Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: mCDELNaURGYkGGAvCY8aX1ZTC0SVWsnBhVEmox+3epw=
Subject key identifier: B2:28:02:81:5B:97:0C:BE:81:07:CC:AB:9F:1A:47:51:53:55:09:BF
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 019784334208A3FCBC73A9544BA32C518CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 14FD
Signing time: Wed 18 Jun 2025 18:00:41 +0000
Manifest this update: Wed 18 Jun 2025 18:00:41 +0000
Manifest next update: Thu 19 Jun 2025 18:00:41 +0000
Files and hashes: 1: 7m2aFO8pW7sBeWI83RHNCyNBIdU.roa (hash: lGieElbJHSGh8Oz/Vk9H/zKdS/a3TENEBsREcLzSjK0=)
2: KpNDBUO4DrOuUMY4bYxc6mf9M84.roa (hash: /TtjRiKKiuCXSfe3cAbNi8t4pi1t9WsO7+lwemiTx14=)
3: LUT3_8WWrIc05qWZKWLQFjt60KI.roa (hash: 4MmEr/LuJfq6eDUj7eLPFo2AuG/83fKPUQ56fOfaCms=)
4: POocYv1wetN-gx-1qj1qZZS3uqM.roa (hash: QPzZ93NpFMrdFUyKi10vst5PYHPiD7E4p6r5DEZS8oM=)
5: aeq0M_Wlrma2wrWV2KK3our1J68.roa (hash: cB9AVSumNIn7tIPt4nPlnxcQS8vWgLkGe6b+JNzdHyY=)
6: kkZSypYh8F9rNNfSPrJybh1ufOA.roa (hash: OZKYjqnuTNpwjIeUjKQ7WdVuUS4XIuXxtQYLs+UNNBw=)
7: ozcLkAz45fg2XiPfdbNY66acf7g.roa (hash: eevKHtHg7V8lwaEfFwaa/UoD5Eife7aN2it5vyjJKeQ=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: gOqec40dtMHtGPM1hK9jkUkTgrpIKqt1IaMyN0bsuh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:33:42:08:a3:fc:bc:73:a9:54:4b:a3:2c:51:8c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Jun 18 18:00:41 2025 GMT
Not After : Jun 19 18:00:41 2025 GMT
Subject: CN=b22802815b970cbe8107ccab9f1a4751535509bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:97:b6:00:a5:87:5b:87:4e:4c:89:86:28:
83:25:08:fb:4a:70:69:56:25:35:9c:16:7a:79:9b:
53:c3:a4:51:d6:bb:04:6a:16:89:df:d5:4f:37:84:
8f:30:8f:04:97:11:f1:a9:e8:94:21:a8:57:97:1a:
cb:18:0c:5b:cf:24:54:be:04:65:2c:2d:bc:1e:42:
dc:7d:01:73:9b:f7:a3:83:89:55:24:5a:74:4c:fe:
30:4e:02:ca:b0:46:4a:8e:86:4a:e8:45:91:3e:e8:
d8:84:97:6e:84:85:21:02:17:eb:42:04:30:42:f1:
b5:a0:ea:65:be:02:bb:e9:cc:0d:d4:65:12:5e:ef:
66:6b:1d:fa:65:00:da:79:c6:76:01:91:0d:05:4c:
13:42:82:e7:f2:fe:46:46:61:9b:1c:cc:75:1e:bb:
2c:58:42:cb:55:3e:f7:e1:f3:a7:86:35:89:df:33:
e7:44:29:cc:95:40:0f:af:38:a8:aa:1f:cf:22:8d:
24:05:ea:3b:8c:90:67:6b:c0:6d:75:be:70:1e:5c:
fa:1c:d1:e3:84:fe:8b:f5:3c:11:f6:9f:b8:a7:1f:
24:af:83:2d:b3:d5:c9:8c:4e:86:42:cd:24:11:6e:
fb:f2:58:63:7d:bb:d2:f3:9e:5f:df:ba:f2:69:9a:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:28:02:81:5B:97:0C:BE:81:07:CC:AB:9F:1A:47:51:53:55:09:BF
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:94:0a:13:70:37:47:e9:68:9f:f1:9a:ad:86:93:db:28:8f:
88:b8:75:15:da:b1:11:b6:60:e6:9e:3d:79:d7:ef:c0:ed:a7:
1f:b6:53:0d:1b:7b:d8:95:f0:6a:2e:f4:6e:6d:4b:00:17:10:
66:f3:38:90:0e:f7:06:7c:ca:dc:a2:24:cb:68:f2:e3:f2:f5:
2f:a4:bb:c8:ca:ba:34:bd:fb:61:78:8d:b5:ab:66:63:df:4a:
c1:7a:d1:2a:56:96:f0:43:a6:cc:70:24:79:77:a8:5c:a5:15:
d3:82:00:f0:70:9f:58:07:52:81:0a:02:73:f1:9d:ae:d7:91:
4f:4f:6c:69:d5:1c:82:68:5e:59:34:6e:4c:8d:78:79:4f:5e:
b5:05:ff:27:27:51:ba:a8:a5:18:01:fb:42:55:c2:30:d5:c6:
39:2f:94:2f:8f:33:f9:67:ec:bd:25:e4:2a:0d:6c:15:d1:a3:
62:38:5a:f1:84:71:7d:5a:c5:34:17:e4:25:cd:83:7f:ba:75:
31:e7:eb:8f:03:1c:97:99:ca:40:d2:e4:10:99:bc:20:c4:bd:
81:e7:ad:58:de:e5:2d:e7:ac:18:dc:63:bf:03:ee:28:5b:d7:
06:1f:bb:15:2e:92:02:ba:32:b9:0b:c6:86:ec:19:51:09:12:
90:6c:8a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 02:51:58 2025 by rpki-client