Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File: 1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier: aVe7vKDdr8a4c3f41QTof374NKep7XS8lTsNKwDTxNA=
Subject key identifier: 70:6A:56:BC:E7:7A:E5:1B:B4:9B:59:B2:7E:43:9B:8F:15:36:BB:4E
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial: 01958B166F5F5D61D0964BD3067F29D781E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number: 1498
Signing time: Wed 12 Mar 2025 16:00:58 +0000
Manifest this update: Wed 12 Mar 2025 16:00:58 +0000
Manifest next update: Thu 13 Mar 2025 16:00:58 +0000
Files and hashes: 1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: +xxRXGBMZ0KGM1DzsMbjw6b04r6cmkaFVxfB94+J6ns=)
2: PT9g_wLcneBNjOxS5cSZh8KvoxU.roa (hash: 5/y3EvqHzR0t/EA2PXR7ybL1u3RTtSq96/aHOf8aTaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:6f:5f:5d:61:d0:96:4b:d3:06:7f:29:d7:81:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Validity
Not Before: Mar 12 16:00:58 2025 GMT
Not After : Mar 13 16:00:58 2025 GMT
Subject: CN=706a56bce77ae51bb49b59b27e439b8f1536bb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:0a:b3:44:0a:d9:20:5e:02:4c:0d:cd:40:
de:23:3b:4d:d2:ec:7a:9e:91:a3:50:a8:bf:b1:d6:
1b:81:93:90:50:0f:47:27:a6:dd:fb:61:39:18:1c:
0d:f4:b5:2a:37:ec:f5:02:50:57:05:67:50:97:75:
d3:bc:a2:7b:00:02:12:d0:1f:3f:e6:ae:98:15:8f:
b0:bd:0e:27:e8:34:fd:8a:73:17:87:7b:e0:3c:0f:
62:53:b8:00:a3:82:81:80:b8:d9:5f:b2:77:99:5f:
3e:77:dc:bd:0b:5e:c5:fd:e2:2f:43:6b:d9:d2:1b:
55:c2:1a:b7:94:39:7d:14:fe:82:f2:be:51:22:82:
cd:e3:d2:ad:1a:bb:6c:26:a8:e9:59:bc:b6:b2:49:
80:ef:3e:a4:54:dd:2b:63:b7:8a:20:38:14:bb:33:
97:f8:39:af:fc:3e:03:62:0f:94:5a:ac:f1:28:82:
d2:d6:53:29:80:3e:d4:3d:aa:86:cb:39:51:fc:f3:
2c:d0:30:d2:1e:c9:50:ff:0a:b9:ca:a9:56:55:d0:
4f:06:9f:ee:05:81:15:0c:e0:ad:48:9e:87:e4:f4:
54:ef:fa:da:54:5c:23:04:50:2f:3a:37:6b:c9:15:
8a:cb:c3:8f:6b:99:01:70:8e:53:68:6a:c8:e2:69:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6A:56:BC:E7:7A:E5:1B:B4:9B:59:B2:7E:43:9B:8F:15:36:BB:4E
X509v3 Authority Key Identifier:
keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b3:c0:dc:09:95:e0:7e:50:58:f2:71:d5:e1:b4:78:64:04:
03:1e:9c:e6:66:70:f3:ee:99:28:23:73:2e:af:f0:07:30:80:
0b:3a:0b:4e:04:36:05:85:da:65:42:0f:85:59:13:57:fa:c5:
68:25:89:d1:87:c7:11:88:1d:1d:d0:da:c9:77:20:97:f7:16:
1e:f1:14:30:93:3f:5b:3f:38:ff:cb:a8:c2:f3:48:aa:5c:2d:
a4:61:f9:52:6e:6a:47:e3:fa:ca:b6:b2:ad:af:ed:e5:77:4c:
3c:4f:b1:1f:7f:3a:35:e6:ba:69:88:aa:7a:98:9b:3e:7e:de:
b7:46:b4:63:10:60:a0:69:05:ae:26:d7:69:b3:54:de:44:04:
6f:7e:fe:b1:a6:42:85:84:25:d9:6a:4b:2e:23:45:ca:86:66:
b6:b0:52:a9:b3:00:05:e4:88:95:75:42:7a:22:e6:1e:fd:78:
9b:ae:9e:3b:79:f7:e2:f7:fc:c5:db:79:c1:0b:90:59:fe:d7:
16:b7:1a:e0:c8:15:1c:67:28:aa:f4:ca:5a:be:78:20:70:56:
41:20:7b:c6:94:64:36:30:58:50:3e:d5:8c:79:cf:fe:4f:be:
37:9b:79:57:54:eb:28:d1:70:27:d5:bf:4c:c3:1c:5c:c6:9e:
38:93:6f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:32:45 2025 by rpki-client