Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft
File: XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft (raw, json)
Hash identifier: pjkrCqiAXS0P/IXNEM+kcjwOlMSFuKcsligEDVWh9K8=
Subject key identifier: 0A:73:6F:E9:11:7C:AA:6B:8B:94:A2:2E:EF:39:2D:2C:C9:5D:EB:D7
Authority key identifier: 5F:1A:A6:A9:29:31:BF:C7:E1:40:07:C4:7C:94:9C:D5:EE:3E:98:0F
Certificate issuer: /CN=5f1aa6a92931bfc7e14007c47c949cd5ee3e980f
Certificate serial: 01964CD93B36B8ED91AA9D68F1E714322AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxqmqSkxv8fhQAfEfJSc1e4-mA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft
Manifest number: 123A
Signing time: Sat 19 Apr 2025 07:00:26 +0000
Manifest this update: Sat 19 Apr 2025 07:00:26 +0000
Manifest next update: Sun 20 Apr 2025 07:00:26 +0000
Files and hashes: 1: 0vSFPoYxfJgGVZze9FXoh2RkpVA.roa (hash: ZmZ0S6349yqHsdfm9IChX49SmL/P7lxaKuGOii7tvuA=)
2: 9JM6FQ3JNcJAsurX_9l52alhS78.roa (hash: a7KiUg0rkGYES5Jq40C4im6HS+LxQ3+rKB9CYqBxCgY=)
3: XxqmqSkxv8fhQAfEfJSc1e4-mA8.crl (hash: 7jKFn0RYnemhpYfIc6EQC7OtZ28QU2OVl93QbZS6TnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxqmqSkxv8fhQAfEfJSc1e4-mA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:3b:36:b8:ed:91:aa:9d:68:f1:e7:14:32:2a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1aa6a92931bfc7e14007c47c949cd5ee3e980f
Validity
Not Before: Apr 19 07:00:26 2025 GMT
Not After : Apr 20 07:00:26 2025 GMT
Subject: CN=0a736fe9117caa6b8b94a22eef392d2cc95debd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:bd:59:ac:f2:07:dc:91:0f:0b:21:c9:34:
f9:7d:77:35:61:3e:97:96:8f:1e:84:8a:a4:55:fe:
2f:66:5d:b2:f3:dd:d7:4a:6b:87:30:34:07:a5:10:
c0:62:9f:09:53:07:c4:5e:ba:77:41:b3:ad:20:78:
4d:f8:a3:f8:8d:6f:a9:48:a4:25:30:34:49:ce:d9:
9c:c8:b0:75:b3:54:78:bf:39:0f:d8:0f:89:e3:b7:
ed:c4:00:ba:a8:d3:16:e5:a9:bd:f7:24:ea:46:78:
0a:3c:84:74:69:8a:25:ee:af:c4:41:f7:f7:1f:ff:
58:b3:cb:71:17:99:fe:68:3e:1a:8d:33:95:52:b8:
18:2a:67:5d:24:ad:6e:fc:07:ec:6b:7b:14:f0:9e:
a2:c4:92:d7:9f:70:6e:2f:32:d9:46:15:c8:72:b7:
cf:aa:2d:20:b7:ff:d3:16:74:76:5d:9f:d6:64:4a:
18:dd:f9:2f:fe:52:35:eb:3b:cf:98:13:bb:5d:c8:
7e:a6:97:26:7e:e9:ac:32:8d:e9:79:4d:53:3b:a8:
aa:96:b3:18:24:9c:d5:50:9d:b9:4f:50:b9:28:b4:
9a:ab:fe:cc:8f:4a:f2:e6:4b:36:68:21:0d:a5:f7:
34:5f:ab:e1:19:25:a3:d7:db:75:43:7c:51:0d:65:
dd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:73:6F:E9:11:7C:AA:6B:8B:94:A2:2E:EF:39:2D:2C:C9:5D:EB:D7
X509v3 Authority Key Identifier:
keyid:5F:1A:A6:A9:29:31:BF:C7:E1:40:07:C4:7C:94:9C:D5:EE:3E:98:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxqmqSkxv8fhQAfEfJSc1e4-mA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b3:eb:53:6f:2d:bd:ed:54:18:93:b4:64:cc:69:2f:25:e3:
f0:6e:e0:c9:68:fb:9b:64:d7:ac:1f:7d:34:c9:6a:59:d5:c8:
78:9e:da:b0:ba:e7:74:16:7e:24:db:21:1c:c9:7e:97:01:35:
65:74:2d:70:b7:75:3e:f3:29:30:31:35:79:ee:3c:8e:5a:93:
29:d0:b7:70:b5:b3:85:0a:32:0e:1e:18:66:07:9e:62:9b:95:
ca:6c:cc:11:b1:43:89:78:ac:1d:fc:74:cf:13:9f:b4:27:c2:
0a:22:71:af:e7:ff:17:7a:41:95:0d:13:0a:37:d7:99:a6:22:
3b:c0:60:ac:0d:32:a1:36:27:d5:98:6d:31:25:62:f2:fe:20:
f0:e2:92:8f:6f:91:4d:e4:72:35:53:a7:06:33:27:63:df:1e:
5e:88:9c:51:a1:89:bb:b8:39:aa:8c:36:50:37:5f:cf:36:6d:
49:b3:cd:f0:61:dc:fa:38:49:6d:75:25:4b:9b:9e:b5:62:3c:
f7:01:5e:7f:ec:af:23:72:59:77:e1:f8:cf:eb:97:10:a7:16:
c9:a6:fb:25:d2:13:f7:30:72:5f:8a:b2:57:5d:1a:b5:b4:f1:
d2:d7:c9:89:1a:62:01:f2:2b:c0:df:2a:54:ff:78:66:69:fe:
13:4b:d3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:02:00 2025 by rpki-client