Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
File: 55XJYXylpqO_8mP8GDeZL9GsR_I.mft (raw, json)
Hash identifier: 4mdnVYC64eYiL1frlzYBpP7RV2J9JH8Mqx641MeJTtE=
Subject key identifier: AB:12:7A:B2:6F:A8:01:0E:E7:EA:F6:4D:95:D5:7E:BF:5D:5C:7B:06
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 01962B97A73AF669FB7935C0B7DE995AF1C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
Manifest number: 11C8
Signing time: Sat 12 Apr 2025 20:01:21 +0000
Manifest this update: Sat 12 Apr 2025 20:01:21 +0000
Manifest next update: Sun 13 Apr 2025 20:01:21 +0000
Files and hashes: 1: 55XJYXylpqO_8mP8GDeZL9GsR_I.crl (hash: ptzQkGySG2l8oosZ369bJNd9a3LTJagBZ/9aPjCj4us=)
2: fdmY21hE8c4ebVfH7Y8PeaGR1rs.roa (hash: podpEHI3zXhpsNN3dsQSymn1ceGiInhTkIusl9LVsm8=)
3: nx0Nx3RUcjg69TXrkEufTSbs61w.roa (hash: KMtfn4uZNi8ih3qU7QWNp/Rahsd8G3VcGheyTA9UvAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:97:a7:3a:f6:69:fb:79:35:c0:b7:de:99:5a:f1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Apr 12 20:01:21 2025 GMT
Not After : Apr 13 20:01:21 2025 GMT
Subject: CN=ab127ab26fa8010ee7eaf64d95d57ebf5d5c7b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:15:03:7b:1b:8d:64:70:8b:78:8c:d2:8e:
1f:a7:5f:02:1c:99:20:ce:05:e2:49:8f:2d:13:ab:
5e:76:45:0b:20:5d:a6:c0:86:5e:80:2f:e4:6c:83:
25:0e:c5:50:c3:f7:8f:da:57:4e:da:9d:eb:13:4e:
66:f4:a5:2c:0a:5c:2c:cf:ca:ad:6a:7a:2b:f9:74:
d9:e8:86:de:f2:c9:14:1e:e4:3a:91:f9:58:0e:84:
10:50:43:cf:06:46:d3:bb:e8:d0:f5:b0:ad:5b:3c:
9e:4a:fa:69:0b:b6:cf:21:8a:e9:68:bc:1a:c9:4e:
1e:5c:02:7b:79:37:a5:61:64:59:75:17:a0:cd:8f:
fb:a9:40:ed:79:13:3d:fd:3c:b1:6b:9e:39:11:76:
f8:fa:83:65:fd:ad:0d:91:4b:94:4c:40:77:5a:26:
f8:b8:98:d1:43:de:98:e9:69:63:fd:ad:82:0e:97:
14:0d:5f:f7:0b:ed:76:07:9a:6d:fa:89:ad:a6:59:
b3:f6:9f:fe:94:f9:3a:e6:b9:c3:98:50:30:0e:60:
b3:15:1c:87:15:94:81:c3:8b:09:cf:7f:5d:05:d9:
7c:19:fb:c3:e9:38:6b:90:11:4c:b4:f4:e0:e3:62:
78:05:fe:c4:7b:68:35:59:80:95:0a:8a:5c:8e:20:
04:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:12:7A:B2:6F:A8:01:0E:E7:EA:F6:4D:95:D5:7E:BF:5D:5C:7B:06
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:64:c6:79:28:70:3b:fc:66:b6:23:eb:46:73:d6:34:8c:25:
6a:e9:c9:47:80:06:dd:80:81:35:cc:77:d8:e7:c1:0f:9f:3f:
7d:59:48:20:87:43:d8:e5:1e:2c:c7:ef:7b:38:27:bd:82:01:
a8:88:bd:35:cf:72:35:39:0b:40:38:ce:a2:b2:9d:d6:93:55:
21:e8:f6:3b:6e:73:08:6e:29:0c:f7:3c:84:7c:21:42:5d:43:
fe:00:af:55:b9:57:85:8a:5b:b2:a9:6b:1d:75:8d:b5:93:5f:
01:ae:ff:aa:14:d0:56:d8:f4:dd:5a:78:9b:a6:2a:c7:0b:94:
bc:bb:bb:1a:95:8a:c8:40:4d:eb:19:05:68:dd:e2:7d:a8:2e:
0b:50:be:5e:fc:d0:b8:7c:2b:39:39:6d:30:d2:3c:6c:51:8f:
03:e0:63:40:68:c3:58:05:f8:6c:08:61:59:37:b5:ad:a3:09:
49:9c:81:3b:6c:42:65:2b:dc:7a:0d:e5:23:dc:a3:7b:a1:7e:
ec:66:10:93:5a:c3:02:3c:56:f4:eb:b4:7d:66:e0:3b:5e:7b:
dc:54:ce:f1:78:2c:e5:52:4c:88:8e:aa:29:58:68:6d:11:e4:
8c:7d:4f:35:c5:c9:e0:30:85:93:93:0b:80:fb:f8:1e:30:94:
27:1d:25:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:14:28 2025 by rpki-client