Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
File: XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft (raw, json)
Hash identifier: dg4QWfXlHKvcNd/NdUlLkzt46dDgV8+lDNO4Gi7j3rc=
Subject key identifier: DD:37:FC:64:83:39:ED:F7:DA:00:D2:5A:D4:D2:20:4C:FF:EA:09:DC
Authority key identifier: 5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
Certificate issuer: /CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Certificate serial: 0196447B157257EEDBB2105203F7DBAB8349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
Manifest number: 38
Signing time: Thu 17 Apr 2025 16:00:39 +0000
Manifest this update: Thu 17 Apr 2025 16:00:39 +0000
Manifest next update: Fri 18 Apr 2025 16:00:39 +0000
Files and hashes: 1: XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl (hash: owazy6MpBwWbvfauzSQSkW6bfkz6ZC3aMF0Xg26f0+0=)
2: sHWJgB25eZ5MsxkzvHCaC9Q9eBU.roa (hash: tfZrpnb6Dc4xLEKe9XCNdEh3R+ehL6A7wZM06Ogyh8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:15:72:57:ee:db:b2:10:52:03:f7:db:ab:83:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Validity
Not Before: Apr 17 16:00:39 2025 GMT
Not After : Apr 18 16:00:39 2025 GMT
Subject: CN=dd37fc648339edf7da00d25ad4d2204cffea09dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:06:58:a3:e8:6f:ce:59:a6:6c:da:bd:a2:
40:73:ac:52:41:20:64:6d:85:b2:40:bd:19:8a:0f:
5c:2b:ee:9b:9b:48:67:87:ce:9e:c3:fd:a9:b2:7c:
a8:76:74:68:ad:43:82:87:10:a2:31:e7:c4:b8:70:
34:85:9d:a0:10:32:dc:eb:5c:7f:59:cf:33:65:6f:
a4:c9:15:f1:f9:52:04:f3:af:c5:62:48:af:c0:f0:
02:16:75:36:ec:e8:21:87:66:3e:9b:5f:14:94:87:
7f:8f:3b:88:eb:60:b0:2d:54:b9:82:d8:c2:b4:49:
c0:0e:a3:e7:56:c6:f8:ec:07:af:b0:a0:15:9e:68:
2e:09:21:a2:d6:5f:fb:59:2d:da:2d:0d:7d:8c:d8:
57:fb:78:b1:a1:e8:27:79:43:9f:4c:ab:79:42:d9:
90:fb:a2:dc:33:66:5d:0e:a9:cb:da:b6:40:1c:03:
58:db:f2:2a:a8:2c:40:44:ef:4c:c8:5b:11:90:59:
ef:88:3e:53:99:f2:8b:e1:95:f0:77:29:27:bf:70:
7a:14:bf:f5:d4:c9:33:20:e6:d0:d1:d2:68:d0:34:
64:96:21:47:e3:0c:86:57:19:76:30:1f:a4:d4:b6:
80:9f:a6:c7:d6:69:49:60:58:c3:ac:09:0f:ab:39:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:37:FC:64:83:39:ED:F7:DA:00:D2:5A:D4:D2:20:4C:FF:EA:09:DC
X509v3 Authority Key Identifier:
keyid:5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:66:50:99:b2:b3:34:3c:e6:5e:d2:cf:3d:e5:d6:4e:83:76:
e9:04:d5:21:12:f4:90:9b:e5:ae:08:4b:70:f9:11:bd:3e:b1:
1c:14:fe:5e:03:0e:6a:66:6a:6f:3a:4a:52:15:bc:63:cd:e0:
aa:14:b6:af:71:99:9e:ee:cc:af:fe:45:ea:3a:c6:ae:aa:8f:
74:63:d4:c3:67:c4:8d:56:e2:6d:74:88:02:79:2e:17:c3:20:
3f:a5:e8:fd:d9:f5:0e:71:ff:2c:30:90:a9:02:f8:15:39:0a:
41:e5:f5:ac:76:55:fe:94:9b:78:78:72:c1:ce:e2:69:3e:eb:
67:cf:6f:ee:48:4b:48:dc:15:65:2f:08:e5:2d:9d:8d:41:c9:
59:a9:7d:03:ef:f8:f7:fb:1a:15:ff:b7:00:ff:a8:85:d6:f3:
17:88:bf:fb:f8:d3:9b:cc:9e:da:e3:03:61:c2:8c:88:38:09:
65:db:18:67:33:55:48:31:f4:75:6c:19:67:ad:6a:7e:14:19:
4e:0e:8f:b0:c8:0f:dd:e0:e8:7b:8b:b0:b0:2f:f6:95:5d:5c:
5d:e9:19:4f:d9:9c:0a:87:0e:09:eb:e9:b5:2e:6d:be:37:93:
59:df:89:a2:5f:d1:21:22:b5:9c:d3:68:a1:e8:6f:8b:37:d8:
15:de:8d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:28 2025 by rpki-client