Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: p9/1OqW96M5jxOkbfuCjJcwFmV3t1YDA71/P806vK/k=
Subject key identifier: B7:34:17:69:52:DD:99:F6:68:64:80:C7:12:BB:2E:D6:12:EE:8A:1B
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 01978661EF6A04AED23BAD7774D3209AD11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 12B5
Signing time: Thu 19 Jun 2025 04:10:54 +0000
Manifest this update: Thu 19 Jun 2025 04:10:54 +0000
Manifest next update: Fri 20 Jun 2025 04:10:54 +0000
Files and hashes: 1: 39NfMlHhrMH0zRyfZciiqR6mIWs.roa (hash: y/nnfdi8YIAf5ZNy+0/8yGvD2yVcPkZoC4V02tMUx4U=)
2: Kj_GYCscFmlVFFmndDSFfAkuFwY.roa (hash: 6AgFYxmuaSYjaFZUd8eJPcRWj8cD+HYqY6zQ9lI9XGM=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: wiQZsUQ6svJBM1x6kH4S/WMQuWK2mhGnDW7syIktkww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:61:ef:6a:04:ae:d2:3b:ad:77:74:d3:20:9a:d1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Jun 19 04:10:54 2025 GMT
Not After : Jun 20 04:10:54 2025 GMT
Subject: CN=b734176952dd99f6686480c712bb2ed612ee8a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c4:6a:a2:a5:f7:40:1c:11:bc:f7:c9:e3:1e:
4e:bd:75:4f:c0:8c:d0:90:a6:8d:bb:f8:8f:ed:8f:
42:99:d6:a1:3d:c9:f3:e1:23:10:4e:fa:dc:b8:bd:
c2:31:5d:c1:36:72:40:cf:85:2b:53:9e:50:8b:1c:
b0:10:2e:ad:af:c7:5a:6d:24:f0:0c:1b:ed:6a:9a:
48:22:c7:b0:60:8d:29:d4:05:89:18:e1:88:2d:05:
c8:bf:b0:7e:d9:f5:ae:de:40:73:d8:1d:80:2b:9b:
43:26:9e:5f:1c:98:86:8d:8d:8a:7f:43:29:b4:56:
56:6b:b9:78:8d:d8:54:09:9b:12:ec:98:50:92:ee:
7e:8d:80:24:63:1b:7a:92:fb:13:98:1d:16:94:ba:
21:6e:1d:7c:af:96:83:6e:58:bb:3b:20:72:27:cd:
df:8d:5c:d2:01:ae:90:6c:63:a1:ad:ce:77:dc:ca:
ed:2d:d9:fc:1d:5f:7d:fd:bd:a0:44:cf:8a:2b:74:
0f:85:7e:43:5c:50:a3:e2:26:84:b3:69:ac:6c:3c:
67:6b:3e:77:24:ca:86:2d:67:89:a3:9e:96:1c:82:
32:b8:9a:77:41:83:b3:cb:38:b0:56:8c:77:53:79:
25:95:15:e7:41:cc:b7:6c:b4:4b:47:8b:3e:10:18:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:34:17:69:52:DD:99:F6:68:64:80:C7:12:BB:2E:D6:12:EE:8A:1B
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ac:fb:84:79:c4:56:4c:34:e1:f9:8c:27:5f:b3:1e:a1:ac:
84:74:9a:20:57:62:c8:68:3b:c6:89:71:42:b0:a9:ef:59:ab:
21:14:20:a7:dd:27:b6:e3:04:3d:eb:d7:ec:5b:42:83:1e:2f:
ad:14:47:bb:28:cb:4d:6d:8a:1b:e4:95:04:3e:89:f4:59:f4:
49:1b:43:1c:31:55:29:0a:4b:b8:9e:a1:2a:de:b1:b0:c3:e8:
a5:be:5f:e2:0c:75:86:ac:5c:e1:07:bb:b5:f1:29:8f:4a:9b:
72:fe:9c:63:69:0f:d4:3b:d5:8e:05:fe:cb:e2:bd:b9:ad:95:
d8:5b:96:1a:48:d5:47:9f:ab:62:7b:5b:bd:ab:18:29:77:44:
b3:4d:1f:8a:37:a8:74:ce:c0:05:52:e7:f6:40:2c:e7:0c:df:
fc:f5:3d:db:92:99:e2:56:87:4e:17:47:83:60:48:ff:af:6a:
2b:39:3c:7e:47:c0:2c:bb:98:fc:c0:32:5c:58:b1:4b:21:44:
c8:bf:b5:e7:8e:6f:d2:9e:43:c0:52:7c:15:57:9f:0f:2a:bf:
63:88:0a:4b:83:10:f5:05:7f:82:38:82:b4:29:9e:64:62:10:
c6:19:37:a1:45:f0:a6:c6:46:b3:70:49:18:e3:e6:4e:ce:11:
70:df:b7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:16:30 2025 by rpki-client