Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: n0uGpVtKYg18GpSkQSZMNb+KbDHK/w8aRnT/oYwCeOg=
Subject key identifier: F3:E4:C3:8B:24:59:59:BC:3B:09:45:A7:D1:8C:E4:84:BA:3F:5F:63
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 01958B4DCD254F02D85531565B32A976BD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 1426
Signing time: Wed 12 Mar 2025 17:01:26 +0000
Manifest this update: Wed 12 Mar 2025 17:01:26 +0000
Manifest next update: Thu 13 Mar 2025 17:01:26 +0000
Files and hashes: 1: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: EY/zSSP6XZwSwhjqn1E6S7aQr3Sh+uosmXAlRKkLoWQ=)
2: uWnagnV7ph6W305lDhQcUtu8iOA.roa (hash: O2rllaolJLmB6wHK4WL6QTUawzuqbXsQObcxgCsZ0L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:cd:25:4f:02:d8:55:31:56:5b:32:a9:76:bd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Mar 12 17:01:26 2025 GMT
Not After : Mar 13 17:01:26 2025 GMT
Subject: CN=f3e4c38b245959bc3b0945a7d18ce484ba3f5f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:08:a6:e3:db:32:05:ce:a0:d2:38:8e:da:f1:
c2:18:7f:ba:bd:25:9b:0e:c9:ee:5d:c1:6a:f0:25:
57:97:e2:22:d0:fc:3b:38:50:73:28:af:67:14:ae:
e5:7a:58:72:38:5a:fe:08:6f:49:08:a4:a4:e2:ab:
50:b5:4a:cc:e4:3d:03:4c:56:19:55:24:96:3e:0a:
27:e0:c7:59:6c:26:54:28:93:e0:f3:5a:0f:5b:dc:
01:cf:fe:31:96:9b:a5:89:31:ed:90:56:b1:14:7c:
82:83:9e:66:9a:6c:0a:77:00:e3:a3:7a:7e:7a:60:
3c:b0:44:c3:2d:0b:cf:b5:06:85:8f:38:34:72:ef:
02:8c:c7:d4:46:07:78:ac:3c:2b:97:a5:14:f9:5d:
5e:33:52:8c:33:2b:1b:77:1f:67:0d:99:c5:4e:05:
86:7a:b1:f3:03:33:61:a2:f8:23:66:48:21:3a:ae:
d4:3c:2b:39:e1:f0:87:9d:89:f0:ec:c1:c5:28:ea:
1e:ec:06:e6:5a:ac:d2:42:20:6c:af:f1:a8:76:e0:
25:e3:d4:97:4d:2a:3a:7e:eb:b2:bd:22:aa:82:6b:
10:18:08:6d:53:a4:b1:d2:04:f2:59:55:b3:da:92:
ee:59:9d:e8:c7:5b:4f:76:66:b4:77:8d:df:5e:ec:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E4:C3:8B:24:59:59:BC:3B:09:45:A7:D1:8C:E4:84:BA:3F:5F:63
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:43:c1:31:86:79:3a:da:8c:23:ad:e1:c0:27:c9:8b:0b:cc:
01:35:1e:7f:e3:1a:99:3c:7f:15:c5:9c:59:60:e5:23:e8:62:
c1:b3:71:dd:52:5d:b1:58:8d:29:82:2d:ea:8f:09:da:4a:45:
04:60:9e:d3:3b:90:8f:83:2d:e3:37:95:dd:25:1a:94:be:c6:
5b:4e:1a:64:7f:be:be:90:04:65:e9:f9:c1:5d:8b:76:b4:0f:
8c:9e:40:30:a2:69:91:9e:8f:cd:88:be:7e:15:44:25:dd:0c:
c7:5c:a8:46:26:f6:a2:05:78:04:3a:37:61:85:9f:51:03:ec:
65:25:b5:11:ad:12:16:91:92:04:70:7b:7b:f4:b6:6a:3c:58:
0c:c3:39:63:19:3d:1d:a4:50:1e:83:c7:af:fd:f0:ba:c5:e1:
16:8f:da:2d:a9:77:10:68:6c:4c:8d:18:09:ca:f8:90:db:6b:
13:68:38:f1:0b:cc:be:20:ce:fa:ae:6d:48:a3:dd:a5:c0:5a:
d8:e6:31:06:cd:35:16:92:ee:3a:83:9b:23:9c:02:39:0b:b6:
f0:fa:67:8b:92:a7:53:1f:25:07:98:54:c2:c7:b1:2c:d8:63:
4a:cd:d9:1c:4f:1c:a0:0b:a6:79:66:4f:ac:aa:f4:b0:b8:53:
96:2a:c5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:46 2025 by rpki-client