Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
File: cxwTgoWLDclamtvqRyizH54iwNg.mft (raw, json)
Hash identifier: NabHpwY59LgTc2bIbGiqHE+5qJUkzXu8ocaZpMftge0=
Subject key identifier: 86:E2:AA:0D:B3:8B:62:86:C9:20:38:CF:D6:24:4A:A8:D9:41:6A:05
Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
Certificate issuer: /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Certificate serial: 019659151B7A50792368DB7E1CBD07332880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
Manifest number: 065D
Signing time: Mon 21 Apr 2025 16:01:17 +0000
Manifest this update: Mon 21 Apr 2025 16:01:17 +0000
Manifest next update: Tue 22 Apr 2025 16:01:17 +0000
Files and hashes: 1: cxwTgoWLDclamtvqRyizH54iwNg.crl (hash: llEVtp34zK1HBjHd/n4YjfdqThF7Uto8MHVyMq3LabI=)
2: xsLt5XL-OWIaNdR6BZ8HbsppEGM.roa (hash: fVuO1qpyondG1qElrhxFzaCfBXaBgOTcL+nbs40PcY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:1b:7a:50:79:23:68:db:7e:1c:bd:07:33:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Validity
Not Before: Apr 21 16:01:17 2025 GMT
Not After : Apr 22 16:01:17 2025 GMT
Subject: CN=86e2aa0db38b6286c92038cfd6244aa8d9416a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:be:1c:ca:f8:ba:e6:9d:9e:c4:e1:fd:38:
f7:39:55:c1:c0:17:1e:96:88:9c:e0:f5:b2:94:fe:
fb:8e:b6:61:b3:9f:0d:15:3c:f2:1c:25:ea:f4:6a:
9c:8c:6f:e6:b8:57:2f:fe:56:e9:6e:61:42:5b:7f:
52:39:57:c3:ba:40:d9:11:04:cb:b2:d4:30:fa:d9:
f8:da:40:3c:09:17:cf:02:e7:c3:3d:e3:76:c5:99:
9a:13:7c:a0:bb:7a:f8:50:95:f6:18:2f:5e:c8:f2:
58:9e:85:62:8b:06:3a:c1:91:cc:62:96:02:92:8b:
f4:93:8f:2b:a3:6f:02:d5:f1:30:2d:4c:7e:2f:37:
88:bd:00:84:51:4f:06:84:24:e1:03:e4:5d:ad:ea:
69:58:e4:b0:2a:83:80:e3:45:13:4f:06:bf:53:4c:
8e:a1:4d:9d:a2:3c:11:d2:ee:cd:25:39:0a:b0:b5:
c4:56:33:ce:38:b2:a4:b7:07:57:4a:e5:8c:74:bd:
1c:e4:0f:37:64:58:bf:7f:05:b7:e6:a8:e3:20:28:
10:38:7b:b3:c4:58:08:db:b7:67:4a:4e:01:08:c9:
a4:bf:6a:a8:43:f4:ee:b6:aa:22:87:82:e7:f0:dd:
9d:33:e6:5f:4a:89:0a:5b:b2:0e:b5:ca:0a:54:fa:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E2:AA:0D:B3:8B:62:86:C9:20:38:CF:D6:24:4A:A8:D9:41:6A:05
X509v3 Authority Key Identifier:
keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:70:b1:1d:57:36:bd:6a:d9:8c:6b:20:e3:44:6e:40:8e:94:
f7:d3:7d:ec:67:5c:06:21:63:50:2b:5e:12:6b:30:fb:07:be:
9f:e8:24:40:b3:05:55:f8:69:35:cd:f8:e1:b5:66:8e:89:8a:
10:e2:8e:59:78:cf:05:1a:94:34:73:09:2c:14:80:48:5e:6b:
b8:8f:7c:75:40:40:d1:f5:d9:ed:7c:0a:6a:e9:31:74:94:6c:
e4:e5:cb:3a:c0:27:7c:ba:e1:aa:4f:98:99:6b:3e:d4:c9:22:
6b:4e:0b:c4:9b:bd:68:82:1e:af:52:1a:f6:08:65:57:b5:ec:
b3:99:b7:c1:ca:7a:f1:43:d3:b8:1f:91:94:fa:43:9d:71:86:
6a:32:56:df:75:ad:92:4e:6d:d8:34:00:07:81:83:3b:22:e6:
47:72:6e:6e:1f:a1:19:be:e6:67:6d:0e:fc:b4:b4:f5:ea:00:
37:1e:2e:ee:18:3b:f7:9e:7a:6d:73:e2:ec:11:cf:83:91:0a:
f3:4e:00:e8:c8:c2:d2:cd:39:72:48:8d:fb:fc:9e:44:14:7f:
8e:71:19:7b:5b:8b:e5:8d:6c:54:53:eb:93:89:90:a0:6a:bc:
eb:8e:14:a8:b0:21:1a:92:bd:03:fe:b0:21:5f:01:b3:12:2f:
2b:a7:52:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:57 2025 by rpki-client