3b:38:f6:cf:e6:94:7d:dd:
bb:56:d1:f3:34:f2:4d:7c:a5:ef:30:1a:c8:ce:dc:2c:91:c8:
1e:a7:83:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:20:36 2025 by rpki-client