Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
File: x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json)
Hash identifier: IXNKXtMasxy9fwioccQWN2OQcRrD81O/t/hoF3HqGRk=
Subject key identifier: 65:4E:CF:3B:55:FD:DA:43:77:37:67:3C:31:64:8C:17:2E:E9:11:5A
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 0197684E19AB928BABD057753D0FB89888AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
Manifest number: 10A1
Signing time: Fri 13 Jun 2025 08:00:38 +0000
Manifest this update: Fri 13 Jun 2025 08:00:38 +0000
Manifest next update: Sat 14 Jun 2025 08:00:38 +0000
Files and hashes: 1: 6Cj8H-p47dvCNhMHuB2pJCnFujI.roa (hash: etPYOFcz4B7xl7Yvi1fe6awoP2aM1hrkcXjgzl1XW2c=)
2: iNe91R6y78p-QSDXxoxxAjDA_Og.roa (hash: HR8YO++Y/qB7B+dcbqN5/SgR3c8dd7aULLQGyyrd4j8=)
3: tK6dqORitjCE9QSeqzn0Dd8QVZY.roa (hash: d9AZ6zPbtFV6hygn8HjICm+c22UNHE83e16IdW/3Zl4=)
4: uHPtlU3qdVrOCAD4M6mdiGrDzqE.roa (hash: AeMGCTul+AJixElOuUQNIP59RKHExeTwQIkWiWRzSzs=)
5: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: dyL7w0PLBjCUIWmEtu/obAZTYDbsaf3G8E4EGeBGn20=)
6: ydG33gjsDAOMifL-LMV8iBUmj5I.roa (hash: mGme2Sxc1/UzWWlnkXXzLuxU/TszYoE3oiJl3a+U4Tg=)
7: z131uKF1Jpc6EpB3kAHYRRM7XIQ.roa (hash: Z5tMUZHaMA8Bu87tPX511k88Z6BiQWZ5tSalbDOuIEw=)
8: zbII4RxH17JoDR9ukyJuiEde7IM.roa (hash: xBWfldiZFP31dGe7bTsuSEU+4Mx9LEr9W5jDRfUDGfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:19:ab:92:8b:ab:d0:57:75:3d:0f:b8:98:88:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Jun 13 08:00:38 2025 GMT
Not After : Jun 14 08:00:38 2025 GMT
Subject: CN=654ecf3b55fdda437737673c31648c172ee9115a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:e0:21:01:6b:eb:ac:4e:59:3d:d8:e3:dc:
75:ae:49:a8:3b:ba:44:d9:00:77:71:2a:52:ad:1d:
28:62:e6:cc:20:1d:5f:50:6d:14:47:13:e6:7e:1c:
5a:fd:2c:86:d6:e1:58:eb:6d:b7:81:19:be:43:fd:
06:90:c3:5c:e2:ac:30:35:41:48:cc:bc:ae:ca:e9:
c8:56:9e:2d:17:95:6c:5c:6d:b3:56:52:c1:94:27:
17:66:bd:6c:da:fb:2a:46:9d:7a:da:7e:ce:17:bc:
76:db:58:68:7e:5c:e4:ea:2e:14:71:24:ba:82:34:
be:9e:6a:d3:27:f3:9e:db:07:2c:e0:57:13:4f:db:
2e:d0:87:c0:00:94:0d:a3:fb:7d:e1:3d:11:16:6c:
f0:64:56:08:12:af:b9:5d:5a:ae:af:1f:d7:bb:26:
3b:d4:32:da:a7:9f:0d:ee:7f:3a:72:a7:6f:66:c6:
e7:54:ca:32:58:ed:ce:e8:59:15:8e:fc:60:06:58:
d7:b8:88:bf:67:82:3e:ae:51:c9:4b:48:05:1b:15:
71:4f:2b:94:21:88:a0:9a:6e:ae:17:d3:6e:f7:42:
fd:97:f1:f9:1e:28:db:ba:1d:e1:d5:83:b0:24:27:
1d:70:23:07:56:97:21:ca:36:5c:75:04:9c:98:fa:
23:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4E:CF:3B:55:FD:DA:43:77:37:67:3C:31:64:8C:17:2E:E9:11:5A
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:df:e0:26:23:b1:57:d3:7a:7c:19:bf:77:33:24:20:97:c6:
a6:88:f1:a7:38:88:86:14:ca:21:91:07:f9:44:89:1b:9e:87:
cc:5b:a5:56:0a:46:17:9e:fd:3c:30:a8:b5:b4:c1:27:43:96:
70:21:25:47:02:66:d3:4f:ab:ba:09:db:39:8c:50:26:24:07:
70:b1:be:20:5a:ae:e3:c1:4f:28:56:f0:3f:97:38:25:4f:de:
34:2a:2d:db:eb:1a:68:24:1e:3b:88:92:46:a0:82:89:48:13:
25:4c:cc:f3:11:87:5d:f9:13:df:b9:dc:b1:42:9c:bc:9b:49:
b0:10:55:c9:5f:1a:88:a3:28:5b:e4:ea:53:1f:cc:fb:97:92:
2e:d4:99:3c:c4:3f:20:7d:90:cb:56:cf:ed:83:9c:01:dc:3f:
1c:c7:65:24:41:a7:a0:56:d0:89:69:ae:c1:50:65:90:e6:38:
b5:f1:17:3a:0c:fa:5d:e9:46:4f:a6:ea:4c:dc:3f:70:c1:22:
d3:f0:3e:30:d0:1d:e1:f1:98:f8:5e:22:7d:1d:0e:7f:2d:28:
2c:60:9d:5b:a2:6a:72:de:28:6a:8b:53:63:30:69:2f:d2:7a:
a2:c7:0f:c4:a1:04:3b:9a:f3:ea:2d:ed:63:ef:bf:9e:55:a4:
a4:11:f9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:15 2025 by rpki-client