Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
File: xP8jscNxNS85tz05pOB_jKmMzWc.mft (raw, json)
Hash identifier: UPhZJDWE9cHRZQuUsMmgD+0EKDm7fE3YuGkjmJwWsIk=
Subject key identifier: B1:70:2F:C6:2A:8A:ED:B0:00:F2:54:17:F6:37:CA:98:10:95:27:2B
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 0196556EC0037AA1F1B46F4F0ADB267F61D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
Manifest number: 138F
Signing time: Sun 20 Apr 2025 23:00:43 +0000
Manifest this update: Sun 20 Apr 2025 23:00:43 +0000
Manifest next update: Mon 21 Apr 2025 23:00:43 +0000
Files and hashes: 1: 5NSYUOXj5LO5RBveLimm0dMK87A.roa (hash: 26b/pGHQTwXlbmbG5ThZm5FqoNcPxzjE+DZsdMKKur0=)
2: Cj0uY_joEUEAfGtiZfe3ZL0PoW0.roa (hash: TH+u6IT5dpk2hfISpLuBXSAh8Mxg3KDgcPA02NCgPeo=)
3: bYoeFtClejfhTteW6s57MGrpz0M.roa (hash: XiaQPTwLHMkFqSpV5ersN02BOkHiCJtKzXc+PvuUKsk=)
4: mSN_1NgR8_RP_NHRmSVU0520UIo.roa (hash: BRRNK9jtVQ7Ev3axtUha/P9CxSMaCHG6Zn8SMsI5IhM=)
5: vBgsgkwekmg8ZVE8b4TJhK80LrM.roa (hash: c0jtWq7YzOBVoEF72n6cPgI2PZIibyOgb+LV/XfWszE=)
6: xNpETnG4xYSKenzmRRS7lJxILiU.roa (hash: rysXDGRcpk/iACSksmScnaHoO7AcY/3D8XpcuXaPuwI=)
7: xP8jscNxNS85tz05pOB_jKmMzWc.crl (hash: oCFuFfopV4iC/fC7mE0pTjmRuI8Clk7vluzjIUhQTm0=)
8: ymgEz60H5B-ezog8RgufDqIOe4s.roa (hash: M39Qnt8qmV0Mg6aCTITlSwk87VUrTu0U+CVvUs7j6K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:c0:03:7a:a1:f1:b4:6f:4f:0a:db:26:7f:61:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Apr 20 23:00:43 2025 GMT
Not After : Apr 21 23:00:43 2025 GMT
Subject: CN=b1702fc62a8aedb000f25417f637ca981095272b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:10:46:e6:d2:94:a5:5d:fd:e1:d8:44:49:
f7:3d:03:75:b2:7d:e2:8f:49:ac:bf:23:60:80:2f:
45:94:ec:0d:f9:e6:c5:a0:05:0a:0e:a0:77:28:70:
43:98:f9:92:09:7a:c3:03:a3:6a:fa:a8:2a:15:ca:
dd:33:9a:bd:41:12:b1:e5:36:cb:2c:ce:4f:bc:f6:
6a:5b:68:64:bd:a0:0c:70:89:0a:7a:04:7b:af:33:
a0:74:94:f4:47:68:13:16:ef:1e:07:4d:7c:70:2e:
b6:eb:79:99:5a:47:7c:0b:4f:61:a0:cd:04:53:1a:
91:7f:0a:fd:c9:f9:c1:c5:ad:27:ce:a9:72:d2:dd:
7c:dc:a4:cb:58:09:40:a6:14:7f:8d:75:c4:68:5e:
39:d2:67:a8:cd:9a:bf:e1:c5:69:9b:04:7c:6a:ed:
fd:39:5a:d9:98:dc:34:14:ae:52:05:ee:27:00:6f:
e6:a2:0a:2b:6c:c8:54:87:98:16:23:36:52:4c:da:
6e:ba:b0:0d:03:0b:17:50:15:fe:22:7d:08:17:59:
b3:9d:ae:73:5e:15:49:ad:b8:e4:d2:6a:51:b2:ac:
a3:01:08:94:6b:b8:c8:10:c8:01:73:7f:a3:ad:23:
97:79:c5:c0:95:d3:26:97:24:a5:ee:d8:5e:6b:a9:
0c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:70:2F:C6:2A:8A:ED:B0:00:F2:54:17:F6:37:CA:98:10:95:27:2B
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:9c:03:8d:1d:11:76:be:ed:a3:5f:34:c9:df:16:fb:b7:66:
1d:bb:d1:f5:34:19:d2:48:3a:18:c4:62:2a:ac:ec:5b:9a:fd:
33:9e:5c:74:88:38:00:ed:9a:47:30:43:78:ff:78:62:b8:e0:
17:f4:a3:3c:42:62:1d:d1:b3:71:2d:56:42:27:54:d2:e4:e1:
8b:78:a3:aa:81:09:07:4f:9e:f4:54:15:08:2d:7d:d1:bf:aa:
79:e7:32:7e:40:82:f4:3b:e1:b9:ee:a7:69:46:0f:3e:1f:4b:
13:61:f9:c9:8e:8d:c2:fa:90:ce:7e:d5:5f:f6:b8:a4:bf:aa:
6a:5f:c6:37:94:cf:1f:1a:68:d8:3f:ac:8c:58:55:15:65:f5:
12:9a:4c:01:53:29:d1:ae:a6:26:dc:b7:7d:b5:82:bc:ad:b6:
4e:da:35:4d:2a:c0:fe:88:06:77:ae:ef:18:55:f9:f9:10:81:
1f:22:94:2f:89:89:7c:66:fa:df:ab:63:6c:3d:6d:c8:7b:43:
42:8a:6e:39:61:d6:58:6a:41:5c:21:47:41:80:4f:22:be:c8:
c5:66:1e:74:9c:5b:29:8f:84:a6:6a:12:d1:d8:5f:1d:fb:37:
ca:26:bd:bb:b3:21:bb:13:78:48:c2:36:99:7a:1f:18:5a:b9:
01:2d:f5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:47:46 2025 by rpki-client