Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
File: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json)
Hash identifier: 5V0Z8DSfhPZI163aH7KiCeQQYuA/hpNM77Z3dgTU/I4=
Subject key identifier: 09:16:64:36:C9:A7:CB:B8:34:D5:E9:21:FE:77:B1:FA:34:A2:8F:D3
Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
Certificate issuer: /CN=c76c3644741336b01b638563314f40d10c69d30d
Certificate serial: 0196561314A13D530C0C8A30A2C5E8B311A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
Manifest number: 090C
Signing time: Mon 21 Apr 2025 02:00:13 +0000
Manifest this update: Mon 21 Apr 2025 02:00:13 +0000
Manifest next update: Tue 22 Apr 2025 02:00:13 +0000
Files and hashes: 1: VL_sUVNGEMQYYwl9Xv-gftIOtVk.roa (hash: Nb6N1oOcP6n4dJnS6N2r/DJY5HC1wzR3gXjz4D8FCrM=)
2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: u8FpjQjw/NdWbs6PkfKazM/V3unUy6iVcs/nOsmxIXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:14:a1:3d:53:0c:0c:8a:30:a2:c5:e8:b3:11:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d
Validity
Not Before: Apr 21 02:00:13 2025 GMT
Not After : Apr 22 02:00:13 2025 GMT
Subject: CN=09166436c9a7cbb834d5e921fe77b1fa34a28fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:2a:f5:2f:6b:55:eb:ab:0b:1e:ce:86:df:
de:a9:4d:18:bf:71:30:c9:d5:3b:33:1f:71:d7:75:
ee:4e:57:df:c1:08:75:e0:d3:6e:66:04:bc:c4:c6:
fd:fb:83:42:40:4c:02:26:0f:a2:7f:de:ca:66:3f:
93:02:e3:f6:af:6d:52:47:0e:f5:cc:d8:ce:ee:c3:
04:e6:01:a8:2b:4e:92:ef:02:1c:05:6d:52:ac:37:
3f:f6:65:c3:a0:90:43:af:79:b4:c5:ac:e0:bd:f3:
15:03:40:62:bd:1c:79:d1:61:62:11:a4:fa:16:4b:
53:8a:84:65:93:72:f9:53:64:20:30:ab:7a:fa:65:
b3:10:63:75:3f:0b:a0:6f:46:b4:01:0a:eb:9d:c4:
c2:4b:b4:a3:27:29:e5:41:57:51:2c:62:9c:c2:3e:
97:d7:37:db:ce:3d:51:eb:40:01:74:a4:f4:9b:8f:
03:54:df:d8:f9:fe:19:55:6e:50:0b:56:d1:53:2f:
13:63:b6:2e:ce:ad:bc:a8:47:05:98:11:21:b3:7a:
09:08:b0:d3:b2:be:fa:54:44:a0:65:92:ed:f1:3b:
6d:b6:00:47:36:2e:e1:53:60:5f:b3:a8:a6:1d:48:
57:43:c1:71:8d:ac:8c:74:08:d6:16:c9:42:78:79:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:16:64:36:C9:A7:CB:B8:34:D5:E9:21:FE:77:B1:FA:34:A2:8F:D3
X509v3 Authority Key Identifier:
keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:13:4b:69:f7:4e:16:98:08:f9:d5:45:6d:da:c5:73:53:ab:
a7:3f:b3:57:d5:68:cf:41:4b:f0:9e:11:aa:af:06:01:85:9e:
29:d1:7c:ae:a4:42:2b:fa:76:4a:84:bd:1c:c5:6d:40:fb:bc:
44:1d:01:94:07:07:3f:a9:cb:66:20:9a:60:1a:bc:b3:e5:4c:
9d:3f:b1:f6:d7:a4:ce:b6:cf:d2:f3:68:89:2f:e8:6c:bb:33:
3e:17:09:39:f0:f1:8a:e5:f7:0d:3f:b5:08:97:50:3f:db:17:
73:0a:39:b4:af:98:e9:5a:b4:7c:17:61:13:c9:9f:ab:b3:3b:
14:4e:e0:9f:5b:22:c3:2d:68:cb:f6:d2:22:57:8c:d7:b8:1f:
8d:d2:02:2e:ef:0a:8f:f4:98:ce:45:86:b0:ff:dd:0f:fc:47:
86:dc:80:0d:4c:a2:67:af:a5:89:e4:d5:13:00:73:73:1b:8b:
c9:0e:29:3f:d8:2a:ad:c5:13:1e:84:b1:71:82:bd:07:27:8e:
b1:4e:ca:3a:78:43:b9:96:ff:4a:a1:f4:ff:63:57:e5:97:bc:
a2:59:67:bc:4a:b3:64:a3:39:4f:0f:33:48:9d:0b:ea:51:38:
26:d8:59:08:b5:e0:9d:e1:74:0e:c7:58:cf:f8:b8:8c:8e:20:
6d:e5:c4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:14:17 2025 by rpki-client