Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: O3ka/0utUjQSX7kJrZ6fy//frLwe2joQOQ/5Ag7jyUk=
Subject key identifier: 32:58:50:FA:90:81:E8:7D:D0:09:00:D2:64:47:FC:3F:F0:4F:D0:B2
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 01965EA8CBFDC72941A4A81C8F88D0B262F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 0C68
Signing time: Tue 22 Apr 2025 18:00:42 +0000
Manifest this update: Tue 22 Apr 2025 18:00:42 +0000
Manifest next update: Wed 23 Apr 2025 18:00:42 +0000
Files and hashes: 1: N9xO1-NLybIuf2QGNV0iV1i1rRA.roa (hash: EUQ0hueLkMsL20to636qmUcLllL0XtQ2Nr9B2Qpz0Yw=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: WtxuVKcGVjq4hDpFvF/TS8+8MaWNd7Up1gMfSvXiXG8=)
3: jaAQVqLk3N6vXmbGkwSHtHbashQ.roa (hash: 57hExgt+ivC5tWr9wIi1WBpxn1Wv7MUmq0/RKAWH5Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:cb:fd:c7:29:41:a4:a8:1c:8f:88:d0:b2:62:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Apr 22 18:00:42 2025 GMT
Not After : Apr 23 18:00:42 2025 GMT
Subject: CN=325850fa9081e87dd00900d26447fc3ff04fd0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:48:6d:e8:b6:4c:4c:e3:25:16:7f:f3:ac:9a:
74:4a:37:63:4a:8f:c5:1e:d1:58:75:27:7d:aa:33:
57:b8:98:f1:0f:45:2a:55:e0:de:ba:92:2e:b8:e2:
50:63:fe:72:29:93:89:e4:8c:3e:15:f2:a9:4b:0a:
59:04:4f:f4:ca:80:60:f7:39:14:2e:a1:36:63:f7:
bf:54:1b:bd:ff:39:ab:d7:55:3d:24:06:66:82:2e:
b1:89:80:1d:bd:0f:3e:d9:6a:d4:2b:c7:49:26:a1:
21:88:49:37:78:cd:fb:23:60:d0:5f:6d:84:de:4f:
13:d6:13:b1:ef:35:13:c2:d8:fb:06:64:5d:00:28:
be:dc:b9:18:44:3a:10:03:e7:7f:4c:a8:41:e3:ba:
c6:32:3a:4a:56:a4:c1:bc:c8:3c:ca:cf:80:d5:96:
93:0c:49:10:10:7d:ae:9d:32:fa:68:7c:d1:da:c7:
03:8f:86:87:a7:f3:84:d1:db:43:ad:ac:95:6f:6c:
09:c2:9f:20:90:17:40:d8:6d:86:7d:41:b1:62:87:
7c:5a:ee:9d:8e:e7:3d:6e:19:3b:46:8d:5e:aa:c9:
4f:71:25:57:c9:7a:08:d4:46:84:c7:36:8b:3b:3e:
e9:75:85:41:2c:07:76:bd:08:04:a4:32:97:25:a9:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:58:50:FA:90:81:E8:7D:D0:09:00:D2:64:47:FC:3F:F0:4F:D0:B2
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:96:12:3f:6e:ee:12:c9:b3:46:c9:9b:11:71:18:40:9b:ec:
54:ae:ea:0a:6f:4a:ca:f9:53:79:d5:3c:13:7d:8d:20:dd:14:
6a:11:cf:59:e2:53:97:ec:4f:6e:4a:ff:a1:06:c7:ff:60:f1:
81:e3:20:4f:b8:d3:0f:a6:c7:b9:bb:e3:0f:61:02:8a:5b:0a:
10:c9:e5:52:63:4f:fc:12:20:16:46:eb:38:3d:62:70:c0:53:
f8:ce:7a:ee:c9:55:0f:da:75:a4:ae:6c:e6:96:19:db:13:48:
9f:ce:c4:2f:37:20:4d:af:78:44:99:be:e2:28:e8:98:35:7d:
8c:76:2e:f4:12:8c:db:d6:a3:58:44:a5:03:91:29:2a:b3:77:
d0:95:9c:27:58:bc:57:8e:6e:d0:98:09:b8:cf:14:0a:06:19:
5d:26:bf:4e:8e:04:b1:f4:6b:75:1c:02:28:d9:43:85:12:a7:
27:3d:78:eb:0d:b1:5a:98:de:ea:90:73:70:55:51:aa:3c:d6:
3b:e9:c7:1d:19:76:1b:77:18:7f:d6:ef:7d:ea:7b:cc:93:1b:
5a:82:04:15:4c:94:e8:b2:22:35:a7:4a:0e:ea:d6:12:cd:7d:
30:25:79:35:f7:e2:a3:73:0c:9a:b7:e2:df:47:65:47:e5:89:
2c:be:0f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:15:08 2025 by rpki-client