
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
File: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json)
Hash identifier: pM8ybGlrP5j8teMAub1l/2qsDbhxkUhpZde173erpHw=
Subject key identifier: A6:38:B1:CA:38:30:56:0B:80:EB:C9:0B:A8:B0:4C:8A:AE:A7:08:00
Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
Certificate issuer: /CN=c76c3644741336b01b638563314f40d10c69d30d
Certificate serial: 01977D8CCF16B2E85D904061EAB349FF386D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
Manifest number: 09A5
Signing time: Tue 17 Jun 2025 11:01:09 +0000
Manifest this update: Tue 17 Jun 2025 11:01:09 +0000
Manifest next update: Wed 18 Jun 2025 11:01:09 +0000
Files and hashes: 1: VL_sUVNGEMQYYwl9Xv-gftIOtVk.roa (hash: Nb6N1oOcP6n4dJnS6N2r/DJY5HC1wzR3gXjz4D8FCrM=)
2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: x6QaN3KBh6P4hHyOz9cDmSwq8rELGjSZFv3CTZkltQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:8c:cf:16:b2:e8:5d:90:40:61:ea:b3:49:ff:38:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d
Validity
Not Before: Jun 17 11:01:09 2025 GMT
Not After : Jun 18 11:01:09 2025 GMT
Subject: CN=a638b1ca3830560b80ebc90ba8b04c8aaea70800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:2b:dc:ca:1e:d4:3a:ca:0e:de:20:10:87:
19:70:3c:09:fd:cc:ed:2d:01:c2:b4:c8:6b:99:71:
bf:90:9a:f2:69:db:24:5c:1b:16:78:51:8b:76:f6:
07:5f:1d:37:08:4e:51:59:1a:dc:20:bf:bf:b4:2f:
4d:31:ad:93:0d:03:f5:e5:4d:2c:50:0b:e6:2e:68:
eb:6c:59:ca:d0:6c:cf:14:87:42:9a:67:be:a0:06:
1a:b4:56:97:94:db:92:f3:09:12:fa:02:83:c1:c2:
2d:6b:0c:8f:36:46:be:85:86:42:bb:cd:37:58:64:
f1:23:02:97:5e:bb:f5:e8:80:4d:8f:eb:75:2e:20:
b3:ef:f4:fa:0a:9d:18:fa:33:9f:f6:20:41:6c:50:
7b:0a:8f:44:e6:d0:5f:e8:78:77:1b:49:39:ff:cb:
af:6c:26:ae:3a:19:74:a9:e0:8b:6b:10:69:ed:39:
1f:f9:7a:28:51:0d:10:3e:80:b6:56:5f:cc:84:0b:
3f:76:3c:9f:c9:fc:dc:5e:4a:dc:dd:10:e9:a4:e4:
67:ef:8b:aa:99:57:43:9c:07:e7:b9:c4:52:d9:47:
95:b6:e0:6a:24:e5:13:95:7b:a8:a8:08:f8:6b:1a:
58:f4:5d:43:5d:15:ca:be:70:b7:88:af:85:f5:98:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:38:B1:CA:38:30:56:0B:80:EB:C9:0B:A8:B0:4C:8A:AE:A7:08:00
X509v3 Authority Key Identifier:
keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:27:d9:78:1d:22:44:3f:63:73:7f:b0:41:94:4e:23:a6:e6:
b2:50:70:33:5f:cd:2f:12:90:1a:12:5b:9e:3c:7d:10:4b:96:
d6:fe:48:18:f2:bf:6f:28:f4:0e:aa:b2:01:7c:bd:48:1d:50:
62:c4:60:8c:c2:c1:b3:bd:8e:30:5f:c7:55:2f:96:1d:0d:2f:
5e:92:2e:a3:bb:c6:60:4e:4e:47:a1:bb:a1:a8:ac:a1:74:75:
22:08:fe:89:72:4e:bb:15:e5:5d:e9:28:93:e0:52:7a:80:4b:
dc:db:dc:1b:32:c2:82:7f:91:d1:3a:19:52:1a:96:36:51:40:
4f:f9:b0:79:ff:45:77:22:cc:3d:85:da:86:ac:5f:59:12:b9:
b5:6d:bd:f2:b0:a7:6d:04:79:50:a6:b1:90:b0:63:58:56:0a:
fc:a4:d0:5f:10:a5:63:ae:18:16:77:fa:1b:1e:53:bd:9c:6b:
04:07:4b:90:b3:2f:e5:45:35:05:72:34:2e:89:8e:52:7d:b1:
d1:3c:e9:ac:76:b5:c8:69:32:97:58:b9:9d:54:a9:3f:86:f4:
01:73:3a:7f:64:32:34:a9:3b:b6:ea:2b:2e:4e:c5:1d:c4:6f:
89:a3:53:6d:42:a3:29:94:48:3f:6b:89:57:35:35:92:c8:21:
3a:cb:5c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:04:07 2025 by rpki-client