Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json)
Hash identifier: on+jJ3madkwiHNZwur1zINhEgW9nwM6F/5NHBu4GEfU=
Subject key identifier: D0:13:A7:DE:32:3D:E9:BD:1B:0F:B1:32:F0:6B:4B:28:6B:91:AE:DC
Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Certificate serial: 019771512901A6F4184CD6D68BB6B68943B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
Manifest number: 0BA9
Signing time: Sun 15 Jun 2025 02:00:33 +0000
Manifest this update: Sun 15 Jun 2025 02:00:33 +0000
Manifest next update: Mon 16 Jun 2025 02:00:33 +0000
Files and hashes: 1: x9osegNwUKFrT1H1VZTt-kaY4bg.roa (hash: ZX93NU3lUgtZDAGcH0Q1U8yUfw/JO3m/vmWuhpphGKg=)
2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: CA9M8IlVaLE6OGn4tHRQTDxyrykhdVMIoG8P2toZ+CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:29:01:a6:f4:18:4c:d6:d6:8b:b6:b6:89:43:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Validity
Not Before: Jun 15 02:00:33 2025 GMT
Not After : Jun 16 02:00:33 2025 GMT
Subject: CN=d013a7de323de9bd1b0fb132f06b4b286b91aedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:ed:14:0e:db:d9:20:96:8f:12:ea:8f:c2:
2c:06:d2:e4:1a:e1:8b:fb:a2:54:97:16:72:8a:86:
c6:b4:95:14:0b:c1:7e:fe:77:52:0f:89:86:ca:f6:
4c:65:cc:73:2d:53:9b:19:ec:0d:f7:32:b5:f2:70:
2a:1c:b9:aa:ef:1d:d1:e5:b4:6b:8a:5d:5d:f1:95:
25:63:bf:db:2b:2d:ca:32:65:25:37:79:63:f1:b0:
93:2b:ec:a8:33:20:2d:36:a2:ff:63:cb:5b:76:5e:
e1:8a:fd:02:8b:b5:f1:40:59:ab:2f:eb:1c:4c:be:
aa:3b:fb:ff:5b:e9:f1:fb:1b:fa:ce:aa:60:de:a7:
07:e2:0e:95:05:97:0e:5e:29:00:d9:28:e7:73:19:
53:38:af:33:96:ea:0b:c8:e9:79:3b:2b:19:b6:3c:
2e:f2:c4:12:ae:ad:cd:02:69:07:d9:53:8a:bb:22:
7b:18:1f:cb:61:83:2c:bd:e8:65:af:29:a7:b1:4a:
72:d5:09:7c:3e:43:3a:42:2a:44:0f:9d:18:ca:e1:
a1:74:66:dc:ac:13:c6:c5:17:30:43:c0:c7:ce:4d:
ac:10:26:65:48:16:e2:44:b0:4e:ab:8b:d9:fb:0d:
77:39:52:60:48:2c:fa:d7:a1:7e:12:cf:33:03:09:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:13:A7:DE:32:3D:E9:BD:1B:0F:B1:32:F0:6B:4B:28:6B:91:AE:DC
X509v3 Authority Key Identifier:
keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1c:ca:73:50:f3:43:f6:9f:93:f9:b1:63:ff:ea:64:63:05:
c0:78:eb:0d:4e:85:f9:34:77:0b:5d:26:7e:af:2e:42:ed:c2:
bc:73:49:47:89:3d:35:23:8e:fa:e3:56:ac:56:07:e9:65:dd:
4a:a1:62:da:1a:85:23:c6:c5:b8:1f:d3:b7:22:57:a9:85:2e:
1b:2f:09:d0:ea:ed:4f:d2:96:ae:1f:39:1d:ba:c4:c3:2e:42:
6b:38:5f:aa:01:94:30:02:62:50:f2:a2:c6:c7:1e:37:b7:b5:
51:62:f9:49:81:29:84:a4:f8:16:b6:ec:f6:5f:b9:31:4a:41:
aa:7e:3e:23:7d:a8:4e:76:d8:fe:94:19:a6:ba:2d:4c:ff:f5:
4b:39:6b:c0:50:b3:b7:53:d5:70:4b:09:3b:2b:ee:37:be:85:
07:2e:e3:36:44:42:c3:e8:4a:19:09:4b:48:6b:7f:de:06:86:
7e:60:c2:e8:8b:e1:60:ff:9d:36:4d:d8:da:06:3f:d4:a5:82:
85:ae:43:f4:43:9e:bc:c0:35:4e:c7:97:94:b6:22:25:7b:41:
65:fb:9d:9a:95:54:29:67:ae:80:7b:e2:b0:5b:9d:0a:ad:33:
79:34:e9:6b:38:c0:8e:ff:c1:fb:03:63:f7:6b:49:f8:4c:be:
c9:b4:db:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:16:33 2025 by rpki-client