Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json)
Hash identifier: cL68ka5Y1wUisKAllkqoflDA5R05S0HAcYmjGUbmMMk=
Subject key identifier: 64:C4:7C:B5:1B:C9:A6:AF:2F:16:08:D0:F3:3B:76:57:FD:FF:0E:2F
Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Certificate serial: 0196493398D7D2F65228F203C7494E1084C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 14:00:40 +0000
Manifest this update: Fri 18 Apr 2025 14:00:40 +0000
Manifest next update: Sat 19 Apr 2025 14:00:40 +0000
Files and hashes: 1: 2U0FmiNPuRsirMYN3FGklZxDD9Q.roa (hash: eQCdTyNKllRfFUhh8G66WPNPQZuFFFeE0Jbe10gfxJs=)
2: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: nBgHeAx6OxMrBfJpp+h1knHdhtFqWbBed+KQ6xgTsXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:33:98:d7:d2:f6:52:28:f2:03:c7:49:4e:10:84:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Validity
Not Before: Apr 18 14:00:40 2025 GMT
Not After : Apr 19 14:00:40 2025 GMT
Subject: CN=64c47cb51bc9a6af2f1608d0f33b7657fdff0e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:72:8c:62:b6:3c:51:11:0b:91:02:80:e0:
ca:c3:34:1b:70:fa:70:b9:66:67:aa:4b:c1:a2:f2:
8a:b5:9f:72:8c:b0:86:ce:8b:71:1c:a4:65:cb:d0:
64:7b:d3:4b:34:13:c1:86:35:96:4c:2d:48:79:e3:
c9:ef:fc:a4:3d:d2:1a:80:31:2a:5c:59:d8:17:71:
6c:6a:06:6c:4c:4f:12:4e:06:9f:7d:f4:01:66:bd:
9a:1a:45:ac:68:b4:19:ff:bb:25:e3:77:9b:e7:f6:
dd:a2:f7:0d:f0:59:5e:2c:cd:3e:5f:20:4b:fb:3f:
ed:23:6c:a7:ea:de:c2:57:22:72:0c:ef:00:96:a7:
77:d5:fa:ea:62:7b:2f:40:83:e0:06:0c:df:61:92:
d4:8b:e5:9a:64:85:86:bf:93:e9:79:8c:46:98:22:
c4:df:c6:cc:43:b5:bc:dd:83:ab:3e:58:1a:7a:fd:
a0:18:bd:8b:24:0b:f4:d8:1d:9b:8d:bf:a5:b7:94:
34:08:66:ea:fa:7a:52:e7:83:87:67:b0:95:c0:40:
78:90:9c:d3:ed:5b:3b:4c:65:5a:31:42:e0:f9:4a:
2a:a3:4d:09:66:fc:e7:e4:46:02:a4:fc:41:d0:04:
59:b0:cb:4f:86:06:7b:cd:ca:a0:da:0a:f6:9c:ba:
04:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C4:7C:B5:1B:C9:A6:AF:2F:16:08:D0:F3:3B:76:57:FD:FF:0E:2F
X509v3 Authority Key Identifier:
keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:73:d6:8c:2b:ae:fb:fa:cf:09:7b:70:1b:ec:27:95:55:76:
26:43:0e:0b:39:3d:87:84:54:0b:03:99:ab:b4:0d:63:07:46:
41:5a:a1:8b:23:01:2a:ca:f4:ce:4a:2c:be:e1:fe:00:23:e6:
c0:a5:77:b0:b1:b9:84:ae:4d:0a:15:82:f1:21:a9:46:ad:d5:
39:e5:3c:80:7a:e9:f9:2b:0d:77:e2:a2:5f:9f:a7:59:78:b1:
10:78:c9:ef:af:6f:cc:2b:a3:a4:ec:09:14:83:c0:e3:f1:a1:
4e:c7:95:3d:14:fa:20:71:98:52:1c:4b:ba:35:4d:99:54:03:
b8:65:53:c7:0a:ec:21:a7:0a:ab:db:06:13:08:45:c1:2d:06:
73:6e:ef:10:41:50:e8:2f:61:64:0f:36:a4:d0:bf:ef:69:b4:
ce:53:37:44:28:5b:5c:ab:86:21:15:b5:68:15:82:2b:1f:95:
d5:a1:1d:69:91:cb:bf:22:bc:90:ee:b6:3b:17:91:46:e2:32:
71:5c:4c:14:5c:ef:69:26:ce:49:70:33:9b:0e:13:ee:28:92:
8d:05:dd:a1:1c:fc:52:20:e0:10:59:98:20:46:79:37:e9:92:
4e:ab:9e:aa:35:8c:7f:3e:1b:20:ae:04:e2:58:a4:a1:37:71:
ad:2a:47:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:41:13 2025 by rpki-client