Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
File: xN29nyMJGTIb9WcG8QaTd5JhGfk.mft (raw, json)
Hash identifier: Lv/dbm9h2Wg3vGDSJ+Y8q3EDFuZfG2N/iO46H795eBI=
Subject key identifier: C6:F9:45:88:C7:7D:A5:AA:1A:DE:00:8A:74:7F:BE:B7:FD:15:4F:FA
Authority key identifier: C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9
Certificate issuer: /CN=c4ddbd9f230919321bf56706f1069377926119f9
Certificate serial: 019780FBEF6BFA6B8EA63C9F7FAF8F768FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
Manifest number: 05B8
Signing time: Wed 18 Jun 2025 03:01:23 +0000
Manifest this update: Wed 18 Jun 2025 03:01:23 +0000
Manifest next update: Thu 19 Jun 2025 03:01:23 +0000
Files and hashes: 1: 7qr12EYwsdyti-EmLWqRDogionQ.roa (hash: 5LhmlqfCFcdrvGQgZrfHuGwVjCahrEpoNBu5iKMaA/w=)
2: JEh62edtGcPK6W4aI6E72di6xCs.roa (hash: PD42vAZ0BIX3jY6yqazrN5UUOFytkMhASMCFsoaVQJg=)
3: xN29nyMJGTIb9WcG8QaTd5JhGfk.crl (hash: mCEzebNtaJnGnWScQDAfaVXwQ3Zvm8+r58Cc+/NwUqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:fb:ef:6b:fa:6b:8e:a6:3c:9f:7f:af:8f:76:8f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ddbd9f230919321bf56706f1069377926119f9
Validity
Not Before: Jun 18 03:01:23 2025 GMT
Not After : Jun 19 03:01:23 2025 GMT
Subject: CN=c6f94588c77da5aa1ade008a747fbeb7fd154ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:ef:d0:74:7c:19:20:e6:80:58:a0:f6:60:
c6:71:71:34:94:5a:25:a6:0a:c1:41:e6:48:7d:4d:
a9:80:ca:97:6c:8f:6d:b1:b6:4d:6d:8d:97:09:a5:
fa:db:3e:39:28:f4:0b:2c:74:80:af:08:43:35:7d:
c3:0a:5b:1a:0b:4b:a3:84:72:d9:73:30:61:18:1d:
a3:fa:d3:80:ef:62:7d:04:bc:c3:a6:4b:05:0f:56:
4c:1f:56:05:06:c7:2d:ff:77:0d:4d:ff:ee:7e:a5:
82:bd:eb:fb:97:97:eb:d1:bd:e4:2a:1b:30:88:83:
1a:5d:74:7a:fa:fb:cd:75:98:07:dc:e4:ea:2f:75:
e4:97:48:a0:41:b2:26:75:b9:26:16:3c:89:84:b8:
18:dd:6a:55:c4:0d:f5:d2:c4:33:a9:d2:01:5a:d0:
0b:60:c0:98:30:c0:5f:f0:2e:10:37:c9:be:d3:58:
72:ae:f4:90:90:a6:0c:c0:21:dc:09:00:60:0d:06:
49:79:ad:da:8a:54:9b:9a:43:19:8b:e9:e2:cb:46:
b4:8d:35:6c:76:a6:67:f2:f3:53:7e:f0:2d:75:7e:
b1:90:62:1c:c5:fa:f2:96:49:81:cb:06:6f:d3:43:
a7:d8:87:75:97:9c:7f:6f:06:b0:72:74:c0:18:c8:
9c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F9:45:88:C7:7D:A5:AA:1A:DE:00:8A:74:7F:BE:B7:FD:15:4F:FA
X509v3 Authority Key Identifier:
keyid:C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5d:12:d2:44:b8:ef:54:94:f1:4a:f8:9d:e3:93:27:dd:f3:
52:e9:0e:71:84:be:1e:1f:b7:d2:71:7d:60:cb:25:e2:f8:a7:
f6:38:db:e6:98:fc:be:3a:66:d4:2c:6f:9c:7c:76:7f:a1:27:
e5:bc:62:cf:6d:1c:aa:81:e8:f7:71:fc:08:ee:6f:07:76:7f:
de:52:9c:d3:37:f7:85:09:38:e8:67:86:ae:55:0e:50:46:f5:
84:2c:1b:0a:06:79:dc:93:3f:67:c0:e6:c1:26:c2:37:3f:e8:
89:00:e3:4b:a3:06:37:a0:3e:f4:d7:7e:73:13:ed:10:63:00:
2b:55:d6:60:bb:38:01:bf:ae:4b:0a:58:26:f2:2a:a1:98:e7:
d3:e5:23:32:cd:34:97:83:7a:a2:48:ca:ef:72:f1:48:ab:df:
73:dd:d6:d2:a3:f5:da:07:6d:4f:63:a6:d7:d0:c2:3d:68:c6:
9d:cf:ae:6d:26:ae:fe:95:a7:ff:76:cd:a6:c2:66:5a:85:3c:
e3:49:48:6d:5d:7c:df:75:61:da:32:57:51:2b:e6:ca:c0:3f:
97:d5:06:ab:f4:99:11:63:7e:bd:61:3b:21:24:b3:28:fa:49:
4f:8a:58:66:96:c4:6e:a6:4b:53:fd:1a:32:7b:1b:6d:45:72:
a3:55:92:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:05:03 2025 by rpki-client