Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
File: xn4qRuNPSRQzyLYvMZuQK9396DE.mft (raw, json)
Hash identifier: 8Le48PVomnhzgrXT2CiiQkODQqBXKkSdFFrinNTF8fo=
Subject key identifier: B9:31:4A:E6:FB:9F:B2:B1:01:15:3E:56:7B:CB:6C:80:AA:43:62:52
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 01976EF528D179712A6EA31CFF0652D4C97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
Manifest number: 12CA
Signing time: Sat 14 Jun 2025 15:00:49 +0000
Manifest this update: Sat 14 Jun 2025 15:00:49 +0000
Manifest next update: Sun 15 Jun 2025 15:00:49 +0000
Files and hashes: 1: BKGB0xu8toNLRNE3TtbV03PJFx0.roa (hash: FdiXQgpM3MPZ1o0fk4HNEhE38JmZapk1+2ih8Lu8DEA=)
2: _v0ZmDwGVXQnxYXB1nXQzsRBcbY.roa (hash: iHppVj2BjRk7dRpgDIJuQgoqhMV/BmqJSp1BycbHcEU=)
3: xn4qRuNPSRQzyLYvMZuQK9396DE.crl (hash: LHzfz59U7ugMxNzxpXHny9OQtF4YaSOVcvN/Z7crlt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:28:d1:79:71:2a:6e:a3:1c:ff:06:52:d4:c9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Jun 14 15:00:49 2025 GMT
Not After : Jun 15 15:00:49 2025 GMT
Subject: CN=b9314ae6fb9fb2b101153e567bcb6c80aa436252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bb:82:41:34:26:50:26:2c:b4:e7:24:ab:d1:
2b:11:73:c4:c8:80:4f:aa:c3:c1:80:a4:91:d4:7d:
29:08:3e:59:ef:70:df:dd:2c:63:10:cc:01:2a:eb:
82:3d:a8:73:6e:c1:c8:24:4a:9f:f4:24:73:09:09:
35:c2:49:a1:36:c7:84:d5:58:24:4a:b3:ae:d9:bf:
19:64:01:5e:c2:5e:7e:f8:2c:0b:2e:47:d2:d9:53:
f6:db:0f:51:c2:26:98:3b:1d:7c:a4:0a:fe:5b:80:
22:22:f9:ba:d7:e3:8c:01:74:28:1a:f4:df:02:12:
a0:29:4a:da:ae:ef:a3:1b:7f:30:d6:81:39:83:45:
aa:f6:14:0f:21:98:ab:32:f5:e8:2d:4e:4a:b7:32:
85:28:08:be:91:98:53:eb:97:64:18:0e:db:29:bc:
ee:13:a9:f4:12:d4:40:9f:e8:5b:17:67:9c:95:7c:
34:16:57:ce:cc:48:8e:2b:8b:8e:59:a0:51:10:93:
16:fe:ff:35:38:34:5d:41:0a:48:a2:9d:92:ba:c6:
63:0c:4b:13:5d:eb:1c:4d:4c:cb:4a:94:8f:f9:d5:
48:df:37:10:f5:b3:d5:b4:ff:2e:f4:db:1a:cd:4d:
08:0c:ee:7e:e3:6d:36:17:b1:ba:63:5d:61:26:5b:
1f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:31:4A:E6:FB:9F:B2:B1:01:15:3E:56:7B:CB:6C:80:AA:43:62:52
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:87:6e:eb:27:45:fa:1f:ab:cf:99:b0:22:b7:47:88:db:1f:
75:9d:05:92:fb:de:1b:bd:7a:47:67:f9:83:83:08:f6:be:f6:
04:66:29:96:f6:1f:5f:2d:68:25:0c:37:57:e0:e2:d4:8f:19:
78:50:a5:65:b4:95:40:99:63:ca:87:73:ce:fd:6c:73:98:5a:
3e:71:c4:12:f2:dd:59:34:58:3e:85:e1:fa:1a:58:72:90:75:
97:a4:a8:1b:ff:8c:47:ca:70:cb:16:9b:bf:33:1c:4a:89:90:
06:a1:f2:b9:43:f6:98:31:85:23:80:e2:e1:ae:d8:5a:b5:80:
27:bb:ea:e6:24:d0:88:36:8b:7c:d5:34:09:00:4b:14:27:de:
b7:56:7e:88:f6:0a:72:b4:a4:31:8b:9b:70:c2:e4:ae:b3:ce:
7f:3e:98:0a:b9:a0:8c:61:c1:37:54:cc:b1:95:bc:fc:cd:57:
54:63:5b:c8:4f:6f:50:91:9b:66:16:82:dc:57:26:7c:a3:93:
8a:70:81:0c:7c:45:8f:da:ff:21:03:60:22:04:e1:68:af:25:
5e:6b:1b:c4:a1:f3:d1:ea:5e:12:e3:b7:e8:77:4c:c9:63:34:
a7:6f:e5:dc:77:e0:b8:03:34:fc:d6:f0:ec:39:d1:0c:c3:da:
ef:39:70:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:32:56 2025 by rpki-client