Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
File: XYqf18UZJuIuqKozs7iDjpPovt0.mft (raw, json)
Hash identifier: oWHoXQTg38ejpMZ4O11JDR/IBobRU8yygiMKCxGsBds=
Subject key identifier: 38:F1:24:70:93:38:B8:EC:D4:4D:62:28:E1:9C:7D:7D:DB:18:7D:DD
Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
Certificate issuer: /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Certificate serial: 019649A181DCE341ED66211D85F7D4D67293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
Manifest number: 14FA
Signing time: Fri 18 Apr 2025 16:00:43 +0000
Manifest this update: Fri 18 Apr 2025 16:00:43 +0000
Manifest next update: Sat 19 Apr 2025 16:00:43 +0000
Files and hashes: 1: 0RjgNRg0mrp-p0sUPcMzw9plAa8.roa (hash: /sIoNqXyJWt95PHx7AGb8pmEwy8qEaDKsd4+c9cdNhU=)
2: ByhvC5UK-f2zjyXJoOZ55QYyoFY.roa (hash: 7F3UrolhPGtbR/fySIsaZ7YzGq6FNxf2q9uu01GI6C0=)
3: DyR2WdJX7ABSVFzMG--Y2Rw480o.roa (hash: +lC9V9G29eZ0ubABsOu96g/K8AVuHJSib8VHpmomp9Q=)
4: HO-WF7oHezpfwwV3wUG7AErtTlE.roa (hash: 8SO7ZYvzAB17ADVUPvCZiM0fv0nIROPrrAJMFayW82A=)
5: XYqf18UZJuIuqKozs7iDjpPovt0.crl (hash: BlYQ4U+SsSE8evsOi1e+4IpNbLZXIUxZWMS7pE/L028=)
6: xZlrXqE8pd9RbauBbqs28LHvRHA.roa (hash: 2cai0/ZfgqLeuQF0rbi62rT8qPeDCMYpSTam6ord1Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a1:81:dc:e3:41:ed:66:21:1d:85:f7:d4:d6:72:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Validity
Not Before: Apr 18 16:00:43 2025 GMT
Not After : Apr 19 16:00:43 2025 GMT
Subject: CN=38f124709338b8ecd44d6228e19c7d7ddb187ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:e0:e8:82:b7:ec:c3:eb:ce:ca:ef:c7:a6:
ec:6e:b6:e0:53:87:92:df:a9:02:9e:54:6d:ca:f3:
71:c0:a6:08:33:0d:f8:83:2d:c4:a7:05:d0:56:09:
1b:a7:0e:e0:03:85:0a:df:d6:b6:a5:c4:b5:cc:ef:
a4:f5:d8:2f:55:fe:97:1a:fb:14:71:8e:0e:b5:d5:
a4:1e:62:bd:b0:1e:bb:ea:8d:d1:a5:66:cf:e5:9c:
26:10:ac:07:7d:1e:e1:d9:17:a4:de:95:41:65:23:
06:56:ff:04:43:8f:8d:a5:e6:e6:4c:fa:9e:b8:16:
cc:b3:ea:00:89:c7:6d:1d:e8:64:ab:e1:9a:08:be:
db:c8:49:ad:95:6d:40:d4:f5:6f:80:04:b6:e9:0d:
bd:4c:60:e3:26:4e:14:a7:bb:39:6d:f1:a0:9b:64:
55:df:f8:1b:b6:b5:ac:63:da:3a:6c:6a:67:df:ae:
23:b1:5d:b2:73:c7:e6:4f:b7:29:7f:b4:5f:50:eb:
b0:cd:60:64:de:2b:e3:4e:af:2d:7b:06:9b:fa:c7:
80:a7:1a:41:c1:b6:59:4a:bd:13:49:9d:02:b0:aa:
52:fc:b6:ea:ed:c6:a6:e3:fe:ed:19:b8:7f:57:96:
5f:ab:58:d6:28:65:90:1b:f7:eb:34:61:a0:bb:ee:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F1:24:70:93:38:B8:EC:D4:4D:62:28:E1:9C:7D:7D:DB:18:7D:DD
X509v3 Authority Key Identifier:
keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:83:41:19:e2:3b:c5:06:cd:97:f6:bd:a4:87:3d:dc:9a:96:
96:2d:55:7d:b1:0c:30:4f:66:c3:6d:fc:1a:53:c2:d5:8d:dd:
0b:cb:e8:6c:70:8e:81:eb:fd:25:e7:5b:a6:0d:7b:d3:4e:49:
17:08:a3:ab:e5:8b:7c:63:45:f3:fa:a9:44:3b:c0:56:a6:5a:
b0:fe:0a:1d:70:de:53:ff:e6:5f:1d:d6:34:14:b2:f1:4a:32:
9e:75:01:3e:11:58:16:c5:8d:ac:43:91:c8:47:bb:61:83:45:
ab:75:b2:2b:2d:8e:d6:4d:01:ab:88:d0:67:82:e7:bf:80:f1:
c8:b4:4d:7e:a3:f2:7d:bc:1d:55:b0:bf:34:f0:63:fd:08:9f:
a9:8b:42:c9:16:49:92:2d:e2:53:a7:da:f3:bd:03:3d:c6:ec:
3f:25:b0:c9:d0:ab:9a:db:00:6b:3f:0e:f0:70:00:e8:38:a0:
c2:c9:7e:a6:66:5f:61:75:c4:80:bf:80:9d:cb:e4:c9:67:0b:
99:33:95:2e:c0:8d:20:81:81:9d:5d:5c:62:db:83:aa:92:e2:
4c:71:c4:14:2e:a6:73:e5:41:ca:8a:2e:ba:80:44:8b:ff:1a:
c3:97:f6:c1:ac:d9:cf:7b:47:94:a9:9c:97:ff:4c:76:83:2d:
de:9f:21:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:10:50 2025 by rpki-client