Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
File: xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft (raw, json)
Hash identifier: 66vmOeDftGykNyYHUsIpSecZFduNSnEq7fyqey1/4hc=
Subject key identifier: BA:D5:AE:AF:F2:FA:3B:6B:A0:98:B6:95:4B:5E:F7:61:F3:9A:E7:63
Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
Certificate issuer: /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Certificate serial: 019655A551D8DA0C1A0407931A5951AB15B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 00:00:19 +0000
Manifest this update: Mon 21 Apr 2025 00:00:19 +0000
Manifest next update: Tue 22 Apr 2025 00:00:19 +0000
Files and hashes: 1: 8lcvOAYawA8m44njSriAA46ohqM.roa (hash: dgK9JD6WHGLDC+yE4xMsU1SgCBsr9GlbtGy0j7WmX9Y=)
2: xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl (hash: xtpTSMLSmwKswa27sHMFwq9xogrUIr+6WFUMPWLcYSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:51:d8:da:0c:1a:04:07:93:1a:59:51:ab:15:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Validity
Not Before: Apr 21 00:00:19 2025 GMT
Not After : Apr 22 00:00:19 2025 GMT
Subject: CN=bad5aeaff2fa3b6ba098b6954b5ef761f39ae763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:65:28:89:b1:f7:ac:11:3e:1e:be:bd:f1:
70:82:ca:fa:02:7f:47:2f:22:93:64:1f:c4:70:f8:
6a:6f:74:5b:cc:fc:a0:d6:7b:cc:29:d8:bb:ca:1e:
00:16:6d:67:68:1a:ba:9a:bf:96:bc:d7:82:07:76:
1d:91:2e:ba:71:b7:b1:0d:5b:40:11:a2:f5:92:31:
c8:8b:f7:c7:e7:a3:e5:c4:f9:8e:2c:b0:af:e7:7f:
a2:49:23:c7:65:99:7f:fc:fe:e3:ae:18:5d:55:26:
5d:64:a9:01:e9:7e:a7:c5:5a:f7:ad:6a:e4:16:17:
1f:3f:e2:5c:e3:46:4c:d8:fe:57:74:2e:0e:db:ca:
21:3b:e4:d5:c8:56:f6:2e:81:3e:f6:e9:7f:27:3f:
f1:6e:c5:87:b0:0d:72:73:3f:50:d6:f7:1a:9e:6e:
8e:46:25:43:b3:8f:be:f6:35:0f:e7:c6:39:f7:13:
77:95:cc:5b:f3:3d:af:23:e9:9b:b0:e0:6e:f0:cb:
71:b9:af:9c:2d:79:5a:08:16:3f:40:a2:1d:2d:ff:
1c:d5:e4:1d:fd:35:79:49:95:90:fb:c1:50:13:b6:
4d:5f:b8:2b:ea:f6:00:2c:f9:ec:97:27:3c:6a:e1:
8b:21:f4:90:52:f7:65:3a:01:c7:28:45:08:a0:6b:
e8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D5:AE:AF:F2:FA:3B:6B:A0:98:B6:95:4B:5E:F7:61:F3:9A:E7:63
X509v3 Authority Key Identifier:
keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a3:67:a2:0d:d9:ea:4e:4d:de:e9:bc:d5:de:d0:76:98:ee:
ff:f9:73:f7:c2:77:e3:0f:5f:75:c6:d9:cf:cc:93:a2:31:56:
08:e3:bd:43:f7:7d:b2:a2:29:71:6a:58:15:a3:93:71:a0:ee:
3a:38:bb:5b:c2:ba:4f:76:b6:f4:41:ee:ad:b5:d2:5b:19:f6:
1e:25:61:9f:e1:4e:64:eb:f4:92:67:e0:85:7e:0f:81:d4:a0:
db:22:df:96:6c:19:f3:a1:d2:af:1a:29:ad:1c:7a:46:89:b2:
5e:5c:f4:15:84:35:eb:ea:98:ae:3f:12:3a:46:9d:34:31:6e:
e3:40:be:c9:67:70:0a:48:91:bd:a0:38:d8:2f:5f:08:4b:3c:
c2:1f:78:51:4d:fa:27:6f:e1:1c:60:be:c8:33:1b:4a:a9:53:
a1:27:a9:e8:ef:62:a6:6b:c2:b3:1d:8b:ca:1e:37:9c:0a:69:
d6:3e:92:bf:2b:ab:73:2b:a7:e9:66:1c:d8:d1:c8:10:da:e2:
31:b0:a4:f8:3b:a6:37:53:f4:27:bb:41:46:a1:97:e0:6a:65:
27:12:bc:58:77:3b:6f:66:08:eb:2a:e7:fe:63:b9:aa:f8:a3:
be:40:53:46:7b:3a:99:37:d3:b3:65:5e:f0:b5:ad:51:3f:52:
29:19:ce:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:57:16 2025 by rpki-client