Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
File: xN3-D0v7aYLxlgqyo_rnovtFepM.mft (raw, json)
Hash identifier: haohq4iqmP9PQPHd02NZ7MIFW//0FXwZiPBxKvBu+6c=
Subject key identifier: 55:B5:9C:C7:C1:20:BF:3A:AF:82:84:7D:D4:E9:51:8D:06:00:DB:81
Authority key identifier: C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
Certificate issuer: /CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Certificate serial: 019779E6BCD8DEE10F70051BDD834EADAB60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
Manifest number: 0718
Signing time: Mon 16 Jun 2025 18:00:54 +0000
Manifest this update: Mon 16 Jun 2025 18:00:54 +0000
Manifest next update: Tue 17 Jun 2025 18:00:54 +0000
Files and hashes: 1: S8JU_Rcn4aoynb-Ajo5SG-rhPXY.roa (hash: fzgvAAaxWzcuS3HHSBSyM+73bTeADHpyyR/eP8i6gAs=)
2: xN3-D0v7aYLxlgqyo_rnovtFepM.crl (hash: FiuxCbmt1IDda90PMBqHkLud7+ZRNtDfxqzvegu0hjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:e6:bc:d8:de:e1:0f:70:05:1b:dd:83:4e:ad:ab:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Validity
Not Before: Jun 16 18:00:54 2025 GMT
Not After : Jun 17 18:00:54 2025 GMT
Subject: CN=55b59cc7c120bf3aaf82847dd4e9518d0600db81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:1c:37:74:96:f1:42:28:db:b0:80:8b:cc:
22:09:1c:91:ac:d4:b0:a7:d8:7e:7a:33:d1:a8:12:
61:9c:06:4b:47:37:99:5b:f7:01:61:3e:dc:5f:3b:
c5:55:a0:dd:a2:ea:1e:a7:aa:97:99:39:f8:8e:c2:
cd:f6:ab:42:aa:b7:0d:a9:4a:4a:89:59:40:fb:40:
10:c2:58:18:8d:93:d8:c3:c3:75:7a:6b:1e:01:5b:
80:be:33:be:70:99:18:4c:f8:18:d4:92:5e:be:94:
6d:30:3e:95:29:9e:6a:60:88:35:77:99:8f:15:35:
16:78:b9:b0:85:67:0d:56:00:8e:1c:04:1f:7f:f6:
8a:e0:a0:39:72:a2:2a:40:51:4e:a9:e0:b7:96:f8:
2d:02:87:35:c1:8b:bb:b8:f7:00:62:a9:9e:32:56:
16:b3:10:bc:0d:7b:f6:44:09:fe:f3:7f:ec:e8:0b:
a9:ae:41:87:0e:5c:b8:1b:68:37:cb:15:5b:b2:67:
73:65:13:74:18:26:3a:69:92:31:99:1d:6e:a2:0a:
bc:6f:d0:bd:de:41:79:58:24:dd:53:f8:ab:fb:86:
66:00:78:6e:b5:e6:eb:bc:1e:d7:01:76:a1:24:4a:
0c:87:4a:e3:6b:39:b6:01:43:12:87:42:11:b8:a5:
8a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B5:9C:C7:C1:20:BF:3A:AF:82:84:7D:D4:E9:51:8D:06:00:DB:81
X509v3 Authority Key Identifier:
keyid:C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e1:45:a1:fe:39:7d:2a:d0:51:12:ed:f7:69:6a:89:c6:3d:
2a:5b:46:2b:b9:d5:57:58:32:41:4c:bf:bf:57:3f:0d:b3:e3:
2c:b4:dd:f9:2e:3a:91:a7:99:57:d3:81:ae:f2:bb:61:95:0c:
4e:56:d3:d5:82:28:42:06:2d:52:7d:29:d6:6d:c1:46:64:af:
83:ba:74:77:6f:3a:4a:98:04:52:fd:9e:8c:92:49:d4:9f:e5:
42:ff:b9:8d:33:41:2b:3b:52:3f:44:81:8e:eb:bd:f3:8a:76:
c0:7e:cf:f1:b3:15:59:69:c1:a4:be:d2:ea:92:44:72:5f:dd:
2d:30:d1:83:b0:07:a8:9c:72:a4:f7:0d:90:8f:d1:b6:b3:8e:
f8:00:aa:48:a3:79:00:44:96:fc:42:42:1a:4c:40:17:79:45:
12:35:22:86:99:5d:de:3e:2f:e8:83:09:a9:57:bc:b2:49:63:
e9:20:ab:23:b1:f6:9c:d6:ed:da:ac:40:1b:a0:8e:8a:d1:33:
4d:66:09:66:3c:cb:7a:72:71:da:7b:ed:54:31:94:f4:13:ed:
d0:44:09:74:1f:69:90:08:9c:91:c3:af:15:7b:93:e4:3a:1e:
ab:d6:ce:85:75:8a:c1:6a:e0:56:89:a6:78:b5:3f:ca:d1:60:
28:48:81:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:41:53 2025 by rpki-client