Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: 4rm+dhB6RNpOhZASFzVirNoTSDfJm8m/rBu8UrAe2yM=
Subject key identifier: E7:6A:78:55:EF:D7:A1:BD:30:81:7D:0D:CC:69:67:A2:FA:0B:F2:2E
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 019769CE9329949657E9A3C595A6673EAE6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 12FA
Signing time: Fri 13 Jun 2025 15:00:35 +0000
Manifest this update: Fri 13 Jun 2025 15:00:35 +0000
Manifest next update: Sat 14 Jun 2025 15:00:35 +0000
Files and hashes: 1: 60HEsBaMqcn-eIgLR5xlDOKT3H4.roa (hash: 92TWLG+yrUdSGxzPqHvt67q91xHgIIuyd/z6PMj19WQ=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: mFzM5Ro4HJVHqQ5HkrWGSI4CIezT6G29jsPaEd6211g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:93:29:94:96:57:e9:a3:c5:95:a6:67:3e:ae:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Jun 13 15:00:35 2025 GMT
Not After : Jun 14 15:00:35 2025 GMT
Subject: CN=e76a7855efd7a1bd30817d0dcc6967a2fa0bf22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:ea:2f:e8:9b:0c:dd:68:85:b5:0d:9e:0c:
7d:9d:2c:f0:e9:f4:d5:67:e1:86:51:87:48:e4:ae:
89:de:57:08:c0:6c:12:9c:4f:ac:77:ba:28:44:54:
4c:03:3a:28:64:bd:89:e0:c4:5f:c4:59:c6:09:3e:
0f:6d:42:78:28:29:28:e0:d5:35:13:41:79:4f:00:
61:a8:30:c3:09:7e:e0:73:41:18:67:ae:c9:73:2c:
ed:85:18:ac:04:54:63:7f:4b:fe:e4:32:18:e2:5e:
2c:fd:3b:3c:84:65:33:73:a9:1d:00:39:b3:47:36:
db:d3:ba:f6:c0:4e:d8:ea:b8:55:44:4a:7b:43:57:
a3:47:ae:a7:10:95:be:fd:df:10:e4:34:93:f7:9e:
ba:e0:e5:9d:3f:73:da:f6:1e:ec:57:e9:6a:de:58:
3c:50:70:13:95:e1:42:2e:99:cc:ae:71:6c:87:ba:
be:c2:46:85:8c:fc:15:8f:eb:a5:ca:99:d3:26:22:
0f:ee:f2:95:58:a9:2b:7a:6f:2e:b0:d5:49:1c:e1:
da:04:97:e6:95:ac:c3:e6:02:2e:68:dc:31:d6:58:
c6:2a:c9:3a:09:0e:a8:d9:40:0e:ae:3e:e3:70:d2:
c4:d0:45:11:f3:8f:1c:11:2b:fc:af:c4:43:20:17:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6A:78:55:EF:D7:A1:BD:30:81:7D:0D:CC:69:67:A2:FA:0B:F2:2E
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:37:06:e9:06:fe:4f:1c:69:90:66:cc:b8:77:e9:a5:08:2e:
20:13:1f:07:0a:8d:35:b7:d2:2a:5f:54:ae:fa:44:14:a6:92:
ef:81:bf:f6:3b:53:89:27:bc:b4:08:bc:6c:b0:d6:05:ab:cc:
1c:9e:d0:e8:42:a9:f8:d4:e1:2c:16:ca:2a:04:2c:85:96:76:
9a:c2:38:1c:6c:f9:43:d0:d3:66:3c:df:3a:e3:dd:89:01:bf:
5d:53:67:7a:da:ad:03:83:e4:0b:4e:46:de:b9:cb:13:0b:8c:
1c:44:82:89:7d:da:1a:91:49:96:db:25:3b:73:91:2e:ec:e1:
ef:fc:cc:fd:de:49:64:df:23:76:f0:49:38:43:fc:bb:08:91:
33:14:1b:41:5d:48:e2:1b:64:5d:0a:9f:f6:03:68:09:4d:c3:
00:38:69:28:4a:38:70:9e:c5:1e:d1:0e:33:cb:a3:63:ae:37:
84:86:98:74:7e:d2:51:19:eb:75:90:f8:69:a2:88:34:ce:d0:
4c:29:9f:9a:17:2b:cf:1d:98:a2:aa:e8:7a:c3:90:5b:d6:58:
8a:91:82:2d:3f:71:d6:00:df:9b:a0:f7:3a:36:9b:c0:fb:4e:
30:98:56:66:df:00:fa:3a:34:bb:1f:08:c0:3b:ea:a9:92:5e:
75:d2:29:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:03:22 2025 by rpki-client