Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
File: _XBhwg1PCXYTrAMTI3pt8rsstdw.mft (raw, json)
Hash identifier: jv4zsy6dhDmecHC27Qo9tqV0Rl4lHJAy04Hy6unSRlE=
Subject key identifier: 07:23:A9:E8:A2:03:9F:BE:4B:C9:C6:B0:1F:FF:8A:61:8D:5D:BC:D1
Authority key identifier: FD:70:61:C2:0D:4F:09:76:13:AC:03:13:23:7A:6D:F2:BB:2C:B5:DC
Certificate issuer: /CN=fd7061c20d4f097613ac0313237a6df2bb2cb5dc
Certificate serial: 019773767E1FBE8DD7D2286746EB1C45DE76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
Manifest number: 0127
Signing time: Sun 15 Jun 2025 12:00:34 +0000
Manifest this update: Sun 15 Jun 2025 12:00:34 +0000
Manifest next update: Mon 16 Jun 2025 12:00:34 +0000
Files and hashes: 1: _XBhwg1PCXYTrAMTI3pt8rsstdw.crl (hash: 3iPAhdiCjQqmLKho/e51INoZxQLTiJ7/TPHjU68YRRA=)
2: oenpcHzg8QPV-rJqJOxh7sUU4JM.roa (hash: pI8sI3HGC0XwZjUjUuA9QCNQ3HFZ2jSXO5rE2e12GoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:76:7e:1f:be:8d:d7:d2:28:67:46:eb:1c:45:de:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7061c20d4f097613ac0313237a6df2bb2cb5dc
Validity
Not Before: Jun 15 12:00:34 2025 GMT
Not After : Jun 16 12:00:34 2025 GMT
Subject: CN=0723a9e8a2039fbe4bc9c6b01fff8a618d5dbcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:58:5f:95:5f:52:0f:99:92:6d:7b:71:92:17:
d4:71:f5:fa:f6:99:1e:25:11:be:a4:2d:cc:62:fd:
9b:53:9b:d7:21:23:3d:d4:30:01:1c:79:74:e3:7b:
b7:01:fc:56:68:20:0c:6f:a3:3c:4e:52:54:cc:0a:
86:57:a3:79:67:ce:53:a8:72:eb:c6:b6:70:f0:03:
07:6b:e1:30:86:1e:8a:2f:f5:64:37:af:32:b6:fe:
ce:b8:7a:12:fc:25:42:fe:1d:d7:bb:24:72:64:a9:
d1:9a:49:2d:b4:f0:5b:d3:ae:6d:28:6f:81:41:d4:
13:bb:3f:bf:05:44:37:1c:bf:72:d5:d1:8a:92:11:
33:a1:1c:5c:6b:00:be:56:01:cc:51:46:3b:90:d6:
d6:4f:25:64:8b:b2:27:5a:69:46:cc:ce:92:ff:a6:
8c:63:54:ff:02:06:82:dc:ad:33:51:d6:37:32:fc:
bc:b3:3e:56:e3:d6:50:a5:c6:57:25:54:52:83:17:
5e:43:df:c6:3a:20:84:df:8b:93:31:8c:c4:1b:df:
94:b3:3a:53:ee:cc:a1:f2:2a:f3:52:f0:6c:1d:b2:
a8:0b:6e:cb:57:89:bb:a3:34:88:0a:fd:47:31:0c:
41:41:73:5e:e7:c4:79:c2:d8:c8:10:97:e7:e3:28:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:23:A9:E8:A2:03:9F:BE:4B:C9:C6:B0:1F:FF:8A:61:8D:5D:BC:D1
X509v3 Authority Key Identifier:
keyid:FD:70:61:C2:0D:4F:09:76:13:AC:03:13:23:7A:6D:F2:BB:2C:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:98:84:6b:c8:10:82:73:f7:3b:5d:cf:5d:f1:e6:14:ca:2d:
c0:0b:27:b5:72:ed:42:f6:65:41:38:b3:91:51:df:9c:dd:83:
2e:23:71:2c:68:b7:09:c6:e2:e8:e0:4d:83:c0:84:fa:13:f6:
2b:d0:95:38:f1:ff:1c:83:61:85:3e:b1:73:8c:26:b7:f4:9b:
3c:bf:7a:13:e2:c2:64:6a:36:35:14:7e:3b:a1:41:44:e1:b3:
d0:79:b7:d7:1d:1f:26:22:a2:ec:f9:19:d2:7d:51:39:b0:2d:
47:f0:b8:bd:5c:9b:96:18:96:cd:5f:ad:61:e0:19:9d:96:46:
57:71:bc:8d:7e:51:e3:a9:d2:a3:7d:4f:4e:ea:da:c6:f4:6f:
93:3f:48:b3:ec:f6:d0:fe:79:80:ac:42:4f:58:f0:85:8a:17:
26:c4:2a:15:80:fe:6a:72:40:89:bc:5b:08:6a:9f:64:14:77:
02:bb:ba:92:5c:b7:93:96:3f:82:e3:c6:fa:37:53:6f:8e:f6:
ab:04:69:4a:5a:21:19:21:6e:7d:87:1a:20:ac:98:4a:e9:1c:
a3:1e:89:93:c1:fa:80:4e:7f:23:a7:5a:e2:da:7e:a6:7e:2c:
d4:03:cc:f5:78:39:89:d3:60:0e:95:50:02:dd:f3:92:61:cb:
b1:9a:4a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:25:34 2025 by rpki-client