Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: VjIzU+ls9OZdzYpfqPltyhcbdVO0BCMoJGnvcG2B9CQ=
Subject key identifier: B7:06:6C:A3:4E:59:00:3D:37:8D:AE:48:41:ED:AB:72:7B:31:45:D9
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 019771887F66296E360393111E50BD1DE4E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 1590
Signing time: Sun 15 Jun 2025 03:01:00 +0000
Manifest this update: Sun 15 Jun 2025 03:01:00 +0000
Manifest next update: Mon 16 Jun 2025 03:01:00 +0000
Files and hashes: 1: Ebbi4EbWyyrPidgJRRp68vOL4Bs.roa (hash: 9WQWjNic/0FRDbfcOWjEWw5V6hoDVQ6qvX3p7F6e6MI=)
2: VPM_H7o9qmHlZtW2Loh4LTUo-hc.roa (hash: vD0q++SStKTA4LMIpc6XJyVKbTisVo5txPsQMD5ggGA=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: OuUXIfDTJ3AZRLqIVbnn82y1W3j8doPFzMaFYeS5eAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:7f:66:29:6e:36:03:93:11:1e:50:bd:1d:e4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Jun 15 03:01:00 2025 GMT
Not After : Jun 16 03:01:00 2025 GMT
Subject: CN=b7066ca34e59003d378dae4841edab727b3145d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:73:91:fd:ce:7f:d0:08:54:63:c9:f7:a2:66:
6f:a9:17:b1:26:86:a5:bf:8b:9d:ee:b7:51:2c:4c:
cc:d4:02:c0:66:87:ed:c5:ac:89:13:c5:5f:1a:b8:
f4:e1:ca:e0:0d:57:2c:7c:90:95:d9:e5:40:8b:1f:
53:3d:0f:93:4d:50:76:fb:2f:c3:13:d2:ed:db:21:
1b:c8:2e:2d:c5:a8:0f:9f:12:75:64:13:5e:13:d6:
25:e7:95:00:0c:7a:7c:67:4f:ee:5f:35:da:81:94:
6e:4f:91:9e:13:c3:8b:19:bc:b1:1b:2f:eb:16:b6:
2c:30:13:81:b7:94:94:92:2f:ef:b5:0c:64:3b:be:
17:97:61:8a:a2:29:b3:b2:0a:c0:28:48:6b:cb:9e:
43:40:6e:9e:e8:20:ca:f6:1c:2c:31:7a:18:71:b4:
df:4a:d5:ee:4e:ae:f4:d7:c3:d9:ed:a8:44:72:80:
cd:a7:e0:6b:70:b3:62:e1:32:7e:88:32:ba:b9:80:
ed:d6:0d:a5:c7:a9:cf:8c:89:dd:18:92:76:43:e5:
ad:1e:ec:2a:d5:a3:7a:35:9e:e7:0f:fb:a0:2a:bf:
b6:78:b8:db:61:c3:7f:07:54:69:d1:14:e2:38:e9:
de:01:e0:84:cf:f7:ec:7e:bc:f7:62:b3:49:5e:11:
1f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:06:6C:A3:4E:59:00:3D:37:8D:AE:48:41:ED:AB:72:7B:31:45:D9
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9d:64:eb:23:97:21:86:b8:d2:e8:4f:5a:93:91:94:47:cf:
51:6b:44:0c:6d:12:60:56:38:00:76:78:78:36:28:41:e5:9f:
66:eb:3d:84:3e:c7:71:b1:5b:4f:27:c3:15:69:4b:10:75:e4:
15:20:81:b7:9d:17:d4:1c:a0:92:df:c1:e8:47:14:73:bf:99:
2e:80:3b:69:75:f8:b8:dd:f0:4d:d5:a4:4b:84:00:2b:1e:04:
27:1a:3d:5b:bf:16:29:20:23:a4:dc:8e:36:dc:77:61:01:3b:
5f:c7:6a:ad:b7:80:20:1e:44:3e:7e:e6:34:7f:9c:8c:01:d5:
61:62:61:60:ab:dd:ad:c8:95:b7:6b:61:33:ac:b5:56:21:a1:
55:83:ff:c7:05:86:e1:5d:27:19:06:ca:8c:53:6b:ef:bf:22:
d7:2c:a7:91:13:a6:0a:f9:2a:6d:92:d7:e1:5d:c0:f6:ff:49:
64:ab:3f:47:5a:21:35:b0:71:a4:34:d2:65:ba:51:10:2e:61:
4b:92:6b:1e:f0:4c:da:85:ef:17:e3:57:9a:f2:fc:aa:89:5e:
be:6f:9e:fe:6e:03:91:57:58:47:2e:99:fd:c3:14:71:67:02:
bf:e1:0a:47:27:da:c9:4d:f2:4f:2f:01:1b:30:e3:99:fb:fd:
98:c6:e2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:59:27 2025 by rpki-client