Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
File: pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft (raw, json)
Hash identifier: qvMBeJx3kymptixiNOGyZp0eL86pVzl72UoE/XPEij4=
Subject key identifier: C1:6B:47:70:70:52:4B:C6:99:A1:2F:A5:7A:70:32:7C:88:A7:6D:DE
Authority key identifier: A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
Certificate issuer: /CN=a57089c45c55088fe90eb61002f07f0f95862672
Certificate serial: 0196515A97F3900BFFF3490D64F4B7725068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 04:00:13 +0000
Manifest this update: Sun 20 Apr 2025 04:00:13 +0000
Manifest next update: Mon 21 Apr 2025 04:00:13 +0000
Files and hashes: 1: GKayJjEpupDXezS7bWkDTRh1Jmw.roa (hash: eS8ptq1DKXKa+SvWnQjPvtWlOO+ME6pmCZKUb+C3VCo=)
2: pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl (hash: x53oQg3Rw4CJ9RtqvtWcvqjysgo/AG/gE0YLAuOj5iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:97:f3:90:0b:ff:f3:49:0d:64:f4:b7:72:50:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57089c45c55088fe90eb61002f07f0f95862672
Validity
Not Before: Apr 20 04:00:13 2025 GMT
Not After : Apr 21 04:00:13 2025 GMT
Subject: CN=c16b477070524bc699a12fa57a70327c88a76dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:41:86:0b:07:cc:ad:84:19:65:3e:bc:07:55:
0d:b4:9c:1f:86:e8:21:55:7f:84:11:c6:6a:32:1f:
1d:2b:3a:47:13:d8:6e:6f:49:50:52:67:3c:40:7e:
e1:b9:7e:c1:fd:f4:88:cd:2d:2f:0d:8b:92:4b:e4:
3a:d4:7e:1f:8d:23:61:a0:bb:10:3c:97:12:9d:b7:
ae:2b:a3:c4:29:ba:63:53:3d:4c:7c:ad:94:f7:ab:
18:22:21:77:55:8f:2f:b7:0a:0e:dc:43:76:de:de:
ff:b1:2f:1b:87:65:28:0e:a1:37:49:55:e8:42:55:
31:28:03:c5:5e:d8:10:86:89:61:1b:c9:c9:e8:3c:
1b:c2:29:f7:c7:9c:3d:18:95:b9:7e:a9:00:c5:16:
37:9f:6f:81:47:28:99:60:64:00:76:9d:51:d1:81:
7f:f2:34:25:ae:89:7a:f9:5d:1d:c0:09:fb:83:57:
77:2d:1c:ea:39:3b:3c:70:80:ae:ba:5e:f8:0d:69:
e8:95:e2:c6:05:48:5b:87:ec:06:9a:6f:48:90:dc:
3f:db:87:cc:5a:0c:fb:20:76:3b:e0:6a:cc:5f:8d:
03:c6:ae:4a:7b:71:21:cb:56:cd:58:1b:fb:bb:15:
e4:69:7d:80:e2:f2:9f:56:ff:72:91:2c:33:e7:15:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6B:47:70:70:52:4B:C6:99:A1:2F:A5:7A:70:32:7C:88:A7:6D:DE
X509v3 Authority Key Identifier:
keyid:A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:27:ef:5d:50:cf:78:5c:07:98:b9:51:18:1f:7e:2a:4c:8b:
1d:8e:2d:6d:c5:dc:e5:b7:e8:c5:5a:cb:35:54:2c:a9:f2:09:
c0:69:76:e5:43:6d:0b:e4:a1:ea:70:2e:7e:9e:1d:91:8b:27:
32:8f:ec:db:eb:d9:a9:3b:3c:db:65:13:77:96:24:a4:69:6d:
d8:d4:dd:a1:df:02:2d:b9:f9:16:fd:de:44:18:23:92:1c:92:
1f:8b:0b:07:48:2e:56:45:8f:19:9e:96:e3:ce:8a:68:80:41:
3f:40:43:83:54:a0:f6:b0:c8:fd:f9:da:01:24:1f:10:c4:85:
af:09:f3:11:68:2c:4e:60:b0:20:bd:af:9a:31:4d:bb:33:22:
c0:95:ae:7c:49:8e:b6:87:9c:0b:4b:26:0c:b9:f6:4b:85:23:
27:7f:a2:eb:6b:e3:88:ee:90:ec:15:29:81:47:51:a7:8c:e7:
de:13:b5:d2:82:2d:80:08:a9:a0:f3:0e:eb:e8:c1:c1:d2:5c:
ec:1d:56:3d:24:48:fd:f3:ee:08:e3:71:71:e5:5c:7e:2c:cc:
8e:e8:08:ea:26:82:0e:88:c4:72:d7:b5:5c:38:a8:df:ed:d2:
18:4b:7e:29:9e:e6:87:e9:2d:24:19:c9:6f:20:00:37:18:c0:
d7:b8:d9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:26 2025 by rpki-client