Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: n+KdzzsrTkuIvXBRhRY9ZxQelPTqVKPRuyDRupcMRJo=
Subject key identifier: 4E:46:CE:D0:31:17:52:F1:DD:4E:89:65:69:39:2B:AF:B7:28:59:49
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 0196526D4719B1772C0789019A62783172D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 09:00:15 +0000
Manifest this update: Sun 20 Apr 2025 09:00:15 +0000
Manifest next update: Mon 21 Apr 2025 09:00:15 +0000
Files and hashes: 1: K9i5BAZ6MzcgF9CzcPcItueT7VY.roa (hash: SAFMofRuJhJyuX+kxWxAf3VBKLBtrOMj73WD80i1Rgo=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: Zop9dwI7k6/l9LHbUXOw9BrJckojaJgDWHN83Cr1+Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:47:19:b1:77:2c:07:89:01:9a:62:78:31:72:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Apr 20 09:00:15 2025 GMT
Not After : Apr 21 09:00:15 2025 GMT
Subject: CN=4e46ced0311752f1dd4e896569392bafb7285949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:9e:13:c9:e3:3e:a1:5d:ba:c7:29:bb:a3:
1b:10:09:3c:51:2c:27:50:06:21:20:88:9e:62:d9:
16:31:38:ad:83:b4:20:e2:fc:99:92:ae:85:77:9b:
fc:10:b1:72:36:9f:7c:ab:98:94:15:18:1f:12:24:
be:7f:ae:1a:93:17:df:ac:6e:07:62:1d:43:6d:17:
10:d3:f1:de:db:7f:a5:f6:e6:c8:e7:6f:70:02:87:
91:14:da:96:37:24:2b:f7:fc:6b:cf:99:b9:74:8e:
47:8f:e9:9d:79:33:94:42:3b:19:33:cd:ba:93:74:
10:45:c3:c3:e1:fc:2f:ab:e7:4b:a9:05:12:12:a9:
e3:9b:43:9a:fe:47:53:51:f1:17:0b:58:23:aa:e5:
51:f6:6b:af:40:d1:79:9e:0a:b9:ff:be:b3:6d:4c:
e8:64:fa:1e:91:24:77:2e:c7:9f:c9:a8:04:f0:12:
92:9f:eb:70:a9:2b:c9:b9:d4:92:2d:48:56:45:f9:
9e:03:e6:a3:3a:61:a1:05:dd:23:91:77:28:95:3c:
39:0c:82:b1:87:87:79:a3:60:dd:56:8b:58:0a:d3:
f0:61:8c:73:d3:cb:1d:bd:14:49:de:45:7c:b0:36:
ad:2f:9e:70:cd:f1:ba:4c:fd:4e:a2:04:e7:83:c2:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:46:CE:D0:31:17:52:F1:DD:4E:89:65:69:39:2B:AF:B7:28:59:49
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:60:c8:9d:8d:b1:96:09:64:57:eb:a2:52:b8:fa:a8:96:cd:
5d:be:d1:9c:60:ea:2a:04:27:b5:08:22:40:b2:fa:42:2b:05:
ba:b5:42:5e:0b:e3:79:0d:fc:5d:ac:9e:07:d5:3d:6b:1e:5f:
b5:f5:8a:a4:02:9b:99:51:91:17:2b:45:99:4a:68:5b:96:53:
eb:cb:3c:e5:d0:ef:b0:4a:29:b7:f1:45:21:c1:99:86:c4:f5:
5c:6f:35:0d:f9:82:5c:e5:b6:4a:e3:56:1c:64:f7:34:53:80:
3e:21:4f:46:bb:fd:a4:5f:f6:4c:b7:98:e3:dd:b3:7b:26:cd:
ac:a0:14:fb:9d:7c:24:58:3d:22:a5:43:c9:07:c2:f0:b1:f9:
98:a0:17:f1:42:78:10:8b:b9:dd:5e:11:bd:28:cb:17:50:d1:
8e:c4:2d:76:ca:fa:14:5b:d6:f1:cf:7e:31:b9:db:66:6f:d1:
c5:d4:32:f6:18:e5:41:3f:24:26:cb:42:8b:e1:52:d3:9f:92:
b2:80:17:db:07:f4:e5:50:e0:94:5f:d2:4d:8f:79:28:b4:e1:
3b:ff:5e:2c:b0:23:03:e6:22:f2:8e:74:cc:29:54:6e:78:61:
4d:98:2e:26:ae:0e:32:a1:b8:c9:8f:04:f8:3a:df:0f:9a:c7:
02:f5:1e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:53:27 2025 by rpki-client