Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
File: xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json)
Hash identifier: 4tf3BGqzKw7ijU1yMfQPbs2T7k39ElfRgK8jzaf7RX0=
Subject key identifier: 61:54:50:63:D6:FF:61:80:0D:3D:5F:AC:F8:DD:A2:F7:41:83:AB:F7
Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
Certificate issuer: /CN=c42287c68458f980ca9b7c36d61f6af586464b28
Certificate serial: 01976CCFC3ADA2066EA321696F96539183ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 05:00:44 +0000
Manifest this update: Sat 14 Jun 2025 05:00:44 +0000
Manifest next update: Sun 15 Jun 2025 05:00:44 +0000
Files and hashes: 1: 8Y6XKuO-_q-eZcd8PYJP4ppiukg.roa (hash: yAyB9mAE7fWNNJ4M45GAzvUfCPqHWuDqtJYIq1FJlDc=)
2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: oVEJRM4x5EcvWnOepZuJeYN6Ni/kn9irKTtdsdMGhMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:c3:ad:a2:06:6e:a3:21:69:6f:96:53:91:83:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28
Validity
Not Before: Jun 14 05:00:44 2025 GMT
Not After : Jun 15 05:00:44 2025 GMT
Subject: CN=61545063d6ff61800d3d5facf8dda2f74183abf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:84:c6:e3:90:95:c1:dd:5c:18:73:3b:76:c4:
ba:8d:16:04:96:00:9d:66:d0:bb:6e:d4:96:d7:c6:
e8:2f:6f:28:6c:f6:69:93:cb:cb:15:c4:ed:a5:87:
94:68:4e:fd:79:15:7b:ea:c9:fe:10:81:27:64:d8:
ad:e8:9a:c6:d5:e7:52:49:05:97:3f:d3:b1:2a:40:
c1:66:c4:15:94:05:ef:c9:84:98:ff:b9:81:f4:39:
3a:00:4f:c4:57:6b:17:48:b4:1d:2a:e7:25:1b:85:
ca:a3:04:58:c5:f6:e6:1a:7b:02:b5:7d:9c:4a:7b:
01:b9:c3:71:dd:a4:ba:11:5d:e0:34:98:de:2a:48:
fb:d1:6f:68:25:dc:fb:97:57:7c:23:77:f8:74:76:
77:c6:ce:5b:16:3a:31:a7:a5:b6:aa:6f:c4:9f:fa:
9e:74:e1:e7:27:b4:b4:b6:9a:25:42:ab:d7:60:d7:
92:8b:20:bc:9d:75:e8:22:cb:94:93:55:7e:e8:17:
4c:ee:f7:f8:2a:da:6f:2e:60:b4:f8:18:0d:bc:b2:
6e:a8:82:bb:86:90:e1:37:8f:bf:0d:51:68:49:68:
67:81:ec:b2:94:5c:0c:cd:c7:b1:36:34:db:54:51:
58:30:fe:34:5b:13:60:d6:c3:b8:37:e0:d8:46:9b:
75:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:54:50:63:D6:FF:61:80:0D:3D:5F:AC:F8:DD:A2:F7:41:83:AB:F7
X509v3 Authority Key Identifier:
keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ff:1d:fa:d5:d9:65:a9:f9:75:1f:36:c3:a2:cd:ef:54:1c:
5c:2c:b5:b6:3b:8b:4d:1e:45:db:2e:95:a2:f7:80:83:29:4f:
65:1b:04:dd:56:3a:4b:05:41:e3:40:d0:73:b4:a9:23:c0:6f:
ff:bb:b3:fd:55:c0:83:4d:9b:6d:19:16:0a:64:3b:20:11:81:
b4:91:b9:b6:8d:6a:b9:a1:73:a2:1d:31:7a:61:74:64:30:26:
04:1e:22:aa:0f:0c:5f:3e:5e:32:e6:73:20:ee:de:04:c6:6a:
60:b9:f0:db:81:9d:a0:75:78:e5:82:bb:9d:1a:32:80:88:c6:
f7:2b:3c:0d:b3:22:fc:87:87:0d:b9:db:ca:3e:fb:82:07:61:
88:74:00:4b:a5:ee:90:ec:7e:0c:22:42:1b:a2:39:55:1c:69:
4c:74:cb:d0:c3:9d:97:e4:27:3c:80:a4:38:db:1f:75:b0:43:
4d:4f:33:e5:0a:25:9f:8b:c7:eb:f9:fe:1c:4f:8c:51:26:18:
12:6b:79:28:02:2c:25:16:cb:29:37:e8:3c:48:db:f8:89:04:
fc:14:62:d8:9d:61:7e:7e:11:94:98:40:95:60:bf:d3:94:81:
be:14:fc:61:c6:f4:9e:2e:e1:8a:6e:d7:97:0c:58:35:47:2e:
aa:55:c6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:10:40 2025 by rpki-client