Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
File: XfEaGA3xeZTkitMxhyz9AK2augQ.mft (raw, json)
Hash identifier: 3agZJwKw4W8Cosk42k9Ri3PP3yFPcQ+Cl96bZL9i478=
Subject key identifier: 2C:8E:2D:9A:0D:CF:7E:DD:05:10:1A:E3:07:9E:7B:0A:44:B5:02:EC
Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04
Certificate serial: 019658A65B721A2280938ABE8B38D177FB1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 14:00:19 +0000
Manifest this update: Mon 21 Apr 2025 14:00:19 +0000
Manifest next update: Tue 22 Apr 2025 14:00:19 +0000
Files and hashes: 1: Ncjyog8MF3WbF2yJkOiT3QGNrY0.roa (hash: mac69omVU5l4vKMkEn8yNVakFQh8bBKDgGibhl+5Pew=)
2: XfEaGA3xeZTkitMxhyz9AK2augQ.crl (hash: sWBjiwwnICRPkmDyJQa1HQsz8FcgXUK/4muwrPjRJyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:5b:72:1a:22:80:93:8a:be:8b:38:d1:77:fb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04
Validity
Not Before: Apr 21 14:00:19 2025 GMT
Not After : Apr 22 14:00:19 2025 GMT
Subject: CN=2c8e2d9a0dcf7edd05101ae3079e7b0a44b502ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:62:42:aa:fc:11:33:47:4d:2a:87:2c:4f:
52:bf:74:47:81:e4:64:37:61:16:6b:e6:36:a7:8d:
ff:4d:86:5c:28:b7:5b:38:2f:c8:ed:f0:67:1d:0d:
21:fa:fb:4f:e7:21:7f:42:fc:af:6a:56:bd:d3:a2:
14:0a:ba:38:8a:da:cd:81:c8:1b:1a:9b:6e:72:ce:
0b:64:99:14:75:59:c0:03:3d:c2:3a:16:5c:5f:a5:
0d:07:e3:42:3a:2f:0d:55:00:9d:11:5b:c9:ec:f4:
11:4c:fc:f3:96:6c:28:36:1f:23:32:43:f3:03:39:
c8:f8:4c:1d:bd:1b:38:87:8b:03:e8:dc:ba:f3:f4:
4c:43:7f:aa:4b:ea:24:35:37:fd:f4:ff:94:56:b8:
be:38:13:4b:58:d3:47:c8:d6:9a:a2:e4:ba:0f:1b:
fd:ba:33:28:63:ef:7b:47:e5:f6:cd:32:d0:97:8f:
17:84:0b:de:2f:1b:09:67:91:ac:7e:64:82:8a:10:
1f:5f:55:63:f3:2e:f4:83:7e:01:ba:b8:9a:42:c2:
56:13:59:0c:82:0d:96:f9:13:f9:2f:1b:0b:30:93:
ac:3d:10:4f:1d:3a:ea:79:ed:bb:34:8d:02:84:e0:
f3:7d:0c:1f:bb:98:11:ed:69:37:19:84:7e:2c:68:
da:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8E:2D:9A:0D:CF:7E:DD:05:10:1A:E3:07:9E:7B:0A:44:B5:02:EC
X509v3 Authority Key Identifier:
keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:14:d5:38:43:4a:5b:63:9b:51:c7:19:8c:1a:44:3a:cc:1f:
95:7f:13:ca:f7:ee:c5:87:67:14:8a:80:e0:bf:fe:fd:bf:74:
e0:12:8b:92:2e:9b:5b:d0:dc:86:76:6a:e6:58:9d:47:8d:6e:
30:11:51:49:09:7c:24:92:23:c8:f6:6c:1a:33:62:26:ad:85:
c3:9f:59:2f:19:8e:92:e7:57:5b:27:50:6a:a3:0f:ba:30:58:
f2:8c:e5:0b:12:a6:ff:48:92:c7:cc:d6:ba:be:e5:0e:9b:e2:
b8:bd:d6:92:ea:5d:34:0c:4b:eb:ce:19:f0:85:6b:d1:57:46:
b1:08:b7:4f:5b:95:1d:70:13:7d:2c:01:d4:f2:41:54:80:74:
22:e0:41:76:88:9d:8b:01:c3:b0:97:4f:ec:6d:96:4f:43:6c:
e5:00:75:5a:d0:7e:d1:73:6d:b7:14:e6:97:3b:a4:0c:30:cb:
e0:d7:9c:34:3e:a9:13:b3:35:e4:a0:aa:36:44:6a:00:0c:91:
26:a3:90:2d:c4:94:75:c4:06:2d:fb:e2:93:c3:5d:a7:7b:b5:
f2:1c:51:22:79:c5:ee:15:fc:92:7d:6a:68:e2:d1:d1:69:44:
97:c2:75:13:f2:29:25:4b:b9:e4:f4:c7:3b:ea:2f:23:ab:31:
4a:87:b4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:19:03 2025 by rpki-client