Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: Zp/ZBm26lWLHwI2NhVp6k4nyo3w+1XcX0fBlrEQltY0=
Subject key identifier: 82:1D:38:1F:E8:B9:0D:02:A8:DA:67:6E:79:41:F0:E1:06:C9:17:C5
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 019651FFE524B544A7AC2AE57DCC66B159BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 07:00:46 +0000
Manifest this update: Sun 20 Apr 2025 07:00:46 +0000
Manifest next update: Mon 21 Apr 2025 07:00:46 +0000
Files and hashes: 1: LllBFDs2gYBZI_Py2Vbfk71EYWc.roa (hash: jTm21xMBscMU1inWn9X97hwUinpmwWspFNpJiHwAkIk=)
2: wreINdEXrzvFl4TS78nixyXhWT4.roa (hash: BY0i1f9j/EXwIFUv/m6UVc3+37fV7YdiWDXciFmQ0+g=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: Y02nBR7i0rPbmBUCYuu1Lxk+vBHYvpi9q8poT/dEIZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:e5:24:b5:44:a7:ac:2a:e5:7d:cc:66:b1:59:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Apr 20 07:00:46 2025 GMT
Not After : Apr 21 07:00:46 2025 GMT
Subject: CN=821d381fe8b90d02a8da676e7941f0e106c917c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:9b:95:a4:d2:de:f3:48:c4:75:e5:2b:c1:
d8:aa:73:28:5c:a7:d3:30:2c:3b:01:cc:01:2e:2c:
82:f6:c5:0a:76:c6:75:08:0e:a1:9f:c6:f4:1f:97:
93:cf:08:fa:05:bd:e6:5e:ae:bc:6c:fa:0c:af:a1:
35:e3:8b:aa:df:16:0c:08:dd:de:a1:65:05:1c:78:
91:03:24:a8:21:e6:ae:5f:2b:10:00:4e:84:2c:89:
ac:d3:24:70:cd:f5:a7:99:bc:6c:3b:e2:e5:62:79:
4f:c7:cf:6c:9f:2a:84:e5:b5:26:0b:66:f2:82:54:
93:73:28:ee:57:cc:68:36:6d:f4:8e:9d:00:17:3d:
3a:37:43:1c:84:d6:20:8b:1e:c3:72:e2:32:81:59:
7d:6e:38:cd:e2:05:8c:9c:f7:3c:01:30:22:c7:6b:
25:b6:88:85:9f:93:a4:c6:1c:f4:6c:9e:de:e4:f4:
f1:3a:5c:22:6d:39:ca:4c:f9:e5:71:38:a2:be:7e:
66:17:bf:86:3f:c1:6f:83:ba:d4:bd:cc:df:93:34:
5d:4d:bc:e9:01:c2:01:2d:47:d8:29:16:16:c9:ef:
f7:0d:a7:f0:d6:cd:b2:d2:6a:0b:61:ac:3c:4d:f1:
88:ec:87:31:2a:34:ab:66:4f:19:e5:c7:11:0f:2e:
a3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1D:38:1F:E8:B9:0D:02:A8:DA:67:6E:79:41:F0:E1:06:C9:17:C5
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e2:9f:a4:9c:dc:6a:35:76:4d:c2:15:1d:d8:b3:5c:f3:bb:
dd:02:98:0b:ef:48:f1:4b:3c:73:dd:88:06:81:27:72:99:c0:
59:f1:d6:dd:1a:ff:fe:f7:32:47:8e:64:87:98:8b:07:3b:bd:
81:07:54:4a:0d:94:1b:c6:4f:e3:1c:ea:be:71:29:7a:0b:a1:
42:cd:d3:15:df:55:e3:a4:f7:6b:be:65:c0:83:f0:76:41:0e:
51:f2:76:d1:21:ce:d0:a1:14:6d:d1:f6:f7:8b:77:62:f0:60:
69:36:bf:67:48:97:67:95:2f:13:24:0c:08:19:61:9c:08:96:
2e:80:de:17:c0:1a:a7:11:a3:7b:a3:a4:8e:e8:01:f1:99:d1:
8c:fb:5a:59:6c:34:b2:38:61:26:29:6f:57:1d:9a:89:3b:84:
5c:23:0e:25:76:2e:5d:74:6b:72:57:a5:23:41:fd:4e:02:8b:
e0:c2:10:23:b7:41:24:c4:ba:3d:c3:3f:d3:26:b1:c1:7b:b7:
17:a4:99:0f:27:c0:42:25:a5:51:2b:82:10:6b:b5:e4:29:8e:
8d:fa:c6:57:32:48:51:f1:b3:9f:a2:d5:4e:a0:ac:2e:95:53:
e9:b9:4f:4f:ae:0b:8b:6d:9e:04:8f:a2:5c:b6:13:fe:72:16:
de:07:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:12:29 2025 by rpki-client