Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
File: cxkAeiit4HgdMS2NSUcts2dnBBY.mft (raw, json)
Hash identifier: Jg54BAzLOwm59O0reiggpjUWcKul/13glZx9/wHMxzA=
Subject key identifier: BA:35:43:FE:8D:2D:75:ED:5A:DA:28:AB:EC:77:2F:BA:36:4B:33:00
Authority key identifier: 73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
Certificate issuer: /CN=7319007a28ade0781d312d8d49472db367670416
Certificate serial: 01964C346C72CBA7EC333C5F3A9DE7C167DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
Manifest number: 0775
Signing time: Sat 19 Apr 2025 04:00:26 +0000
Manifest this update: Sat 19 Apr 2025 04:00:26 +0000
Manifest next update: Sun 20 Apr 2025 04:00:26 +0000
Files and hashes: 1: cxkAeiit4HgdMS2NSUcts2dnBBY.crl (hash: Xai7w8KOK2sTBEy1bmhFwurc1CZfMQp9H9aA3lNivFQ=)
2: rOIGMeXF9bxOY5fu4vCOE7NrCP0.roa (hash: 1nU5+mzZGJaibKrLnnLB5qj48GydY1KP7W2pluR6Ujw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:6c:72:cb:a7:ec:33:3c:5f:3a:9d:e7:c1:67:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319007a28ade0781d312d8d49472db367670416
Validity
Not Before: Apr 19 04:00:26 2025 GMT
Not After : Apr 20 04:00:26 2025 GMT
Subject: CN=ba3543fe8d2d75ed5ada28abec772fba364b3300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:eb:d3:a3:9e:3a:43:db:d0:14:95:7b:c6:f8:
0a:fe:02:28:80:ea:cf:e0:8c:68:16:33:41:fd:68:
a4:22:b4:84:93:e0:1a:25:03:eb:39:cf:12:0f:77:
77:41:06:6b:34:d6:11:4a:0a:dd:36:93:ae:fb:28:
47:40:f7:08:b6:9e:e8:0e:c0:74:fa:2b:95:03:22:
e1:3d:9c:a0:2c:82:6c:28:58:0b:62:ab:cc:b1:0d:
43:72:89:63:99:ca:b3:54:1f:2b:b4:56:92:7d:af:
22:c3:c7:f9:b9:72:f0:4d:f5:52:23:e3:eb:7f:0a:
93:0c:b0:b0:64:5a:30:25:37:1e:b9:42:98:25:d9:
0c:4a:64:49:5e:24:2a:69:e7:bb:df:31:f6:88:c5:
9a:19:28:b6:af:e7:0b:45:ed:cb:21:78:6c:fe:18:
90:7b:f8:00:03:1d:39:f1:88:4e:48:60:09:00:47:
7d:3d:1e:d2:01:a6:4f:49:f4:51:33:6d:f4:d2:e7:
28:2c:53:97:49:10:fe:4b:ca:f0:66:fc:51:40:b1:
38:7c:22:c3:03:10:16:a5:93:da:15:a1:ed:49:40:
a3:e0:a1:de:e4:1b:40:3d:ee:9a:70:e9:23:7a:c8:
93:1f:ec:15:a0:6e:52:99:db:72:59:4a:07:ee:e4:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:35:43:FE:8D:2D:75:ED:5A:DA:28:AB:EC:77:2F:BA:36:4B:33:00
X509v3 Authority Key Identifier:
keyid:73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:02:ee:81:57:c2:b9:7b:26:78:aa:50:32:81:39:b1:eb:ee:
25:e8:51:82:2f:a5:e6:65:b0:e5:0e:95:3b:52:5b:e4:e6:ca:
49:c8:fd:16:55:c5:2d:93:5a:6a:4e:be:af:ed:69:eb:d8:f6:
f0:dc:da:07:28:d2:32:4e:59:88:0b:92:eb:7d:86:ad:63:69:
fa:17:02:e4:87:39:07:2f:fe:55:95:75:67:f3:8c:8b:43:46:
84:db:70:a2:7d:cf:04:60:d5:25:23:5b:27:3f:1c:c0:01:d9:
20:f0:08:cb:96:3c:15:2c:ac:ba:ff:0f:cc:9e:54:0a:b5:f9:
a6:35:6d:ea:30:d3:ed:48:8d:00:41:ac:51:37:31:40:7f:c4:
77:eb:a5:13:1b:1a:65:4d:ac:b4:29:a0:cb:46:d9:fd:7b:d4:
37:b3:3a:39:3f:03:cc:bc:53:3c:af:f6:0a:c7:8b:3b:74:eb:
cc:d3:bf:6c:60:52:83:3c:91:e2:01:bc:0a:e8:21:b5:cf:88:
9c:1f:67:6c:13:58:fe:3f:a6:23:07:9d:2b:e3:73:9f:88:33:
72:47:5d:2e:50:a6:05:3f:e9:40:02:52:cd:fc:1e:7d:bc:63:
da:b7:a4:97:c2:80:18:c6:16:e5:6e:88:2f:33:c5:e4:b6:8b:
07:80:31:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:13:17 2025 by rpki-client