Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: FqwmXDS4NCdn164y69ly7Qbrn42cZ0No3pYs+M8lTuQ=
Subject key identifier: 2E:6B:7B:24:68:1A:F0:3D:25:73:2A:8A:D1:5D:38:96:A5:57:AA:19
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 01965424BFD0A3C3E2FE63B63AAA9529CAD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 086A
Signing time: Sun 20 Apr 2025 17:00:16 +0000
Manifest this update: Sun 20 Apr 2025 17:00:16 +0000
Manifest next update: Mon 21 Apr 2025 17:00:16 +0000
Files and hashes: 1: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: mKqEZ/sp4Df0uW7g0o6pWxlbO4YSGpuw9mzl7TZ2vJA=)
2: oYXpqhTt3GbQvZqNdYr3EWQ5ung.roa (hash: UPRTIlRixS9CM22oBbc4c5Z63dIGJf+vJONZ8V2i0x0=)
3: pcs_PEHDTdXvP_iINnpW2AcXpTo.roa (hash: bWlTVPyUsWBnzuOtIjYtj485am3ZoH6EessaELskjTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:bf:d0:a3:c3:e2:fe:63:b6:3a:aa:95:29:ca:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Apr 20 17:00:16 2025 GMT
Not After : Apr 21 17:00:16 2025 GMT
Subject: CN=2e6b7b24681af03d25732a8ad15d3896a557aa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5d:26:98:b1:b6:9b:34:7f:b4:db:43:e9:6c:
d8:5a:79:99:45:1a:8d:dd:3c:c0:54:ae:6d:4f:be:
8f:aa:d2:9c:ea:6c:54:99:df:22:1c:e9:df:b1:62:
97:f2:b3:6d:1b:0d:3f:64:7b:28:95:e2:7f:4f:4a:
57:74:93:78:43:77:53:ca:d8:9a:89:bc:57:68:74:
a2:a1:f6:5b:b6:d8:85:39:23:57:0d:24:b6:a1:ec:
c7:a6:ad:ca:d2:81:6e:b3:7f:47:99:75:6c:68:df:
b2:a1:9e:20:f8:6b:c4:70:f0:ce:23:d8:55:57:49:
4d:55:cc:b0:56:64:56:04:08:06:2b:3e:12:d7:30:
1d:35:a0:18:fd:35:e4:57:7e:37:95:14:aa:4c:a2:
26:f6:99:9a:9e:f1:f2:2f:da:2c:4b:bf:2b:e1:db:
19:f2:35:ae:38:5e:82:07:c3:bd:0b:44:d0:f1:38:
9a:d2:9e:c0:68:86:b2:a6:c3:a0:d0:72:48:25:60:
82:61:37:e1:d6:7d:cb:96:55:95:09:a2:e1:ba:0c:
01:c8:12:e9:cf:6b:e5:22:c6:b2:43:11:77:e6:fb:
15:dc:27:f6:3a:2e:c7:00:07:c6:12:a8:a3:fc:12:
bf:f5:70:95:53:3e:47:e3:95:82:33:09:1c:d9:8a:
bc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6B:7B:24:68:1A:F0:3D:25:73:2A:8A:D1:5D:38:96:A5:57:AA:19
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ae:f9:61:07:39:f7:cf:d2:f7:c2:19:7c:f1:50:d7:0f:65:
a1:30:08:a2:6d:2c:fd:9c:9a:03:79:fa:04:02:30:ea:6a:84:
ff:8b:0d:e6:aa:dc:dd:8f:4d:eb:48:a5:3c:cc:23:a2:08:d3:
f9:43:64:92:2e:56:97:3b:2d:ef:76:7c:0b:2a:ee:0a:b8:0b:
2d:0d:3d:24:e1:51:a5:26:2f:52:c8:06:2a:ae:55:c9:f4:f8:
6a:ac:36:8b:ed:6d:2a:22:7b:3f:10:44:6b:0d:5b:b6:34:3b:
ee:a7:a9:b4:e4:56:37:77:1b:9e:67:01:b2:b5:8e:52:33:ed:
72:b3:fa:c7:31:f6:bf:59:24:f5:e8:95:7c:38:7d:2b:c8:29:
6c:4f:c1:9c:92:44:db:61:0d:cf:b6:88:5b:a6:6a:61:1a:33:
b7:1a:33:af:67:d0:83:b4:e6:8e:69:91:49:87:9b:59:4f:ad:
fe:ef:cc:d5:10:ee:4f:5e:e5:07:64:e0:f2:08:14:43:32:21:
0c:2a:be:47:05:ed:e7:f1:f8:27:93:9d:2a:19:38:4e:b1:9e:
9c:2c:db:17:63:b0:73:ae:1c:09:e7:5e:07:9c:e1:af:09:34:
c9:05:b8:cc:79:d0:71:1b:2c:3d:8e:29:2d:b9:71:c3:a0:a1:
a3:09:12:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:02:26 2025 by rpki-client