Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
File: xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json)
Hash identifier: OCjcHqX5sSKL+7InXi7PzEQwG5gTfh977R3PMz3Bszk=
Subject key identifier: DF:97:6E:0D:01:97:E9:4B:9D:32:93:5C:95:4B:DA:33:5E:BE:16:1D
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 01958C60C48E53E0CACBC111C4BFD30A8430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
Manifest number: 14A3
Signing time: Wed 12 Mar 2025 22:01:46 +0000
Manifest this update: Wed 12 Mar 2025 22:01:46 +0000
Manifest next update: Thu 13 Mar 2025 22:01:46 +0000
Files and hashes: 1: 16AVPBqy4CLiJAk_oq82Ze4GFUc.roa (hash: 8ne68iP0EWlMyJtqhCBtDaybFvVR1nQvVur1A40T90I=)
2: KgJFjtXpANvbqkfqOR_BDITUz1I.roa (hash: Fx5cDQga5r+zhubxJZXoqZY5CAQumyi8huOxbjPNEyo=)
3: VXYSc8jV8LV0YUvD9GqhiG_Wg3I.roa (hash: gf+aTqupU26rjaPk4p/iExUHTOVBZ1BKZ/eBJG/4oJE=)
4: kJyTZGrKIJP-guAGkQfidQemnN0.roa (hash: 5VNjlZQ2lTGQgsP/MAa7aAdGIHpHVpDviDdJ3Ul/giI=)
5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: VJ91iWt1NmKnhjldSPliX8wtLLeD8pEvI1V2hKMdTXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:c4:8e:53:e0:ca:cb:c1:11:c4:bf:d3:0a:84:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Mar 12 22:01:46 2025 GMT
Not After : Mar 13 22:01:46 2025 GMT
Subject: CN=df976e0d0197e94b9d32935c954bda335ebe161d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:be:fc:7c:35:cc:a5:6b:02:32:93:8e:73:
62:56:7c:38:34:24:22:9d:9a:ad:6d:d9:71:61:83:
f7:29:50:28:04:cb:da:49:f2:34:e9:d6:16:d2:67:
4d:d9:a5:ac:d7:1d:df:ad:ec:57:c7:1e:73:a2:ce:
56:fe:0e:6d:d0:6a:44:42:97:bf:4b:77:32:08:3a:
26:e3:b0:b8:35:79:8e:c6:10:21:d1:5d:49:35:3d:
c9:08:2a:c3:0f:b6:a7:eb:34:90:f3:0c:8f:75:c0:
db:78:9e:87:f3:b0:50:1a:7a:e8:52:85:bb:c2:11:
4f:40:10:d3:9a:15:ae:9d:74:2f:c5:00:8b:6f:b5:
27:fe:7f:af:03:9e:92:39:f2:0a:bd:28:7f:4f:e5:
0a:d3:4b:52:82:cc:18:92:80:7d:e3:22:cc:62:96:
7d:bf:4b:49:19:6f:e6:5a:9f:d2:cb:c7:ed:28:a9:
41:8e:ec:0b:f7:8d:36:17:49:d2:6c:b8:24:e8:ea:
be:74:51:c9:a0:c8:b6:6f:67:9d:89:a1:7b:dd:b0:
6a:f9:12:37:33:f6:9a:12:b1:40:90:d2:5c:f9:d4:
ae:35:17:84:6a:34:3a:98:1e:d4:94:12:8d:35:21:
83:ee:c5:23:07:91:41:38:f7:60:85:75:c0:7c:6f:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:97:6E:0D:01:97:E9:4B:9D:32:93:5C:95:4B:DA:33:5E:BE:16:1D
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f7:15:bd:30:30:20:0d:92:f5:28:59:f5:75:97:e2:53:09:
14:e4:ed:76:79:de:91:c1:b0:06:a6:9c:58:26:8e:03:c6:39:
96:1e:c0:63:5d:04:a6:c3:51:2f:3f:b9:72:2e:43:fc:aa:78:
ea:68:22:72:b1:e2:e1:f0:a4:ac:b8:61:75:24:7f:4e:c0:e6:
68:c9:37:05:95:c6:79:8c:1e:90:4b:5c:f7:f0:b3:ae:7c:2e:
40:6d:64:dc:6a:87:64:34:3c:f9:12:51:12:eb:62:e7:fc:99:
39:25:e5:f4:ed:12:c5:5c:f3:39:6e:9f:93:a3:d5:2d:5e:99:
50:78:89:5c:fb:13:06:16:36:aa:cf:47:2d:24:61:40:68:ff:
c2:4c:21:8d:75:45:89:81:67:35:fe:71:87:b8:70:43:66:15:
bb:cc:b1:00:22:ce:21:77:e6:90:a5:d7:5d:6c:a7:3f:f3:c0:
df:93:27:43:90:e1:19:54:3c:82:74:51:82:79:4e:9c:a7:97:
f3:1e:cc:5d:b9:69:be:20:93:2a:19:23:e2:ec:8c:e2:87:e9:
db:17:f5:1f:f0:1e:04:18:21:41:5c:58:98:4f:b5:74:e9:6f:
47:d5:4d:8f:5a:b8:a0:87:0b:1d:9b:d2:15:ec:27:28:f3:dc:
e2:ed:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:04 2025 by rpki-client