Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
File: x2oNsIMDONLSlh5Mj_sKtaA__l8.mft (raw, json)
Hash identifier: OPrZhJHRHa2IuhhYNhe4lAdB+K3mZhWIpLTQ5DcZM2M=
Subject key identifier: 67:2D:34:16:99:1A:BE:A7:B3:0A:6C:84:88:DF:46:3C:28:2B:91:2F
Authority key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Certificate issuer: /CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Certificate serial: 019768BC5F90CAF1E03A32419A8EBF78EBD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
Manifest number: 1018
Signing time: Fri 13 Jun 2025 10:01:05 +0000
Manifest this update: Fri 13 Jun 2025 10:01:05 +0000
Manifest next update: Sat 14 Jun 2025 10:01:05 +0000
Files and hashes: 1: Ff3N8PO1mcQncsXGHiQUjQO2nRw.roa (hash: iiJaJiMdSghzZUoCo21ZColIpsI+U3kb/p0Er1rgouw=)
2: x2oNsIMDONLSlh5Mj_sKtaA__l8.crl (hash: +T/jZoO7riKNRHLjWOopI7IpTnIMiu5jwvLU7Keqsmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:5f:90:ca:f1:e0:3a:32:41:9a:8e:bf:78:eb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Validity
Not Before: Jun 13 10:01:05 2025 GMT
Not After : Jun 14 10:01:05 2025 GMT
Subject: CN=672d3416991abea7b30a6c8488df463c282b912f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:56:a8:b1:ee:3e:fc:ad:9d:7b:b4:28:5d:49:
85:80:68:5f:61:1a:6c:de:a1:54:03:42:cc:ac:39:
eb:9f:0b:a3:a4:ee:83:cb:07:ed:69:8c:65:5d:c0:
04:73:97:c7:a0:f6:9b:ce:71:06:d4:31:2b:47:53:
78:99:a5:95:3f:0e:8d:7f:41:b5:d7:85:7f:0c:58:
b5:33:94:be:78:c6:bd:82:cc:d0:7b:ac:04:51:03:
5c:7c:06:91:77:2f:08:8f:5d:8a:fb:e6:53:3f:09:
a9:e4:c1:fd:64:34:41:c4:64:be:cb:34:96:e8:1e:
9c:c0:6a:76:f6:eb:09:e9:50:48:b6:30:ea:aa:78:
b0:e3:c4:24:08:ec:d0:f7:a7:b6:cd:df:d6:b4:11:
ee:44:58:5e:aa:9e:23:32:99:f9:1f:e6:6f:43:de:
61:64:e2:5a:21:97:83:33:20:a0:b2:7c:26:c5:42:
83:27:9e:ec:df:6f:b9:f1:4b:64:40:a4:28:54:cc:
0f:57:64:32:47:57:04:4f:b1:fc:36:19:98:59:c8:
5f:90:fb:63:52:78:30:81:0d:f0:c6:10:c3:e0:83:
54:bc:d6:7c:75:16:68:3c:91:e2:bd:4f:ab:a5:70:
c5:c8:e5:79:de:fc:82:73:7d:04:fd:2a:44:11:f5:
e6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2D:34:16:99:1A:BE:A7:B3:0A:6C:84:88:DF:46:3C:28:2B:91:2F
X509v3 Authority Key Identifier:
keyid:C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:07:9e:15:0a:20:e6:17:f7:97:48:32:49:54:66:71:e1:ad:
cc:85:b3:8d:9c:28:f5:8b:bb:e8:3d:27:64:19:de:eb:f9:98:
10:1c:dc:cf:aa:2e:55:d1:ae:73:e1:e5:e1:8b:9d:a9:4b:1d:
36:2a:03:96:f0:cf:d9:a1:04:33:e8:25:1b:cf:67:c7:ce:3d:
8a:91:d9:15:d1:db:17:4d:df:07:7e:d6:0c:ee:00:04:40:74:
3a:2e:26:ef:ac:75:3e:46:f5:31:48:fc:09:67:1e:49:4e:dc:
e1:b7:76:85:ca:12:19:13:7d:f4:57:50:56:1c:b1:41:72:05:
a1:a8:7d:4e:00:3e:67:3f:b3:c0:5a:bf:d7:b7:6d:d0:b8:cc:
fe:92:c3:10:7d:e3:b7:fb:23:8e:86:9c:59:aa:b6:37:fd:41:
03:ab:fc:b7:99:88:48:4f:13:4e:84:b8:81:7e:a2:fb:b4:26:
0e:e1:73:24:4b:99:6f:76:25:60:11:73:4b:b6:8e:f5:09:90:
a7:30:f0:26:71:7f:ec:51:68:55:da:0f:e8:a7:cb:57:db:bb:
a3:88:64:4c:4f:82:32:e0:95:fa:c0:bb:4f:6c:ca:3e:8b:b0:
f4:30:97:1b:89:65:28:b6:83:3b:b2:87:30:4a:39:87:df:51:
10:9a:e2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:06 2025 by rpki-client