Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File: x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier: Ab7mgUNo8EoUFbZul7y10SSi9iRkT6DfQ7YckavbDSg=
Subject key identifier: 8C:A4:20:52:BB:B7:9F:4F:53:2D:E5:32:DD:8B:EF:34:04:8E:B7:DF
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 01976FD0C43D9F8412BA7C9503D9194408C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number: 0F85
Signing time: Sat 14 Jun 2025 19:00:42 +0000
Manifest this update: Sat 14 Jun 2025 19:00:42 +0000
Manifest next update: Sun 15 Jun 2025 19:00:42 +0000
Files and hashes: 1: Cujb_JMNRpBWUMNsYDzUM07sX9g.roa (hash: aPQ30rk20GzKKIz2rCdqmpPV4nPvHBgzWHC/g71TaJY=)
2: PkKwn16bpB0gLF9vU4EldEuV1BU.roa (hash: fP4l1zoE5N82M/LmyMEfGwuK+f6miXD04jLXzvpdlzg=)
3: Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa (hash: EjqMbrULb7iRN3e+HzHVHj0EJ4f37rSShZWRA2TwvuI=)
4: ajjSrJlCyQcuDeL8XuyTk3xvjtc.roa (hash: EhQOidF5uwuPy9XRI08HHhPlUcqfCK7PNLZCEaKLCPE=)
5: bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa (hash: B4U/d8xwzXF5+8shclwMswe7rUu/cS9QkWoCnLKd0HU=)
6: gDrJ_yW-_CzbWfpTMme-odFmJlw.roa (hash: gy5Z4mzDyCMzzZeJUBNPlOeBnObygQh/RNlUGtI+BkA=)
7: lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa (hash: QTd8eFyxLptYQFcQvp6p0JN6N3jGTLG71RFCqk6mZlI=)
8: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: PnOkX+GTffRvUz91tBdoakhyRDe9aX1NRv8xCcPHMok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:c4:3d:9f:84:12:ba:7c:95:03:d9:19:44:08:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Jun 14 19:00:42 2025 GMT
Not After : Jun 15 19:00:42 2025 GMT
Subject: CN=8ca42052bbb79f4f532de532dd8bef34048eb7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6b:27:a5:3c:3d:57:30:ec:b0:c8:63:3c:71:
59:d1:b2:47:5b:97:f5:d8:d6:a4:15:c3:5c:6a:5b:
5d:e9:e9:cf:c9:13:68:12:bb:a6:87:61:25:05:c1:
d4:ee:14:71:4a:9f:78:f0:72:ff:61:ac:18:16:3e:
f6:34:55:35:ba:82:ba:96:0e:52:64:8e:26:92:0a:
d4:45:4f:7b:2a:6a:af:7f:61:4f:df:9a:15:b7:ec:
7a:9d:33:02:dc:44:22:55:ea:48:4c:23:89:58:ab:
d9:45:b9:f5:22:c6:86:06:13:32:26:11:ef:34:6e:
9c:9b:81:d4:3d:16:dd:5e:e8:9e:bd:4a:f4:3e:a4:
ad:92:a9:51:9a:0f:12:be:cd:63:bd:b3:35:90:e7:
4e:56:74:91:ac:9b:21:37:be:4b:48:9b:90:8e:33:
05:7c:ab:b7:0d:fb:ab:3a:49:87:6f:03:e0:24:64:
67:9b:4c:f6:bf:bb:49:15:38:40:f1:1a:4e:2c:b8:
18:ca:5d:db:1d:9f:8d:1a:87:47:fb:b6:91:ec:a5:
80:30:ca:96:58:48:83:74:3e:8f:bb:fd:65:e0:07:
0a:5b:21:c9:e6:6c:df:93:76:e7:76:3e:ea:69:7b:
74:64:78:25:46:e7:98:50:60:c9:04:9e:7b:2e:c4:
5e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A4:20:52:BB:B7:9F:4F:53:2D:E5:32:DD:8B:EF:34:04:8E:B7:DF
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:51:b0:ae:d5:13:ee:ca:e8:33:73:12:af:55:85:49:27:ec:
f3:1a:56:c0:f1:a0:da:51:7a:f4:d1:18:d0:a8:d5:9b:e2:0a:
7d:a7:52:77:99:a9:7c:2b:07:ec:fd:70:74:50:d2:fb:5c:38:
d8:ec:63:09:c7:85:de:f8:25:9c:25:b7:a1:a8:4a:54:85:b3:
08:61:26:88:4f:37:c6:6b:96:a6:6d:3c:1c:06:8c:bd:ac:3d:
46:85:7e:bb:42:57:6d:34:bd:78:6d:b6:c6:26:53:db:a6:07:
cf:ed:ee:54:3e:77:69:19:37:ed:84:f5:a5:f4:ac:b6:ad:d4:
52:36:10:01:15:b8:be:02:03:30:8c:c3:49:de:3f:c0:69:12:
26:ec:e2:2b:aa:73:24:04:60:3a:52:00:9d:95:1c:2a:f0:67:
38:a3:ba:46:61:06:0b:d6:42:2d:1a:98:35:94:03:a2:42:5d:
cf:39:28:80:70:4f:00:08:ae:b0:d1:90:72:0f:66:b1:e8:92:
e3:98:7b:b6:a3:24:a0:e0:f0:ee:4d:0e:56:83:7a:98:eb:d4:
1f:35:b2:40:42:c5:d7:47:44:5c:b9:39:af:28:16:70:4f:9a:
02:d5:9c:af:1f:9a:be:bd:69:3a:32:c3:70:44:ae:9c:eb:cf:
3f:8b:ba:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:06:56 2025 by rpki-client