Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
File: xtGGU_v7b9VzLclAwdZdd6sLv6M.mft (raw, json)
Hash identifier: BOWbrTQR9dJ+XKpKtenYW+39a2eEghTmfjGSODTkKpM=
Subject key identifier: 45:D0:55:99:98:6C:D9:6E:0C:99:EC:80:7C:96:1E:AE:33:B1:F6:05
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 01976D7489FDE3FEE1DC0A19C1617BC27ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
Manifest number: 1595
Signing time: Sat 14 Jun 2025 08:00:43 +0000
Manifest this update: Sat 14 Jun 2025 08:00:43 +0000
Manifest next update: Sun 15 Jun 2025 08:00:43 +0000
Files and hashes: 1: SxFF3ZURcZJdwD8_1vGA3WdUL0g.roa (hash: RJe7dDjJagaac3SQE7MDMwaxQL/mMnlWG9ytHOYHflM=)
2: uun5L09jXYEGXJtFrgW0cvRe_KQ.roa (hash: WnN/CnTVkPE7SxyO4PbdiYAhklcuoQlzHVaZbDdUOFQ=)
3: xtGGU_v7b9VzLclAwdZdd6sLv6M.crl (hash: rP4Qpj0PuApdAO8YkN0E++lhMYzPL4I0t23eKmerH/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:89:fd:e3:fe:e1:dc:0a:19:c1:61:7b:c2:7a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Jun 14 08:00:43 2025 GMT
Not After : Jun 15 08:00:43 2025 GMT
Subject: CN=45d05599986cd96e0c99ec807c961eae33b1f605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:43:d9:36:cf:9f:05:b6:79:16:54:95:7a:
25:67:1e:b3:35:ef:19:cb:46:f0:1d:51:e4:fa:67:
46:19:12:93:3c:c0:c5:e1:8a:4b:f5:d6:ee:22:4e:
ea:59:17:f9:4f:3d:02:5b:72:47:f0:d5:72:7a:cf:
82:93:34:93:69:f8:c7:a2:44:6d:21:61:96:f3:41:
f0:ee:c7:21:1a:7c:9d:15:4b:5e:52:ab:a7:74:2d:
f3:bd:7e:c9:3a:94:c6:f6:13:c6:0e:32:88:03:3b:
5c:a9:d7:bd:72:bb:4c:7f:7b:33:08:78:ac:72:17:
74:1a:e1:0d:04:c0:83:89:78:5e:75:51:92:ff:b6:
a7:f3:a3:6a:78:2a:e0:b5:94:69:b5:d2:32:ca:68:
77:dd:f4:ec:fe:c5:c0:c5:d4:90:a4:dd:52:74:74:
94:a3:de:11:e4:fd:ef:21:fa:20:c4:f9:04:d9:7a:
50:39:09:d4:06:77:60:ae:ff:6f:81:87:25:13:c2:
8c:ac:cf:84:c2:fe:21:c2:80:6a:9b:04:48:e1:21:
1a:62:14:2f:da:e8:5b:c7:44:14:08:a1:91:e9:69:
27:e1:e3:a8:87:da:3f:f5:32:71:5a:d3:8a:d8:77:
86:56:69:95:2e:bf:c1:30:da:9b:26:fd:7f:ef:3b:
c9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D0:55:99:98:6C:D9:6E:0C:99:EC:80:7C:96:1E:AE:33:B1:F6:05
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:45:9b:8b:19:7a:f2:74:9e:f1:09:f9:0c:da:38:1d:9d:d7:
ac:d0:3f:7d:42:0d:a8:df:ad:cc:c0:09:ab:b0:a9:da:b4:3f:
81:c2:72:58:7e:b6:dc:e6:8c:a6:20:c5:9e:d5:8a:6c:cc:5b:
96:8f:e8:7c:1a:37:59:66:03:bb:c7:02:62:83:3d:86:39:8c:
76:ce:fd:52:c3:ef:a6:6d:52:35:db:43:74:ea:f1:3f:84:13:
c3:8f:28:b8:2d:ca:6e:32:f5:c8:55:76:7c:83:7b:16:1d:c9:
60:93:ef:bd:13:ad:3d:b5:ff:5c:7d:c9:57:83:47:9c:27:25:
1a:38:4b:e9:48:28:65:bf:25:22:d9:9f:a7:fb:37:0f:69:90:
f2:c0:32:2b:9b:48:39:f0:8f:57:d8:70:6d:46:60:65:59:b7:
4a:45:b0:45:d4:09:a0:f9:3f:94:a5:bd:56:74:b6:43:cf:6f:
be:c6:9a:f5:26:89:4b:29:b8:7b:7b:33:15:89:67:91:72:58:
31:3c:d4:e8:36:3e:46:e9:36:82:10:cd:ab:7b:4b:bb:27:fa:
01:8e:d1:06:f0:b6:6b:94:72:4c:7c:90:c9:5f:fd:82:1e:ab:
cc:fb:f1:41:3c:af:5b:27:ab:81:12:a0:2b:82:30:8f:ca:60:
cf:6a:e8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:44 2025 by rpki-client