Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
File: xMO8BapSq5610YT1CInx_wyQzng.mft (raw, json)
Hash identifier: ukl+1c3YeIjOOWsPhM69xgMM7EN2y36xwVSvaWm8sc4=
Subject key identifier: 63:9A:17:61:22:4F:EA:FE:33:E9:B4:46:2D:13:84:47:AB:60:8E:92
Authority key identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
Certificate issuer: /CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Certificate serial: 01976F99AC3B846C5B917D6A088745C36D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
Manifest number: 0BF7
Signing time: Sat 14 Jun 2025 18:00:31 +0000
Manifest this update: Sat 14 Jun 2025 18:00:31 +0000
Manifest next update: Sun 15 Jun 2025 18:00:31 +0000
Files and hashes: 1: 3Krd3X8gM6K6uQN1pZPs1zNdYR4.roa (hash: fGcfj1MLOHaxsx+wYEI+CaMKulrmVPv7+yNp06XKMSk=)
2: xMO8BapSq5610YT1CInx_wyQzng.crl (hash: oWGFHp0rWtXH2oyuVi/lrKytUCokgfwaW3nGzpp9wMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:ac:3b:84:6c:5b:91:7d:6a:08:87:45:c3:6d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Validity
Not Before: Jun 14 18:00:31 2025 GMT
Not After : Jun 15 18:00:31 2025 GMT
Subject: CN=639a1761224feafe33e9b4462d138447ab608e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:8f:4c:97:9b:6d:9d:eb:4b:65:1a:11:a0:
9a:a7:92:72:ea:95:91:fb:98:10:07:8c:6e:99:13:
36:b8:b1:69:4a:96:c7:b8:8f:30:d4:7c:41:2b:76:
db:62:13:4e:ea:83:4f:b1:a8:36:7c:08:11:1c:ba:
80:d9:7b:ad:b4:2f:73:03:60:a1:f7:39:10:ea:1b:
5c:dd:f9:be:a2:bf:16:a7:27:d8:68:30:b5:2d:e3:
61:c4:56:f0:43:16:a4:2b:33:7f:58:46:ee:ce:68:
a9:c7:56:25:ee:2a:49:22:c0:72:92:6a:ed:81:50:
fb:a1:26:f5:9a:6c:f3:fb:7b:dc:47:5f:19:58:02:
d3:29:bf:51:6b:97:a9:3b:0a:e9:f8:38:4f:6e:24:
c1:50:05:22:9c:41:fb:ea:ee:28:83:e8:36:c4:3d:
25:51:ce:8c:0f:07:cb:e5:33:fc:0f:96:84:5b:d9:
84:cb:e5:c5:4f:98:c2:23:61:01:5f:e2:8e:83:5e:
82:4e:33:e9:b7:7b:3d:4b:76:3e:dc:59:17:1c:ec:
a2:0b:db:d6:09:e2:9f:32:bb:ad:c5:34:60:e4:60:
a8:33:0f:1b:14:76:4d:12:87:c9:1e:c9:f9:92:8a:
17:54:78:b5:a3:4a:d9:11:0c:e6:98:e9:99:4e:41:
f7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9A:17:61:22:4F:EA:FE:33:E9:B4:46:2D:13:84:47:AB:60:8E:92
X509v3 Authority Key Identifier:
keyid:C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:47:9e:06:12:c3:bb:d3:43:46:58:4d:e5:29:5e:ef:22:f9:
a7:47:d1:b4:04:13:0e:14:d1:ea:c5:68:3e:d6:0e:cd:a2:fa:
a7:c3:ca:50:d9:4f:83:0a:3e:ff:ed:01:d5:bc:31:c0:78:8f:
b7:6b:a2:3d:4c:96:67:61:33:fd:88:51:f5:b6:8f:39:33:9f:
7f:44:cd:3b:6f:1e:91:00:c8:f7:64:f2:84:b0:18:d3:c9:ac:
20:6c:3a:26:c0:17:7b:53:d3:d0:51:a9:91:e1:34:38:7b:e2:
1c:1d:d2:84:38:3b:44:8a:e0:17:99:86:16:03:4f:aa:b8:93:
4e:0a:81:9e:25:79:a5:87:80:a0:c9:1e:e3:23:ac:25:16:8c:
93:63:22:bf:89:2d:a3:4d:a3:a9:06:b9:5e:90:ca:f0:cf:68:
e3:4a:89:9c:dc:f9:1b:2c:da:a5:e4:b3:eb:11:a5:22:84:76:
9a:5a:0d:42:b1:ef:1d:c5:1e:40:9d:8f:57:de:f5:c6:3b:61:
07:bc:f8:21:e9:26:07:a4:da:57:33:dd:38:d8:27:40:8f:fe:
1c:4f:75:6f:7a:83:38:6a:8f:7a:34:de:f1:14:15:c2:b1:84:
91:bc:a4:48:37:84:fb:58:de:57:5e:c3:e4:27:f1:5a:12:e6:
70:5d:6d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:20:31 2025 by rpki-client