Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: 1ZR3GiBPFFs+Cj7ZVYJIbJsYhoP5w01jjTOYa/vt/+c=
Subject key identifier: 0A:EF:42:2E:CF:70:CF:27:FA:6F:33:EC:14:19:77:BF:CB:C9:11:34
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 01962A84EEFBFC6548BCEDE873D9BA70ABD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 14F7
Signing time: Sat 12 Apr 2025 15:01:17 +0000
Manifest this update: Sat 12 Apr 2025 15:01:17 +0000
Manifest next update: Sun 13 Apr 2025 15:01:17 +0000
Files and hashes: 1: TYwZFqNPf6Qsrw0GmPrjKEpe21A.roa (hash: CZIXGgcAUIozY1tQFUYLHdOZbi+azarBS/OuaFJStXY=)
2: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: Zp47n+ZRD2g7tvwKXAyuQsTxxx/Hrwuaaz/d1/uvdMc=)
3: b3OynJO2dQ-hJEqWlg7d4lwS2vQ.roa (hash: 2dy6h6k+j3ORshtIaAQ5KnKNXYXUa2URxchCR/WmKmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:84:ee:fb:fc:65:48:bc:ed:e8:73:d9:ba:70:ab:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Apr 12 15:01:17 2025 GMT
Not After : Apr 13 15:01:17 2025 GMT
Subject: CN=0aef422ecf70cf27fa6f33ec141977bfcbc91134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:35:95:c7:71:cf:0a:64:e4:d2:cb:9a:23:
1b:4c:f2:85:d6:2c:5f:62:fc:c1:62:17:7e:01:2c:
5b:01:dc:40:01:d8:96:73:24:94:d0:c7:f7:d5:74:
f3:f0:d1:41:3f:f8:25:1e:7c:b4:11:f9:a4:8b:46:
c2:7e:de:ea:bb:25:ee:c4:25:25:ee:8f:80:ce:b2:
b9:e7:64:2a:6b:90:44:0d:d3:9a:11:ef:4e:f9:2f:
18:a3:01:c4:01:49:4f:6f:b1:02:54:18:53:45:f8:
1f:3e:04:0b:b0:c9:88:6f:bf:10:cf:fa:e6:54:71:
2f:2e:93:39:be:8d:0f:c9:9b:7b:84:42:8f:e8:40:
19:5f:5c:5b:ba:8a:d3:b6:f0:c5:d2:04:7c:36:5a:
b0:e2:68:36:7f:82:a5:5f:62:15:b2:e2:9e:4b:02:
38:7a:5a:22:1f:b2:08:30:40:06:04:e7:a5:d2:91:
cf:dc:81:c2:f7:3f:03:cb:c6:dd:46:24:dd:4d:b7:
8d:bc:38:13:97:fb:bd:32:3f:4d:b9:d9:64:a9:ff:
c1:72:b0:08:38:de:a0:65:41:1a:c4:32:ff:35:fd:
11:c8:04:c2:6f:b1:d5:f2:b0:b5:ae:de:97:7a:7e:
f7:90:65:42:a2:e0:6e:c7:86:46:e8:d3:fb:a8:e1:
0f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EF:42:2E:CF:70:CF:27:FA:6F:33:EC:14:19:77:BF:CB:C9:11:34
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:01:e3:97:60:c5:5c:31:1b:ba:bf:29:50:91:70:7a:44:42:
f0:2f:fb:b9:b8:41:57:73:e0:b3:9a:47:94:71:77:ac:0b:13:
5f:fe:3a:92:c2:43:ff:20:19:6b:e5:ce:24:28:d4:68:86:f4:
10:7c:a7:8a:89:d6:36:92:d9:93:6e:fa:97:1e:c7:bf:0d:4f:
12:75:a2:2d:af:63:86:46:26:c6:6d:43:58:93:8c:75:ad:2d:
50:31:96:65:ab:34:b3:3c:c0:d2:f3:68:77:1e:46:85:6e:66:
e2:c9:40:08:c2:2f:21:82:5e:79:48:e7:f7:91:16:9a:bf:be:
c6:56:3b:0f:1d:e2:9c:be:37:ef:2c:92:e1:a8:5d:41:d2:63:
5a:dc:5f:cc:fc:0e:67:70:d0:b5:4e:84:ba:d9:31:dc:aa:cf:
d3:b0:c8:44:74:03:93:a6:ba:9f:2f:a1:1c:34:4b:f5:50:89:
13:6b:ca:31:90:6d:a5:53:a3:85:2b:ad:e0:67:2f:ed:e2:4a:
22:2f:cd:25:1a:ce:23:53:33:aa:2a:80:d5:b4:05:98:19:35:
01:cc:d2:ed:e5:7c:5c:65:ef:de:20:25:03:1a:1c:fc:47:66:
06:e0:88:b8:c5:7d:67:9a:00:74:26:ad:69:5f:29:99:f8:15:
8e:1e:04:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:28:57 2025 by rpki-client