Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
File: xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft (raw, json)
Hash identifier: MqMm3RM4LSKvQFA8GeTPceqCUKJ7uT6fsICz5JcCqLQ=
Subject key identifier: 63:F8:80:01:78:1C:E6:3E:74:FC:EF:21:CF:AE:69:CA:95:21:D9:35
Authority key identifier: C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
Certificate issuer: /CN=c59c41daf0092b703bc059ba1353f071ed12199b
Certificate serial: 0196146B2A058186D758EE72E1057606BC30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
Manifest number: 146F
Signing time: Tue 08 Apr 2025 08:01:29 +0000
Manifest this update: Tue 08 Apr 2025 08:01:29 +0000
Manifest next update: Wed 09 Apr 2025 08:01:29 +0000
Files and hashes: 1: cGueQe1h8duehogXBQfbjMf187c.roa (hash: SeygR9MEl7TBvHViQ7GiY7qErcMbLwgXcJ9lbMPWx3c=)
2: xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl (hash: 7wE2wLhTucWg4knoyFtbeWN2XoO8v5hkNvb37wtiGhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:6b:2a:05:81:86:d7:58:ee:72:e1:05:76:06:bc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59c41daf0092b703bc059ba1353f071ed12199b
Validity
Not Before: Apr 8 08:01:29 2025 GMT
Not After : Apr 9 08:01:29 2025 GMT
Subject: CN=63f88001781ce63e74fcef21cfae69ca9521d935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:c8:5b:32:ba:58:ee:c5:82:6c:57:0a:ba:
48:ca:1f:2e:d1:df:63:1a:aa:da:61:d3:ee:77:c9:
ea:10:85:b0:15:81:63:21:93:d4:4d:37:6a:4d:e5:
9c:f8:4c:98:3a:7e:92:96:52:c5:e7:a5:e5:f3:2a:
3a:7f:f9:20:ff:5d:59:c5:80:42:4c:55:cd:9d:2c:
e0:ff:9b:a9:7c:0b:99:f6:78:1f:bc:e4:99:93:fe:
86:3b:ce:ee:d7:68:7d:67:4d:83:a7:41:3d:76:09:
73:18:32:2f:a0:83:78:c9:f2:99:93:54:93:6d:bf:
11:7f:6b:69:56:1f:b6:2e:17:d3:90:8e:d8:9b:30:
e2:9a:e2:b8:c6:98:df:7b:57:84:b9:60:68:dc:43:
03:5f:4c:e9:4b:df:fe:13:c9:f1:5d:33:c7:8d:ac:
10:c0:2c:23:36:f5:2b:3c:cc:d0:14:c0:69:01:79:
c2:8d:67:0b:bc:5a:8e:79:ab:3a:c0:a6:46:77:fe:
04:59:36:ba:8e:6a:1e:e3:b7:0a:d1:5e:36:27:2b:
09:08:86:8a:fc:f1:1c:fa:c1:06:7e:45:e8:9c:f9:
08:ff:66:9c:c1:10:9f:de:96:23:50:7a:1d:9b:8f:
21:0b:94:d8:b4:0a:f4:62:57:6e:82:68:dd:05:d3:
b9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F8:80:01:78:1C:E6:3E:74:FC:EF:21:CF:AE:69:CA:95:21:D9:35
X509v3 Authority Key Identifier:
keyid:C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d4:2c:82:e4:f0:3b:9a:93:a7:af:b9:e2:e0:2e:89:25:64:
29:96:ff:f2:9a:c9:a9:83:8f:a1:70:1b:83:e2:83:b6:2e:dd:
f2:b3:74:d5:67:e1:19:2e:10:35:4c:6f:b2:44:8f:81:d1:3c:
0b:da:e1:8b:33:41:71:a5:f6:50:b9:7f:bf:1b:43:36:f6:8d:
05:48:d4:19:84:25:78:71:67:a4:fd:29:ad:ec:d5:3a:28:30:
60:ee:90:b3:10:99:34:5a:81:f6:c2:1a:ad:b4:1f:f9:96:2d:
e6:ff:10:6a:26:58:bb:cd:5f:01:f0:ca:a3:14:f0:a4:25:68:
9e:e9:25:69:16:96:ef:dc:e6:2b:11:50:d1:bd:83:75:a0:58:
1b:e8:42:06:e8:ab:c8:5b:7f:9d:f3:ed:9e:22:65:0f:3b:1d:
59:82:e0:dd:d6:5a:8a:b7:a3:75:6f:3f:a1:da:17:c5:59:72:
72:43:bb:5f:87:70:43:df:09:20:55:04:71:41:42:4f:04:88:
50:1e:39:d1:dc:98:13:db:14:34:92:9c:17:db:09:0b:7b:a9:
72:84:83:2a:3a:40:8c:4a:73:e3:fd:ae:c9:af:5d:a9:81:7a:
b8:df:3e:62:24:c0:5d:a4:d8:0e:6d:02:47:62:55:8d:07:07:
89:26:b3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:50:31 2025 by rpki-client