Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
File: cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft (raw, json)
Hash identifier: FsaRCmgLTvA9txUcmA2rWyOzxCGK8Zy1pTkaS2d9VoM=
Subject key identifier: BD:9F:61:DA:22:2C:72:56:90:34:B1:A9:90:5B:1B:08:EB:56:61:1A
Authority key identifier: 73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1
Certificate issuer: /CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
Certificate serial: 019655A5AFD924349C0E7CD561D3BC198706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 00:00:43 +0000
Manifest this update: Mon 21 Apr 2025 00:00:43 +0000
Manifest next update: Tue 22 Apr 2025 00:00:43 +0000
Files and hashes: 1: 5j4kigVKwcUINFkbJ3xSgMqflUw.roa (hash: kVxN2YetN80jXaobnulfC7lyMJ7WxoaWB7joRYX4FHo=)
2: cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl (hash: hBya2etcU+B5DvWx9jJc5b3OlheGIXWArT0bkDggJ/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:af:d9:24:34:9c:0e:7c:d5:61:d3:bc:19:87:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
Validity
Not Before: Apr 21 00:00:43 2025 GMT
Not After : Apr 22 00:00:43 2025 GMT
Subject: CN=bd9f61da222c72569034b1a9905b1b08eb56611a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:cb:3a:c3:c7:02:a5:7d:8b:91:12:a8:c2:
98:5f:4d:b0:0a:5b:23:43:8e:bd:ef:0f:09:f0:4b:
1f:28:73:b3:c9:1e:1d:4b:bf:90:56:91:d6:df:32:
3f:80:a5:51:c4:7b:6c:72:3e:12:12:19:41:52:c3:
01:ff:d7:2a:82:7e:87:48:d2:1c:5a:8e:ee:ea:62:
0f:eb:72:e8:a8:fa:1e:9b:6f:06:c4:a4:3e:af:7d:
c5:9a:fa:7c:5f:dc:98:5a:99:c9:57:56:a1:58:83:
d4:15:23:02:86:ee:22:c5:26:2c:f0:32:53:fd:9c:
d5:c9:3b:d9:a7:f3:ac:ab:0c:4c:36:16:12:51:73:
db:f4:a1:2e:65:e8:78:4f:af:65:dd:9a:3c:79:4c:
95:6b:49:55:67:45:a6:60:fc:21:e5:fd:30:9c:44:
aa:63:50:46:e0:48:f0:e4:96:ab:4c:7c:1b:19:0e:
1a:9b:8e:45:b1:bf:c1:8e:bb:ad:2d:08:62:ff:f8:
d8:0a:75:8f:6b:bb:f3:00:0c:5b:1f:45:03:c8:10:
65:d5:15:c3:86:ee:33:b1:01:95:f4:85:7b:ae:ed:
cd:87:aa:55:04:ce:68:22:da:01:51:ce:f6:fd:a9:
72:c7:1a:96:cd:33:b1:2f:ba:7d:77:eb:6a:84:22:
9e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9F:61:DA:22:2C:72:56:90:34:B1:A9:90:5B:1B:08:EB:56:61:1A
X509v3 Authority Key Identifier:
keyid:73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:70:d7:0a:29:99:76:12:41:9b:05:d1:c6:c2:55:2e:d1:f9:
86:a3:27:ec:69:0a:78:6b:78:aa:08:99:9a:c0:d3:75:74:28:
a2:c4:a0:f9:dc:e1:ed:f2:72:c8:c4:4f:ea:cb:9e:35:bb:17:
ed:31:da:26:d3:80:96:0f:c5:9b:f4:d0:c7:1e:25:d0:e7:1f:
aa:a7:d6:5d:94:c8:f5:fb:97:ae:e7:c0:9d:f5:c9:c1:43:b0:
9e:2d:e4:09:12:2f:17:d3:89:3d:5b:fe:88:ce:6a:37:21:ae:
68:ea:71:21:61:ea:07:2f:83:d6:2e:8b:f2:9c:52:52:bf:49:
96:0c:5e:4c:dc:a3:40:8e:e8:72:2f:d6:be:a3:57:09:f8:dd:
36:4d:9b:b6:72:f8:3b:4d:72:94:bf:1c:ed:1f:4d:15:71:23:
7e:9e:be:42:51:68:5e:49:da:ad:70:e6:e3:fa:36:7a:a9:17:
e0:3f:2b:07:05:7b:81:ed:fb:3b:c9:e5:23:e7:40:8b:8a:8a:
ca:a8:79:92:70:38:85:a1:f1:22:5f:8f:9a:20:72:2b:52:c0:
d8:2c:65:72:16:77:87:01:4b:a1:d9:2e:80:0a:b9:a1:f5:3a:
aa:8e:f8:9f:e1:3e:25:aa:f3:ad:2f:7f:b9:07:a8:7f:a4:25:
0c:c4:ac:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:06 2025 by rpki-client