Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: jY5tJ4SeN+0AnVWp+AvdJeOgZtc/CHPJkLbm2z9EXu4=
Subject key identifier: FA:BD:64:F1:A7:9D:86:D7:8D:3E:31:F9:6D:01:5E:F8:2D:FA:F3:6E
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 01964DB54834A8CA100C6F8AC056FB7F469D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 11:00:48 +0000
Manifest this update: Sat 19 Apr 2025 11:00:48 +0000
Manifest next update: Sun 20 Apr 2025 11:00:48 +0000
Files and hashes: 1: VV0lcvnlnG9WTkwgXPk5TRHRcZQ.roa (hash: DsDIMEW7TR5yp1+sD2rXx7TV58t745Rd1fkPc4+bsBs=)
2: a85p_GEp5p6Bf3FjSd5TigV6wZQ.roa (hash: wqCCsxCv3hdKMkQBIvYu4j0t7kjF+iiKKHzp3iWmOnw=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: FopRs8NNgt27Mjo+GEZj9iqPGZ+06l2Lx/jRExNfQSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:48:34:a8:ca:10:0c:6f:8a:c0:56:fb:7f:46:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Apr 19 11:00:48 2025 GMT
Not After : Apr 20 11:00:48 2025 GMT
Subject: CN=fabd64f1a79d86d78d3e31f96d015ef82dfaf36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:62:d0:35:30:a3:43:d5:e8:c4:89:95:73:bd:
12:a4:78:38:60:03:03:bb:0b:8a:82:fe:0e:2a:61:
f7:2a:a1:16:51:b3:e8:8a:00:28:78:1f:e2:f9:dc:
81:ad:98:9d:d9:d3:5d:a1:4b:fa:ff:70:67:f1:c3:
6a:ee:ee:8d:6c:69:19:53:8d:8c:8f:5f:81:6f:9f:
b1:b0:b8:fd:a2:4d:c2:4d:d7:d9:dd:b4:6f:b9:0b:
7c:78:9b:0d:95:cd:9e:97:af:5e:a7:67:85:97:5a:
0d:d7:ad:69:a2:36:30:81:b4:71:3d:02:ee:e1:0c:
ad:d2:08:fb:7b:e8:9e:38:e2:41:f5:e3:7c:4d:73:
f3:b3:6c:61:99:f5:f1:9e:84:17:a0:5a:af:62:0d:
a8:55:04:ff:c2:3b:7f:3a:0b:41:9f:54:9e:ae:61:
c3:e8:3d:a4:f9:ac:9a:c8:55:16:ed:a6:5e:05:94:
da:0d:21:7f:49:c7:c7:39:17:b7:45:22:8f:11:95:
e9:77:b8:6c:fa:b6:cf:81:5d:64:89:9d:3d:8f:1b:
aa:b3:13:6d:f6:8b:c7:06:2f:49:a3:5c:c5:24:9f:
4c:5c:c6:a5:4a:79:3f:87:dd:c5:d8:3b:fd:d1:71:
ec:25:d2:f6:f5:49:b8:85:a1:df:54:06:82:87:ad:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BD:64:F1:A7:9D:86:D7:8D:3E:31:F9:6D:01:5E:F8:2D:FA:F3:6E
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c8:ff:40:2f:72:8e:c5:29:29:4e:ab:1c:b9:df:1f:0b:7b:
8f:69:36:78:21:b1:85:8b:fa:a2:d4:9e:db:5d:e2:97:a5:d6:
7d:82:56:08:48:0a:27:c3:54:71:a0:77:40:0c:f8:dd:e6:57:
82:56:af:d9:95:b7:8e:4c:32:c7:ea:0d:d9:91:36:f5:04:ee:
0f:f6:f7:87:31:e0:cb:d4:ed:7b:a4:c3:58:21:66:57:5d:33:
9d:50:2e:ef:90:af:a0:02:f0:34:bc:af:b7:07:a6:90:3b:51:
6a:f9:c6:cc:b0:03:65:01:2a:0f:fd:01:6d:8a:bb:55:ba:c2:
31:58:7c:b0:78:4b:51:17:13:06:3c:6d:e3:8c:42:d0:2f:a4:
27:10:e8:de:ed:ab:aa:a3:26:3d:9c:31:91:6a:4c:35:c7:ba:
94:91:3d:e1:18:db:14:a9:c8:89:de:5f:c8:86:ce:9b:c7:ef:
b6:41:40:0d:f0:f9:3d:d2:bc:9e:12:fe:e6:28:0d:27:b6:3b:
20:fb:6c:b0:36:8e:2e:cd:38:4c:2a:c1:63:11:29:28:39:bf:
7f:03:0a:0e:df:e6:f8:ca:b8:33:a4:d2:6d:48:a4:b8:5c:bb:
7a:d4:1d:cb:13:d3:a1:ce:28:17:80:9c:d4:ba:ed:b3:78:29:
51:24:d0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:22:57 2025 by rpki-client