Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
File: xJ7uJN6rVSARm2o9oEV9OcQGQds.mft (raw, json)
Hash identifier: hcHGyCTOhHI1uwef8L7KFNGrf9llUaAE5ZZ1L8JR0XE=
Subject key identifier: 53:AC:E8:57:C6:0E:8D:D7:00:2B:2D:39:A0:46:3B:2F:2D:12:78:5D
Authority key identifier: C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
Certificate issuer: /CN=c49eee24deab5520119b6a3da0457d39c40641db
Certificate serial: 019652DB3F8AFF8A675920E4B84146F4D60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
Manifest number: 0E22
Signing time: Sun 20 Apr 2025 11:00:22 +0000
Manifest this update: Sun 20 Apr 2025 11:00:22 +0000
Manifest next update: Mon 21 Apr 2025 11:00:22 +0000
Files and hashes: 1: eZo07jBCKWD2FYiNfDITWNW5OaU.roa (hash: 09rC6Rc4KHaoiqlZ0+3v+LC/tqWiWb4ZuqXZ8h/EnX0=)
2: xJ7uJN6rVSARm2o9oEV9OcQGQds.crl (hash: 4DFMPJlcPQvL6YcpJQIO2QrgoQV74S6H6BpXIOlGc1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:3f:8a:ff:8a:67:59:20:e4:b8:41:46:f4:d6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49eee24deab5520119b6a3da0457d39c40641db
Validity
Not Before: Apr 20 11:00:22 2025 GMT
Not After : Apr 21 11:00:22 2025 GMT
Subject: CN=53ace857c60e8dd7002b2d39a0463b2f2d12785d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:9d:11:ce:65:1f:37:a8:67:75:07:a7:eb:
ce:5e:ac:b0:4f:c3:5b:22:f5:ad:66:3f:14:16:73:
7d:6f:b5:f6:9f:32:e7:ce:c2:0c:f7:4f:a6:7e:2a:
73:3c:21:1f:7a:e9:d9:69:a5:e2:b7:a2:15:b6:ea:
e8:17:f3:2c:5a:86:84:9d:9c:db:03:70:7d:24:3f:
a7:bb:ef:5f:95:07:11:43:09:d1:cd:cc:1b:c9:cb:
2c:7f:ea:d0:a4:6a:55:a5:a6:20:44:bd:38:19:33:
40:74:55:ac:a0:d5:20:85:01:b3:be:be:2e:7e:7b:
7d:c5:a3:53:61:ca:ab:ce:2b:88:5a:e3:67:57:99:
3e:9b:ba:2f:f5:d4:d7:e6:89:c2:7b:be:66:af:d9:
41:91:c6:52:3b:68:e9:9a:72:a7:3e:66:e0:9a:86:
8e:a4:8d:48:dd:c5:db:99:e3:fe:f7:13:9f:21:7a:
66:2b:bf:fa:57:bb:a1:aa:25:a1:ea:34:6f:d9:38:
7b:81:e4:e9:8d:5d:15:c5:72:97:11:21:8f:0b:bc:
3f:38:07:b2:d9:79:40:69:64:a3:2d:25:d7:a3:6a:
f5:b6:28:11:8e:67:27:fc:80:e2:41:c3:36:ea:1c:
43:c9:b8:88:c9:7c:ad:d2:b6:ab:f6:c1:2c:e3:05:
f2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AC:E8:57:C6:0E:8D:D7:00:2B:2D:39:A0:46:3B:2F:2D:12:78:5D
X509v3 Authority Key Identifier:
keyid:C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:0a:dd:02:b4:51:f4:fd:30:f8:50:1c:c6:9f:6b:c9:d6:97:
3f:88:8c:7c:5b:0e:80:44:10:84:16:3b:6c:ab:39:f3:31:54:
c2:18:59:ed:a6:b3:7d:75:90:a1:97:54:7a:84:30:08:87:0c:
9a:78:4b:3a:3c:9b:ca:8f:fb:3e:36:62:d5:83:82:aa:55:c5:
57:05:cd:7e:d0:1e:dc:44:45:55:9f:33:5b:65:ec:90:00:f0:
7e:b2:d7:33:e8:e1:4c:52:4d:98:c4:ed:55:4c:dc:1c:58:30:
3b:17:a4:fd:aa:a1:64:98:ee:cf:65:95:c3:6c:a5:cc:9d:fc:
69:18:0c:3a:8d:b6:4a:ef:58:00:15:8d:d7:dc:d5:6c:2f:57:
9f:77:70:44:aa:e6:ae:86:b9:ae:56:81:cf:8f:1d:80:ca:d8:
98:7b:50:79:ba:bf:0a:d2:78:70:e8:fd:d6:79:6f:ff:bb:fb:
45:e8:ad:a0:61:35:17:2e:79:56:49:d3:7d:ab:87:b0:bf:c0:
c3:a1:80:31:e4:c9:4a:94:55:61:dd:91:4e:a3:8a:4d:56:0d:
67:34:1e:ca:0c:d6:f8:b2:93:f2:4e:24:ae:28:01:cc:27:30:
7a:09:f1:cb:c0:91:2a:ac:a6:0e:cf:2e:3c:b1:37:2b:3a:a9:
a6:19:88:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:58:52 2025 by rpki-client