Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: tcGW5whT671M/RuTzNM+vvmDV7Q6CCraxrgVLHTIG/w=
Subject key identifier: 55:B7:A2:08:7A:9D:D1:8C:0A:4B:DF:CE:63:2F:EC:5B:61:69:EB:78
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 0196515B0723FC1C3011CE922953B286FD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 04:00:42 +0000
Manifest this update: Sun 20 Apr 2025 04:00:42 +0000
Manifest next update: Mon 21 Apr 2025 04:00:42 +0000
Files and hashes: 1: tnQ5odqGfmjwtl_VRpWmuxnJVZc.roa (hash: jWqwIWRjWImreknKrwhsqWkckPsMaq433dW/u+UVzTY=)
2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: sJmPTiA0YeGec+cRYZ//Cu+O77il7I9FkKZjLc+t1M8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:07:23:fc:1c:30:11:ce:92:29:53:b2:86:fd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: Apr 20 04:00:42 2025 GMT
Not After : Apr 21 04:00:42 2025 GMT
Subject: CN=55b7a2087a9dd18c0a4bdfce632fec5b6169eb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:22:dc:b8:47:0a:e9:ec:3e:32:c0:39:78:
7a:65:b6:ab:64:54:c4:45:99:68:cd:63:c1:ba:be:
db:8b:9e:c5:99:50:a2:03:08:2d:aa:35:aa:88:fa:
62:be:4f:8a:38:4b:b7:21:04:17:38:69:d9:94:49:
b5:7e:81:66:f4:e2:03:c1:93:48:0f:83:e9:3d:58:
12:d3:eb:98:ec:43:a2:80:15:0a:05:5a:71:0d:0f:
7f:51:7c:4b:85:4e:cb:5d:45:e8:4e:ca:29:73:79:
63:1b:33:ff:9d:0a:93:1f:1d:74:67:06:75:83:30:
c8:30:6c:c3:2a:bf:f1:c5:94:8e:46:7b:bf:13:36:
b9:41:57:91:1a:af:e1:90:43:e7:c3:15:5d:fc:8a:
0f:73:c7:ef:ae:d6:3b:84:ae:e1:79:f4:8b:00:bd:
1d:db:99:82:fc:d9:2d:80:35:49:82:41:70:b8:74:
e0:44:f6:3a:d2:63:7d:58:a5:8b:01:c4:1a:82:72:
9c:32:c7:30:62:18:78:d0:6d:99:15:db:b0:10:0c:
d9:51:3b:c8:ae:03:9a:3e:c3:03:d6:5a:ef:ad:39:
3e:7a:62:1b:61:10:8d:8d:5b:4a:c5:57:4f:09:62:
77:e9:b1:ce:6c:24:07:a3:8e:94:8c:1c:be:cc:f1:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B7:A2:08:7A:9D:D1:8C:0A:4B:DF:CE:63:2F:EC:5B:61:69:EB:78
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d3:b4:dd:50:61:36:e2:8a:8a:72:54:7d:5f:8e:a2:a7:82:
f6:12:bb:ad:d5:f9:91:50:09:40:6e:74:e6:01:a7:e0:08:e1:
2d:2d:b9:08:eb:b9:fa:b3:c4:2d:2c:ce:8d:46:59:ae:2b:bd:
37:02:ba:95:4e:56:a4:e5:70:a5:a0:df:68:0e:15:92:ac:02:
59:bc:df:40:a2:aa:96:1d:3f:55:33:85:5b:d4:4d:76:94:88:
6a:3d:bc:6f:ca:74:7d:21:31:36:a4:eb:99:db:5b:63:19:20:
73:54:51:e0:7b:e0:9d:5a:d6:db:e5:0e:b5:5c:c3:53:7c:ac:
59:52:98:0e:ee:43:57:52:57:3a:a3:21:ad:18:93:5f:93:23:
c7:bd:25:d8:cc:a9:cd:13:2a:5d:ef:6c:58:18:9b:10:41:4e:
fd:73:f4:31:6d:fc:0f:4c:26:cf:4c:6d:4f:e9:79:d3:2d:85:
53:ae:8c:92:36:e3:e2:87:e0:e8:d9:e4:0a:56:07:f4:09:a8:
d3:e5:c1:9a:c8:7a:65:3d:c8:3c:03:dc:45:be:f8:d4:8f:1d:
28:53:f9:f4:3b:09:4d:23:b8:a3:f7:13:a6:a3:d9:85:63:57:
65:a6:03:22:7b:6c:51:8d:65:3c:8c:ab:81:25:c1:93:0e:b0:
53:31:71:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:55 2025 by rpki-client