Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
File: xyIeQCmYq8HwNUdeFYt06MdpIMA.mft (raw, json)
Hash identifier: ZxlIv9rrakpoYCAluiMCoIx4Za8glEhSroWHmvm2jwM=
Subject key identifier: 0C:01:AA:8B:D4:A0:E4:BF:F8:AA:3E:4A:13:43:AE:A3:19:56:12:72
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial: 01976D742AB2C14B29636D506679768049D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 08:00:18 +0000
Manifest this update: Sat 14 Jun 2025 08:00:18 +0000
Manifest next update: Sun 15 Jun 2025 08:00:18 +0000
Files and hashes: 1: FIv37bh0ZRTnGv0_RzWoQo8NJHg.roa (hash: 7fKZSi422ANEwoYfgRX2lfWBp8KGEhw9eJL3r9FHZjI=)
2: mWhSvkUBXsFafV4R5CtF1RFCi98.roa (hash: SLf4YYuqQC736cXUt3YUMZMsShhNwZceRr+OVNF0Bxc=)
3: xyIeQCmYq8HwNUdeFYt06MdpIMA.crl (hash: 6UH8JDp2h57MfE78SeTp5tfNRmco8YlVUiLo08vgz9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:2a:b2:c1:4b:29:63:6d:50:66:79:76:80:49:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
Validity
Not Before: Jun 14 08:00:18 2025 GMT
Not After : Jun 15 08:00:18 2025 GMT
Subject: CN=0c01aa8bd4a0e4bff8aa3e4a1343aea319561272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:23:74:c9:ad:b8:9f:50:3c:dd:e6:ec:e9:
3c:30:40:6f:b3:1f:af:a1:88:e2:86:aa:b9:4f:a4:
e7:e8:88:55:57:2b:a9:1e:f5:83:44:69:dd:68:27:
ed:94:f0:7b:23:f4:ef:d9:8f:91:87:1b:91:2a:e7:
8a:d9:fa:6f:71:7c:90:b7:a3:f8:64:6d:a1:d7:80:
13:a5:1b:d8:ae:98:6a:4a:55:2d:ac:49:d9:ee:4c:
ff:ab:fc:62:c7:75:27:75:bd:82:4c:1e:ab:03:cf:
b5:0c:63:ae:1f:28:6d:ef:2a:03:06:78:c0:b8:e4:
2c:d0:83:43:68:fa:71:96:e7:5f:dc:b9:81:54:2f:
63:fb:ee:71:ad:c8:e8:26:17:b0:0f:b9:d3:78:0e:
e7:2b:c2:e1:9c:8e:14:c1:8d:4a:4f:41:67:ea:24:
13:48:7e:44:c3:e4:7a:92:1d:9c:ed:6c:8b:d0:a8:
1b:5c:93:69:0e:07:12:7c:3b:ba:f9:1a:93:95:6e:
ff:d9:4e:5b:be:c4:03:1b:e9:e9:a5:72:d4:3d:3f:
a8:b5:65:d4:b7:7a:32:ef:64:a7:6a:f8:b9:ca:16:
a8:2c:17:d6:82:d1:6c:30:98:c9:ac:e5:34:a2:74:
0e:47:4e:2c:a0:fd:db:54:21:4a:9a:3a:0f:58:15:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:01:AA:8B:D4:A0:E4:BF:F8:AA:3E:4A:13:43:AE:A3:19:56:12:72
X509v3 Authority Key Identifier:
keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f3:a5:54:1e:53:40:2d:15:ef:9b:aa:09:8e:c3:4e:e0:ed:
cf:7b:de:e2:7d:87:21:f4:a2:d7:3d:c9:20:7c:94:aa:0d:88:
8e:c7:2c:29:b7:9c:9f:f8:09:80:05:12:43:fa:76:a3:bb:e5:
2a:97:2a:50:18:53:30:18:9c:b9:33:61:d7:80:47:45:98:8d:
4c:c4:36:60:d4:f7:d9:58:57:b2:eb:67:b6:ef:3b:e6:e6:78:
fa:5b:b2:d2:82:9e:48:5a:6c:74:93:3f:48:eb:dd:b9:0d:33:
3c:a3:a1:03:f9:6a:7d:4e:5a:7e:c1:0b:a6:ee:60:c6:8b:ba:
9f:d6:ae:84:d4:26:83:e8:9a:f0:e9:c2:a1:76:44:b3:ec:97:
8d:72:3c:b2:0e:4f:c5:c1:cf:63:04:b4:2d:29:21:24:cd:1f:
66:9a:1e:47:f6:2c:13:7b:91:fa:8b:33:71:2c:e2:2f:fd:45:
0f:2a:2a:df:00:f4:c5:21:e4:17:35:70:0c:9c:b8:dc:d7:07:
e2:8a:34:43:e1:de:af:b3:9b:26:c7:5f:55:6a:13:a6:b5:81:
b4:48:c7:ca:b8:04:33:fa:1c:73:8e:2c:22:8d:86:b1:10:02:
7c:20:2f:39:5d:53:09:4b:0c:c6:43:6c:2b:f0:1a:ec:4f:1c:
02:e3:bc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:34:48 2025 by rpki-client