Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: QXfmc7ne3vC1tu42NrmUS00hj3N8ceoxvMmQrPBZJaw=
Subject key identifier: 00:5C:C6:C4:54:7F:C9:00:5D:7E:0F:DB:80:6A:CD:06:97:0F:FE:8F
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 0196458DE3754A362319541A680261531195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 13D2
Signing time: Thu 17 Apr 2025 21:00:48 +0000
Manifest this update: Thu 17 Apr 2025 21:00:48 +0000
Manifest next update: Fri 18 Apr 2025 21:00:48 +0000
Files and hashes: 1: JsiUY4utQyGLQkMCxP2vm1DnYkM.roa (hash: t9dxvm0FP5XnZVQ8+CoMdOpLdpUdElKJXDgxciqeHNU=)
2: VS0vQXyTV30uKtTHz_uaATpRmNI.roa (hash: bd6zfzzABUQlbCGm2yH6xBJFNFWYvrN9JXn/fjw4bhU=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: sOU3+jGGDheBmb6Co1MCG9sIsW4zKpTiAyZeM4GaBgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:e3:75:4a:36:23:19:54:1a:68:02:61:53:11:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: Apr 17 21:00:48 2025 GMT
Not After : Apr 18 21:00:48 2025 GMT
Subject: CN=005cc6c4547fc9005d7e0fdb806acd06970ffe8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:68:db:a4:17:fe:0b:7a:01:1d:3d:ef:f5:
fb:d5:d6:14:02:31:eb:1f:28:79:72:a9:11:01:08:
58:45:07:f7:19:e3:21:8f:99:87:dd:a5:a7:97:53:
95:78:e2:01:09:fd:1b:ab:56:ae:a6:cf:77:27:a1:
bb:d9:c3:75:62:31:b4:15:aa:f7:14:58:29:3e:6d:
4b:20:56:63:38:2c:90:75:76:17:d2:a0:0c:68:57:
67:6a:7a:62:b3:03:6b:00:10:0e:4b:17:e6:7f:2c:
a1:7e:e5:00:ba:5a:8d:e1:f7:e8:9e:f2:a0:f4:c7:
96:09:10:32:7f:9a:57:49:db:ae:75:8b:c1:70:7b:
f2:e8:19:a5:e1:0e:44:8d:02:c9:3c:6c:0c:4a:a8:
b2:cc:5d:6b:82:59:10:3a:cf:de:4a:fb:11:0c:ae:
b1:69:6a:b1:53:49:a1:b8:46:91:69:07:6c:40:a7:
4b:36:4d:33:2a:f1:03:56:31:8b:87:66:75:88:b6:
2d:68:6e:42:0d:1b:0d:5b:18:d3:44:9c:80:d8:e8:
b1:2a:93:80:b5:7e:9b:12:85:a1:82:5a:b7:70:fe:
a9:f6:98:e2:06:6b:21:f2:cb:16:00:ae:74:be:7e:
a3:96:83:db:5d:c6:a6:d8:78:fa:45:49:33:80:b6:
96:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5C:C6:C4:54:7F:C9:00:5D:7E:0F:DB:80:6A:CD:06:97:0F:FE:8F
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:71:b4:2d:b9:a7:1f:33:35:80:0f:81:5a:01:80:b8:d5:d6:
38:08:66:4b:7d:ef:2c:ac:cf:67:f4:25:00:2f:73:be:08:4f:
eb:f7:84:9d:26:85:cc:fa:bd:46:7e:32:30:08:7a:dd:4c:32:
96:d9:d3:95:af:a4:58:42:21:f3:e4:47:ad:47:81:f6:eb:f4:
5c:d9:89:30:1c:6b:e6:eb:f5:e0:00:05:22:9a:f5:8b:8a:a0:
2d:7d:46:88:31:aa:f0:d9:91:74:64:ad:9e:ae:fd:7e:da:8f:
83:7c:ef:91:54:ab:d1:dd:52:83:27:a3:7d:58:2f:00:c1:71:
88:ef:f7:7f:e3:58:e9:82:67:5a:34:af:1c:e9:69:04:ff:af:
23:5d:04:13:d6:ea:3a:2a:33:79:c3:b4:50:bc:ca:96:11:63:
e5:53:ef:4d:39:db:4a:97:42:67:a1:4e:c8:13:56:bc:8b:66:
b8:33:13:42:98:94:68:ef:3e:83:13:8c:03:3a:99:6d:98:05:
7f:69:dc:36:92:29:51:f6:3c:20:ee:2c:71:22:74:4f:75:36:
3a:1d:12:d9:b4:15:72:15:75:91:d4:f6:39:98:7d:c3:9c:f7:
8e:2d:f2:f8:0c:54:9f:78:23:c1:1a:9c:a9:2f:b1:37:2a:33:
ed:84:aa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:35:28 2025 by rpki-client