Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
File: x2oNsIMDONLSlh5Mj_sKtaA__l8.mft (raw, json)
Hash identifier: VDCCstnMalmjvOrLUKPCuDOtXFMQOTP8AcVZ+cFrR2c=
Subject key identifier: 1B:1D:54:E7:ED:EB:A4:4A:37:7F:16:E9:7B:7B:06:C2:AC:46:6A:E1
Authority key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Certificate issuer: /CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Certificate serial: 01965492A137588901CB24B80AEBB0632651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
Manifest number: 0F89
Signing time: Sun 20 Apr 2025 19:00:17 +0000
Manifest this update: Sun 20 Apr 2025 19:00:17 +0000
Manifest next update: Mon 21 Apr 2025 19:00:17 +0000
Files and hashes: 1: Ff3N8PO1mcQncsXGHiQUjQO2nRw.roa (hash: iiJaJiMdSghzZUoCo21ZColIpsI+U3kb/p0Er1rgouw=)
2: x2oNsIMDONLSlh5Mj_sKtaA__l8.crl (hash: bBNqmI/qjGddAPy7quRhkKUELZ9jrz/TIFiP3wFP+9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:a1:37:58:89:01:cb:24:b8:0a:eb:b0:63:26:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Validity
Not Before: Apr 20 19:00:17 2025 GMT
Not After : Apr 21 19:00:17 2025 GMT
Subject: CN=1b1d54e7edeba44a377f16e97b7b06c2ac466ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:af:60:30:6c:0d:fa:dc:28:f3:e7:35:66:
a0:1b:67:9f:43:5f:5a:69:16:ac:3f:e4:60:a5:e1:
f8:7d:c3:46:8a:39:76:c3:d6:ef:a1:2f:68:14:6c:
5b:77:58:4a:15:b1:df:2d:6a:55:29:03:da:72:6d:
b6:6c:7f:e3:a8:6d:87:bd:b9:d7:9e:df:2e:e9:35:
96:e6:1d:4b:4d:7f:7b:3c:6d:ba:86:7b:c9:aa:1f:
b5:bf:48:07:76:24:00:31:1a:12:f5:90:ea:34:cc:
d6:d7:08:02:b9:d3:69:b5:83:d9:6a:1a:a1:c8:0a:
89:85:90:6a:60:6c:ea:8b:d7:e9:63:6e:01:80:69:
c5:d3:50:66:1f:a0:ad:bb:4a:f6:50:e7:ed:c3:21:
47:e1:aa:6e:8b:ae:10:67:3f:db:a0:89:0f:a0:42:
91:d1:f2:d7:3c:ae:35:a1:c7:0c:00:06:cb:2d:2b:
9c:ab:83:04:04:7d:19:74:16:39:77:05:5e:4f:ea:
c5:c4:fd:66:d7:0f:1c:40:0a:22:5e:14:57:7f:fa:
ad:dd:c8:71:59:58:47:56:d1:32:06:f1:a1:e7:19:
e4:81:88:8c:ad:07:f0:1b:9c:72:26:87:84:af:47:
1f:81:a6:0c:cf:4a:29:c4:65:e5:a6:bd:80:47:86:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1D:54:E7:ED:EB:A4:4A:37:7F:16:E9:7B:7B:06:C2:AC:46:6A:E1
X509v3 Authority Key Identifier:
keyid:C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d8:45:c3:7b:49:67:37:8c:9b:33:4c:49:e9:de:20:9d:87:
84:9a:9b:71:38:07:62:7e:a3:91:af:26:0b:ae:be:4a:64:61:
63:dc:8a:d0:4f:5e:15:52:f1:f8:9c:3e:a9:71:d9:84:d4:0b:
38:31:4f:4a:c3:69:58:26:b4:d6:8c:bb:d1:97:6c:c8:34:26:
84:e3:68:2e:dc:2c:06:0c:4f:9e:46:5a:36:18:92:53:3e:71:
8c:7d:e2:89:a5:ea:2c:cd:4d:c5:d9:b4:75:07:a3:25:0a:35:
4e:1f:fe:49:00:d7:1d:6f:01:6e:95:96:ae:0c:d9:33:19:81:
ea:ec:fb:fa:7c:f8:4d:9f:68:7a:8a:30:10:16:30:9f:2c:cb:
eb:3f:1d:d6:1e:76:29:a6:10:22:5b:95:b9:0c:85:cf:11:ee:
3a:76:e7:a0:03:74:e8:5f:c8:32:36:23:c1:b9:a6:1b:48:50:
66:a3:ef:5d:4b:9d:c5:eb:5c:47:64:c2:4a:11:01:2c:a3:ea:
78:1a:43:1a:1b:73:4b:d4:8b:88:32:98:07:dc:9a:5a:8f:64:
67:86:68:38:d8:51:46:47:f6:6f:37:2a:94:e4:54:58:6a:f2:
ff:83:7f:2a:70:d1:da:e6:66:42:c6:fc:5d:ce:66:b1:b1:e3:
50:b1:83:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:34:07 2025 by rpki-client