Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier: ckdCbEGiM//9IWVAh2082Jsz7rNJi4pHQLftUPRA3U4=
Subject key identifier: 4C:AA:39:D6:1F:94:C2:90:3D:C0:D9:02:BC:10:08:5A:D1:CC:7E:6A
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 019770AC226AEACF56D8FCAB3802E1C632CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 23:00:18 +0000
Manifest this update: Sat 14 Jun 2025 23:00:18 +0000
Manifest next update: Sun 15 Jun 2025 23:00:18 +0000
Files and hashes: 1: W0bin1f1CMvgpKtT56TjILo2VZA.roa (hash: X82YsEeg1Z/7Sd+F8cKgkMOl6JvYCwSgMvIizshjpZc=)
2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: yIJaXmmg+BagSllbTz+sSoTu4EP9J+hmXzY4MIvw+N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:22:6a:ea:cf:56:d8:fc:ab:38:02:e1:c6:32:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Jun 14 23:00:18 2025 GMT
Not After : Jun 15 23:00:18 2025 GMT
Subject: CN=4caa39d61f94c2903dc0d902bc10085ad1cc7e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:bb:9b:87:e7:f7:2e:44:7f:07:48:ce:e1:
c6:8d:0e:0c:b6:8f:fb:0a:bc:7d:52:25:10:10:88:
15:0d:3c:b5:0f:a1:46:d3:58:7c:f8:7c:a0:5c:0e:
2b:8e:18:a8:1e:a4:93:65:f4:b9:b1:a7:ed:f8:65:
07:10:ee:29:c7:c5:d4:cb:aa:27:e2:aa:39:ae:e1:
79:b7:9b:af:1a:f2:79:c5:ee:cc:b5:d1:7a:04:a5:
55:17:5b:43:45:ea:6f:cc:6b:a4:56:dd:3b:73:59:
ec:89:6a:25:b0:14:a8:45:90:bd:09:aa:3c:29:ec:
3a:50:29:ae:3f:82:c9:c1:ba:3a:a6:37:cb:d9:15:
a5:cd:ad:61:ee:16:e0:06:d7:37:b2:cc:29:83:7a:
dd:30:62:89:cb:5a:7c:39:b0:d7:1f:fa:44:42:09:
9b:5c:a9:e0:02:f6:00:0a:c5:1c:2b:3f:79:55:d6:
0c:f1:52:3b:60:0b:bb:54:94:28:bb:e4:35:ea:cc:
65:83:79:66:0b:3c:67:1e:2c:4d:87:56:72:5f:4c:
dd:8e:0d:40:ce:d2:11:80:c8:32:78:c9:ee:e2:9b:
7d:a3:01:41:38:e3:50:6c:b4:13:87:81:46:90:06:
14:d7:cd:69:e4:3b:d9:62:06:8f:7a:23:69:8e:97:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AA:39:D6:1F:94:C2:90:3D:C0:D9:02:BC:10:08:5A:D1:CC:7E:6A
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:95:39:d2:6f:bb:08:bc:7c:9e:2f:25:db:a7:62:29:84:a0:
cb:1f:c2:7c:bb:cc:d0:ae:53:6c:78:06:92:96:04:bf:7f:5d:
d8:c6:38:21:31:8b:4b:7f:c4:08:64:1e:d7:f5:aa:66:a2:a0:
b7:16:7f:1e:17:2e:e3:cd:b3:f2:c1:79:e4:69:6f:a4:df:ad:
dc:ce:0b:7a:ee:39:e9:74:7c:da:95:51:d6:52:4a:c8:27:13:
74:07:6d:a2:b0:4e:40:e2:13:fb:3b:f2:23:77:a8:a1:fc:e6:
c5:ad:f2:e3:cf:16:6a:7e:b2:53:9c:80:cf:50:70:f4:a6:e4:
df:52:42:cd:5b:da:14:40:f9:20:df:3b:62:45:f6:57:6e:b1:
97:24:d8:27:b9:a7:30:a3:c0:e8:6c:92:e3:18:b7:53:f2:dd:
de:fb:da:2a:a2:a6:4c:e6:a8:04:0e:4f:0f:d2:56:48:b2:60:
c1:b7:e4:e5:08:d0:2d:58:38:a2:61:2f:be:2e:3a:8f:89:14:
73:f6:c6:d3:3b:39:ce:23:c1:fd:81:a2:a9:84:db:49:1a:2d:
56:be:1c:e7:6b:5c:84:94:62:1c:ab:26:2b:18:fb:f0:5f:3a:
8c:07:6b:3c:7f:6b:aa:a3:2a:8c:0b:53:c3:44:57:fc:f7:41:
54:27:e9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:09:48 2025 by rpki-client