Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
File: _X0csRSU6ziY8Q09Y1vnXxay3FE.mft (raw, json)
Hash identifier: pQT18i59dkYASkRfOHqjdS2PrAxCeSyIH9YvCUwpnO8=
Subject key identifier: A5:5C:C3:24:B7:3F:79:3D:5F:D9:64:FE:93:38:D8:D1:F7:D3:4D:0C
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Certificate issuer: /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial: 01963763DF7107C9B68AE757991FBA19C886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
Manifest number: 0B32
Signing time: Tue 15 Apr 2025 03:00:13 +0000
Manifest this update: Tue 15 Apr 2025 03:00:13 +0000
Manifest next update: Wed 16 Apr 2025 03:00:13 +0000
Files and hashes: 1: EryZGhKHOKFejsNYtsHoCrBOwlI.roa (hash: XPrcWsidSTpQokDPJh6WTZK3lvnDmP0xxlT9T9iBNGQ=)
2: Q8FRv-AW6LCPe-NhY9NXN5LnC4o.roa (hash: N2JyPxT8+m5HQDRPSXJdJM2oBFZFnSgrTMkI9DghAaA=)
3: _X0csRSU6ziY8Q09Y1vnXxay3FE.crl (hash: xVtztqiudpET3tHaGePkhbdD7acJtkjKPIv0OL7ACXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 03:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:63:df:71:07:c9:b6:8a:e7:57:99:1f:ba:19:c8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Validity
Not Before: Apr 15 03:00:13 2025 GMT
Not After : Apr 16 03:00:13 2025 GMT
Subject: CN=a55cc324b73f793d5fd964fe9338d8d1f7d34d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:47:0f:ed:76:3c:53:8f:96:7f:e5:09:21:
18:c4:e8:c5:9d:10:4b:83:af:b6:bb:87:9f:fc:19:
c5:bb:75:7c:4d:b8:50:13:0b:64:61:76:f4:83:18:
30:7f:7b:d9:30:d8:9d:28:c8:ed:95:e5:e2:49:81:
87:5f:27:73:17:88:cb:d7:7c:3b:3d:1f:76:1d:dc:
33:c9:85:32:e6:55:fd:29:e8:a8:d0:80:29:15:ae:
f6:6e:ef:39:a0:e4:49:f6:42:1f:86:8d:6b:60:44:
86:ed:c6:28:8a:6e:cc:47:a9:2f:41:c2:d6:3e:af:
9e:e2:73:6c:42:8b:a9:c5:1e:d0:24:86:48:eb:05:
34:cb:44:c8:79:95:3f:81:e7:9b:35:f7:b4:a7:2d:
13:1b:74:8b:52:4c:95:8c:3e:e3:b7:9b:21:34:ee:
16:b7:d5:29:01:7e:db:21:35:53:81:c6:77:52:25:
93:34:61:61:33:54:66:41:5c:a8:9f:dd:7f:03:16:
fd:a6:9b:15:35:d3:cc:45:e5:bd:ae:40:7c:23:49:
a1:94:4a:46:70:40:93:64:cf:4a:0e:2e:d4:34:3d:
17:52:7a:17:68:04:b2:5d:fc:d3:f8:39:1d:c6:af:
ea:8a:b5:64:c8:c1:c5:e6:3e:88:d3:4a:49:ab:3e:
fe:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5C:C3:24:B7:3F:79:3D:5F:D9:64:FE:93:38:D8:D1:F7:D3:4D:0C
X509v3 Authority Key Identifier:
keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:03:c7:8e:87:b1:9f:97:33:1f:df:f0:a9:af:55:65:74:74:
f2:8f:08:b1:c0:4e:eb:bd:c4:52:e6:18:0f:b8:c5:41:c3:3f:
ff:55:18:71:60:1b:ca:03:b2:17:39:9f:fe:3e:73:e2:0a:51:
41:cd:e4:23:7c:80:44:de:7b:18:7b:4f:6b:5d:4a:e5:a8:8b:
09:49:09:55:bd:aa:ed:a0:39:5a:58:b7:27:80:06:d3:3c:fb:
a8:ad:33:71:40:94:75:fe:4e:49:1f:0a:f0:cf:4e:7b:1d:3a:
b7:38:f1:c4:3f:cc:2d:af:46:12:91:3f:31:f1:07:31:da:f6:
73:4b:96:5d:71:3a:5e:19:6b:62:0f:58:87:70:d8:f8:20:9e:
b9:cb:6d:30:44:c4:5e:e4:53:f6:bd:98:14:2d:e2:3f:f5:5b:
00:13:ed:c7:6c:75:20:06:c7:6e:2e:3e:41:e5:e1:ad:b8:fb:
17:28:7e:2a:9d:7b:61:0e:26:30:2a:c2:7c:f5:3b:9b:5f:23:
21:b1:bb:e8:78:cf:43:35:62:41:08:e5:22:f3:bd:04:b8:9e:
f6:b1:84:e4:4e:e8:07:a1:91:71:3b:80:04:b5:a8:63:aa:70:
2b:38:b1:f8:58:f2:5e:84:cd:5e:3c:f0:3b:48:84:f9:cd:54:
bc:56:60:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:43:50 2025 by rpki-client