Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: UqLDMbDV3Smy4qhqlD+Xae3z9WCvLMSpfRC5KjJVyTQ=
Subject key identifier: F6:A2:BB:07:54:60:09:25:C3:B9:41:F7:14:AD:6F:4C:21:BF:5D:7B
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 019629E02B818ACB2710704B62DC1EE38214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 041D
Signing time: Sat 12 Apr 2025 12:01:19 +0000
Manifest this update: Sat 12 Apr 2025 12:01:19 +0000
Manifest next update: Sun 13 Apr 2025 12:01:19 +0000
Files and hashes: 1: 3EU0oyFeuVgyRfJv8cphRhidY_4.roa (hash: uUVRINmwKIXEw7WBi5QJ2PuB8r4TwtW/ERy1bKhXTs0=)
2: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: t53w4RRyCpvhNXwGEykeTdwRvPLiEHcpXcwccIG6qPM=)
3: z8EvHyxXFy9jjv9R0JxJLEvy2D4.roa (hash: sXJWZt8I6k1zbSOq8kLHcxqJ9ibbT5w1l4T6edD/QLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:e0:2b:81:8a:cb:27:10:70:4b:62:dc:1e:e3:82:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Apr 12 12:01:19 2025 GMT
Not After : Apr 13 12:01:19 2025 GMT
Subject: CN=f6a2bb0754600925c3b941f714ad6f4c21bf5d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:c6:22:cd:db:68:23:f4:21:8c:73:84:7a:
a6:c9:e8:b1:6d:4b:93:b2:65:16:b3:de:40:28:75:
96:8f:b0:3c:18:85:7a:b8:fd:27:85:51:24:76:15:
cf:84:14:4e:8b:d7:3b:f1:44:a0:0a:e4:86:48:07:
a0:ad:37:4a:4e:08:33:38:13:d6:29:a6:99:a9:04:
c4:61:65:af:7d:59:d0:c0:d9:49:95:b7:82:61:d7:
f8:31:48:6c:f4:2f:f2:c2:ab:5c:32:7c:88:4f:74:
a8:4c:7e:1e:20:84:a7:ba:06:cc:6d:3c:a6:95:5b:
7e:9d:79:42:38:04:dd:39:fd:a2:aa:01:a9:83:6f:
33:f0:f5:fe:2c:4b:93:df:40:1a:79:31:52:2d:5d:
a3:c6:38:f8:47:ac:88:40:9c:63:ab:97:68:f0:a5:
08:fd:ee:f2:19:e5:37:bc:ca:9e:94:4f:0c:8b:53:
2a:1a:48:08:7f:18:0d:00:4c:89:fd:a3:a0:37:a0:
1a:61:8b:b7:d7:65:14:e4:64:6d:3d:d2:e9:0e:a4:
73:09:89:f9:25:25:e6:41:6e:15:51:bd:ad:28:2b:
a8:1f:44:b0:8d:e7:91:db:e0:ec:80:15:f2:03:a7:
55:b1:5a:0e:8c:a9:09:57:1c:87:3f:ac:fb:17:d4:
48:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A2:BB:07:54:60:09:25:C3:B9:41:F7:14:AD:6F:4C:21:BF:5D:7B
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6c:a8:9e:95:b9:28:39:f3:87:b1:ca:70:f3:7a:9f:94:4d:
ed:24:8c:b1:17:f9:e9:0c:58:e7:67:9a:d6:47:9e:d9:90:6b:
c6:42:f1:98:c1:17:bb:09:a6:4f:3b:2a:ba:f6:4b:38:b6:fb:
ef:37:16:64:4a:62:16:fa:d9:56:e9:13:f5:83:db:eb:0e:e2:
26:da:3f:c7:b5:b6:fe:83:90:60:b1:dd:f1:8c:fe:66:73:1b:
59:10:58:e7:2e:22:5c:10:44:64:41:07:2d:5e:d7:53:b8:65:
84:c8:5f:bb:8d:d5:6a:29:98:dc:03:ce:a2:2f:11:bf:2c:5d:
fa:81:3d:66:d7:a5:05:09:29:5b:e2:2e:3b:a7:d5:8b:cb:db:
9e:3f:b8:af:c6:55:ad:c4:bf:88:22:aa:39:4b:ab:66:1c:59:
b7:bf:ec:f3:38:03:45:8c:80:db:f8:12:54:03:43:d0:aa:ff:
ce:51:68:22:35:b9:1f:f4:31:6e:8c:e9:3f:88:9d:bd:fa:ee:
83:c3:c6:1a:fe:a5:15:a0:3b:c9:03:36:5f:01:40:d3:3a:13:
ad:e3:52:c7:7f:d3:39:de:ea:8b:bc:be:9e:09:7c:df:65:6e:
96:76:ba:74:df:35:09:47:0f:0a:f5:2e:90:dd:49:ff:9f:c8:
8a:c0:5c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:16:50 2025 by rpki-client