Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
File: xm3GDRbf4WSdhsFpPheFjCMGOH8.mft (raw, json)
Hash identifier: 7A7s3HDJ+wyi9YuneZGnZfGw/BlBq+zQ+VeIuBQrPcw=
Subject key identifier: 46:6C:A9:6A:DD:D3:8A:3E:4A:AA:EA:61:81:C7:71:02:9C:79:D7:87
Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Certificate serial: 01965500FA1CED7F848021DEB927BB5624D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
Manifest number: 12E6
Signing time: Sun 20 Apr 2025 21:00:49 +0000
Manifest this update: Sun 20 Apr 2025 21:00:49 +0000
Manifest next update: Mon 21 Apr 2025 21:00:49 +0000
Files and hashes: 1: 9wllcBQptpahKiXvdA8fp8dAnd4.roa (hash: EZriZJeJYlorIY+q2d7CpiKRv59NpOmz9CDJjivHJGw=)
2: JehPYERpWNPyZpbjXvQLka1W0tc.roa (hash: lTB81sn8qz5yoT+HG2SJwj2/2HvuYhBId4lkI/gSD6M=)
3: xm3GDRbf4WSdhsFpPheFjCMGOH8.crl (hash: imduOLYoyBOWJWcmb8kqlsAj/cNMtv6dsCOUTSWRyd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:fa:1c:ed:7f:84:80:21:de:b9:27:bb:56:24:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Validity
Not Before: Apr 20 21:00:49 2025 GMT
Not After : Apr 21 21:00:49 2025 GMT
Subject: CN=466ca96addd38a3e4aaaea6181c771029c79d787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:f9:4c:21:ad:63:7b:15:66:86:aa:15:b1:
84:12:63:c5:4e:12:46:3a:41:b6:4f:8f:d5:1b:dd:
5f:52:8e:bb:9b:1e:63:24:37:f9:56:82:2a:45:35:
a4:1d:7e:8f:06:2a:a3:e5:18:73:a7:40:0e:45:01:
42:08:d4:4b:76:97:e3:00:cf:a0:31:b4:5c:28:99:
54:95:68:58:fc:4a:71:37:40:50:b7:9f:c2:5e:4a:
9f:1e:69:a2:5b:58:09:65:77:26:66:56:08:3b:bd:
8e:4b:a5:1d:23:20:2f:3e:b4:3b:6b:15:04:17:bb:
32:85:7a:6e:1d:19:5c:cc:60:fc:ef:c0:51:c2:15:
71:b0:46:7b:3e:63:c7:ec:7e:97:c2:45:07:bc:d4:
4d:17:d6:1e:55:f9:3e:f2:8c:b6:44:ec:39:d3:37:
15:ac:92:5f:e5:02:23:d2:bd:7e:43:53:42:1e:cd:
c9:56:17:ed:63:54:bc:fe:a4:be:be:81:75:9e:f4:
3d:ad:09:e5:f5:77:30:ec:10:dd:fd:4c:f3:7c:d2:
4d:85:58:d8:31:d7:e2:2b:f6:10:b2:c6:69:d4:98:
e9:a7:ca:24:41:e1:b6:16:d6:82:47:b5:83:b3:ee:
94:eb:5c:f1:2c:77:d2:21:30:74:23:c0:50:9c:87:
1a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6C:A9:6A:DD:D3:8A:3E:4A:AA:EA:61:81:C7:71:02:9C:79:D7:87
X509v3 Authority Key Identifier:
keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:15:36:5a:32:3f:84:f8:8a:d0:e9:a0:27:90:80:b2:c8:e1:
fa:ee:c2:83:57:6a:22:cb:c4:57:5b:82:02:4e:80:8b:b6:5d:
36:6e:e5:e4:72:d9:6c:d7:8d:c2:c8:93:55:9f:28:0e:d0:a9:
76:11:e8:66:8e:9c:db:e4:84:41:87:c0:a5:cf:a0:48:0a:36:
c9:9e:b8:2c:00:ba:a3:d2:91:82:ed:22:ac:e3:fc:03:f6:bf:
76:e1:ab:7c:b3:27:8c:44:7e:82:8f:a5:ad:10:92:37:f4:f4:
35:13:e3:5b:e7:fa:21:b4:0f:e0:b7:5c:68:43:62:47:1d:ac:
27:6f:b4:e8:9f:07:dc:cb:62:d3:b2:c6:a2:04:a8:fe:f0:00:
18:ae:ad:56:26:d8:7b:a3:c5:0f:17:1d:6f:40:f6:4f:36:a9:
bb:23:4d:f1:11:f0:f0:58:00:32:ae:e8:ee:78:16:a9:02:17:
ab:f4:43:10:4c:c7:2c:76:04:b9:75:a8:e8:02:04:40:51:ee:
d3:33:43:4c:11:5d:aa:5f:28:7c:dc:66:ac:a6:73:2a:08:6e:
b7:1b:8a:8b:f8:e9:cd:34:13:48:b3:e6:14:32:35:2c:52:13:
eb:6c:62:cb:4e:fa:ec:1d:21:39:0d:75:a5:57:13:6a:c2:b0:
1a:9a:7d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:25:46 2025 by rpki-client