Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
File: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft (raw, json)
Hash identifier: Iy0fLDQxjpCbbTwUf+DdRNsAQCbT0lz1j0sl3OV9EV8=
Subject key identifier: F8:AD:93:62:1B:E8:9F:64:60:80:B1:5A:BE:DB:4C:8D:02:8C:55:87
Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
Certificate issuer: /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Certificate serial: 0197722D229889A14F4B225E017B1B517469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
Manifest number: 02F4
Signing time: Sun 15 Jun 2025 06:00:49 +0000
Manifest this update: Sun 15 Jun 2025 06:00:49 +0000
Manifest next update: Mon 16 Jun 2025 06:00:49 +0000
Files and hashes: 1: gMn3NAKyq7saXpkPxZO8WkflotA.roa (hash: C/YIIPIOL8M4KETXlzNgei6yxSKu/8PUoNYZn01EOkY=)
2: rvEqkaSx88Mofyvgjk106t2jfIQ.roa (hash: Mt/fOTdq8tI+LHmhZzATBBPg2EKFAQ2gQnysBrQ+MLM=)
3: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl (hash: iM224E1eY9sC8EDNrTVHqPzyL7kiUNBg5t19j+9i+Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:22:98:89:a1:4f:4b:22:5e:01:7b:1b:51:74:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Validity
Not Before: Jun 15 06:00:49 2025 GMT
Not After : Jun 16 06:00:49 2025 GMT
Subject: CN=f8ad93621be89f646080b15abedb4c8d028c5587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:33:fb:a9:df:cd:89:a8:bb:45:c9:48:e1:
9c:a6:e2:3b:12:c0:d3:40:8c:59:93:d7:8f:d0:ad:
bf:0e:7a:5d:12:b3:9a:fd:0b:e9:7c:8b:d1:4e:78:
cc:94:c8:29:24:aa:3c:bd:87:c4:a0:fe:c2:64:d4:
ec:78:c4:f1:fb:c2:03:e5:8f:c7:45:6d:e6:f1:58:
67:77:d7:53:ff:81:51:39:7f:b5:f7:79:a0:55:9e:
b6:b4:f3:6e:72:39:8a:93:80:4c:87:38:bc:f9:14:
b2:ce:95:ff:ae:2a:f8:1b:d5:13:05:c3:71:ca:37:
73:13:30:1e:87:d9:3d:9b:b1:eb:b2:52:9d:7d:f1:
87:72:28:bf:5f:34:9e:1a:80:f3:6f:9f:1b:30:8a:
45:2c:b1:e8:7c:ad:30:68:22:9d:3c:7b:f1:e2:44:
57:b7:b9:f8:19:4d:61:d8:9a:15:bf:14:26:9e:87:
f6:34:e2:a5:95:42:e0:cb:b0:bd:75:55:ca:09:66:
ee:0c:d1:23:98:17:27:34:5d:a7:9f:dc:5c:78:b2:
59:bc:df:97:0b:78:20:e9:3b:eb:ac:68:a4:23:89:
52:49:6e:42:12:15:45:b4:91:b0:5d:55:33:9c:8c:
30:52:9f:5d:77:0a:fc:fe:5e:2a:19:ff:c1:87:4a:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AD:93:62:1B:E8:9F:64:60:80:B1:5A:BE:DB:4C:8D:02:8C:55:87
X509v3 Authority Key Identifier:
keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2f:71:eb:5f:8e:d7:e4:ed:c0:61:31:a7:dc:60:09:32:8a:
7a:9a:08:cc:30:d8:29:6e:2c:53:8e:fe:25:27:ef:f5:e7:2a:
04:9e:21:f2:e5:b2:c4:fb:22:23:0f:6f:89:91:c3:d6:69:ef:
68:61:0b:ea:fe:1d:52:6f:a5:71:f0:11:d0:b2:61:95:18:4e:
87:81:ff:7a:59:e3:d9:21:f6:69:a0:9a:06:01:a0:7c:4a:7f:
dd:0a:b6:5b:4a:92:d7:e9:00:37:ff:da:db:dc:42:4d:32:8b:
77:b4:a1:14:81:84:f1:03:72:61:53:13:99:05:a0:16:40:23:
d2:33:a0:e5:36:a1:72:b1:db:28:d7:0a:a8:3e:6c:7a:c0:72:
25:0f:5b:f9:7c:b1:d1:e1:51:5a:f3:8b:ac:ed:06:ac:04:6b:
1a:9f:11:d9:f1:a4:e2:7d:42:73:0c:ff:89:54:8a:be:0e:8f:
24:0f:a6:51:13:26:03:2f:7d:c5:f9:81:3b:0d:5c:32:ac:c3:
07:48:5c:ee:3e:f9:bd:7a:06:7c:cb:3c:76:ed:1e:09:f6:15:
24:50:5b:67:be:a9:17:12:cc:98:2a:f2:00:05:65:7c:22:c6:
be:08:c4:f1:a9:c8:41:5d:a9:f5:cb:8c:15:82:04:f9:76:6f:
33:a0:b8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:11:57 2025 by rpki-client