Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
File: p_xcZck6dAQIaxelTn4NqWCpspM.mft (raw, json)
Hash identifier: nyyrfbVVhOSloK3COgQ7+hLdIsI+WU2IHXYqfpz+jDE=
Subject key identifier: F9:AF:E9:77:22:0D:20:25:FB:27:6C:37:E6:A8:E0:7E:48:51:A9:A7
Authority key identifier: A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
Certificate issuer: /CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Certificate serial: 01976F99AF3CD47497F7386DEFD668C5D266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
Manifest number: 1113
Signing time: Sat 14 Jun 2025 18:00:32 +0000
Manifest this update: Sat 14 Jun 2025 18:00:32 +0000
Manifest next update: Sun 15 Jun 2025 18:00:32 +0000
Files and hashes: 1: 8-SPB1FRD1dqgSwieEEafk1GdQA.roa (hash: vazRE5ylOn6vVMnXFU4rXRZh7sO8QjAU8zOnvhOztXo=)
2: p_xcZck6dAQIaxelTn4NqWCpspM.crl (hash: qMcmpjzpWuJTXc9zGO6/SmmKE5v6pRn9hUJmHCoq4Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:af:3c:d4:74:97:f7:38:6d:ef:d6:68:c5:d2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Validity
Not Before: Jun 14 18:00:32 2025 GMT
Not After : Jun 15 18:00:32 2025 GMT
Subject: CN=f9afe977220d2025fb276c37e6a8e07e4851a9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1c:e7:ba:93:8f:c3:63:bb:77:d7:11:fc:9a:
e4:a2:9e:95:3e:d2:a7:ae:bc:0b:70:ec:ed:ae:95:
ff:24:97:16:42:fa:88:ef:00:13:29:e9:3b:e7:80:
27:34:7c:25:75:99:e1:1a:8b:8b:6c:db:c3:5e:2e:
b3:95:c4:0d:84:90:94:64:2d:10:56:39:2f:2e:62:
6a:c5:10:17:b2:37:db:55:8c:92:04:e3:6b:32:2b:
99:d7:f1:84:6c:52:99:02:9e:4a:27:f4:d7:2c:a2:
7a:28:65:55:d2:b6:8a:be:28:e6:70:8f:d9:3f:d8:
46:28:93:3f:18:c8:c5:ec:06:be:2e:9e:94:17:c6:
50:2d:7f:9d:01:b4:ab:98:ec:89:1a:b3:e2:3c:23:
a9:cc:42:7f:a4:21:a1:3c:1c:ab:e1:ad:40:18:d3:
15:37:48:b1:3c:bc:fc:e1:80:16:7e:86:a7:cb:12:
43:79:af:e4:91:6a:4a:cd:da:c6:e9:56:6e:60:dc:
42:1c:c5:53:dd:f0:7d:10:2c:e8:72:c3:f1:5e:0b:
59:1b:bb:ab:3c:3c:b4:83:b2:d5:7a:22:67:5b:99:
4b:49:39:aa:be:35:06:5f:5b:65:76:de:17:7b:2c:
df:d5:d8:79:9b:05:ee:e7:ac:c4:86:bf:88:c9:d9:
2f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AF:E9:77:22:0D:20:25:FB:27:6C:37:E6:A8:E0:7E:48:51:A9:A7
X509v3 Authority Key Identifier:
keyid:A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e4:37:1e:1a:67:f7:1e:08:99:d0:ac:ad:b4:fd:fa:0d:76:
36:d2:85:ba:27:7b:3f:d7:38:8c:03:95:8a:93:3e:34:78:98:
c5:dc:5e:b2:0b:e0:21:d5:bf:4e:bb:a0:26:1e:fc:51:df:d3:
18:28:f6:5c:ef:7a:a4:4a:49:53:5d:40:2d:ef:1b:65:47:40:
27:66:f9:ff:c1:94:cf:c6:21:10:8d:80:a7:02:77:aa:59:b8:
ce:c3:0b:57:26:2e:b4:64:28:4a:bf:41:3c:6b:47:e7:76:ac:
9b:ab:9c:ca:30:75:71:32:75:bb:a5:ee:fe:5b:f0:66:1c:84:
a9:1c:5d:07:17:14:14:cd:c1:9d:aa:a2:30:7e:54:c8:75:c1:
7c:cc:ab:71:42:04:1f:09:62:c5:c6:2a:d4:5f:f9:84:5f:8d:
7f:84:93:4d:8d:2d:1f:69:4b:12:57:66:60:37:11:32:98:9d:
35:c4:f4:b2:ee:d9:8d:85:dc:ee:2d:cb:9e:64:14:c8:65:32:
78:72:6d:c0:55:4d:d6:9b:e6:a9:0d:12:52:2b:7c:37:21:7d:
a2:59:92:aa:14:43:b6:6f:11:94:24:22:e4:2a:56:7f:d1:8e:
f2:3a:0e:14:1a:9c:21:1f:10:5b:11:68:14:ab:44:8c:f3:dd:
d8:62:7d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:35:57 2025 by rpki-client