Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
File: xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft (raw, json)
Hash identifier: +n9zrAzzvv6XH1W5+fp4kwWZPWHLsuVVInkdtG+CVKE=
Subject key identifier: 84:DB:7D:BA:6F:51:8A:20:0E:AD:32:4F:8B:22:17:C0:27:72:C2:D6
Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
Certificate issuer: /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Certificate serial: 01958F610BAEF18CE856A04E70E84BB5BE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
Manifest number: 13EF
Signing time: Thu 13 Mar 2025 12:00:56 +0000
Manifest this update: Thu 13 Mar 2025 12:00:56 +0000
Manifest next update: Fri 14 Mar 2025 12:00:56 +0000
Files and hashes: 1: C3xZoR3LtseXs9YgZ15-hhPr18E.roa (hash: 1WbsEFbzKO5s8iSa/8CXV3aiHCeUKDOXCmds/8JgsxY=)
2: xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl (hash: FFBLeNDJHCHaZ8lcDQclEW+h36XgfUCnS1aQex/duNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:61:0b:ae:f1:8c:e8:56:a0:4e:70:e8:4b:b5:be:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Validity
Not Before: Mar 13 12:00:56 2025 GMT
Not After : Mar 14 12:00:56 2025 GMT
Subject: CN=84db7dba6f518a200ead324f8b2217c02772c2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:6d:36:81:cc:e5:f6:60:5c:31:ee:af:04:
16:77:94:4c:f0:28:dd:b8:d9:f7:8c:74:04:27:a2:
b2:36:a7:6d:ea:81:3a:4b:f0:36:b8:7a:8b:a2:81:
ff:44:08:fa:cf:5d:a7:40:5f:7d:48:c3:a4:7c:b3:
5e:41:47:61:28:34:da:5b:a7:b1:31:bc:15:60:52:
61:70:24:f7:ae:e1:5d:e2:5e:e3:96:1b:21:1e:c9:
37:c8:ab:6b:06:06:31:ab:40:cb:dd:fd:0d:d0:81:
d3:b4:08:72:9d:80:13:6f:fa:3c:75:4f:88:a6:7a:
8d:85:d6:1b:eb:3f:67:d0:38:fc:ba:7a:b2:1e:a8:
2e:a9:46:17:d5:8d:39:bd:30:4b:aa:65:46:68:da:
98:47:0e:2a:a1:1b:f9:3f:9c:e5:43:8a:3f:31:5a:
ac:3a:07:f3:4d:08:83:40:41:11:20:04:94:91:15:
92:a9:6c:2d:4f:e4:ae:c3:12:71:1f:75:9c:ea:06:
1d:39:92:66:6b:46:24:88:60:6c:93:e7:49:0c:cc:
7e:d6:1d:1a:3c:d9:25:7d:2c:e8:a2:b0:93:65:ec:
a6:d6:4c:18:36:fe:49:4f:5e:4a:2b:d4:38:b9:aa:
27:ec:a3:54:cd:d4:eb:b9:1b:f7:a3:10:25:a1:ae:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DB:7D:BA:6F:51:8A:20:0E:AD:32:4F:8B:22:17:C0:27:72:C2:D6
X509v3 Authority Key Identifier:
keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:68:99:d0:8d:20:ab:ca:46:4a:f5:18:0e:7f:10:ae:3a:d8:
58:d7:f4:d3:84:d5:a2:a3:f2:97:72:e1:cc:67:54:9a:49:9e:
ac:6f:37:58:de:a9:78:e6:6e:a2:6b:58:c8:4e:76:fa:49:ba:
53:f8:d6:34:ee:f7:ea:5c:7d:01:62:2f:3f:ec:b4:17:c7:2e:
cb:80:be:04:8d:b2:4b:09:da:9a:b3:89:52:68:28:ea:1c:2c:
39:4b:c6:fe:94:f2:1b:ed:e2:ed:72:4b:6e:fc:6e:d9:87:e7:
ae:92:7b:7b:9c:84:e8:12:d3:65:d0:29:a1:d8:01:c0:d2:8f:
da:59:13:03:14:c6:bd:7c:af:69:45:1b:6c:b9:bd:26:7f:7a:
fd:68:94:ec:21:63:a9:67:e2:7c:ec:58:f6:21:93:71:16:a7:
78:33:b3:a7:e5:6b:af:4d:dc:d5:d2:c2:04:cc:8f:11:c5:14:
d6:23:32:bb:dc:9b:7b:49:5d:2e:44:42:ae:67:f8:d6:de:11:
cf:28:29:45:9f:e5:18:b5:69:2b:39:81:3a:9e:72:aa:ca:c8:
f9:e2:bd:2e:d7:ce:e1:6d:41:7c:ef:f8:fe:30:f2:4b:c4:a4:
9a:76:d5:c0:42:c2:32:d1:46:7e:93:e3:da:e6:d1:c5:2d:e0:
3d:eb:79:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:17:03 2025 by rpki-client