Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: zwMWQBGlYGzlH6a3d4VmFcFU7QXhsxNMuAMyXtJjFtQ=
Subject key identifier: B3:41:4E:BA:D8:F5:B4:90:80:C6:0F:B0:6B:09:F2:2C:9C:C5:98:19
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 01964D7E3ABBCB2521C7389479F3607F88E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 10:00:40 +0000
Manifest this update: Sat 19 Apr 2025 10:00:40 +0000
Manifest next update: Sun 20 Apr 2025 10:00:40 +0000
Files and hashes: 1: nywPQh9QP-OhqhIRdI1AR086REo.roa (hash: fyTq9cJsDKGICMb+AhPPiPfngZOBuqPjdSV/9OfNj10=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: Ds/DbZQfSjrN0DKLMb1rLFoncZdDEBKgLlnYjnEfXEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:3a:bb:cb:25:21:c7:38:94:79:f3:60:7f:88:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Apr 19 10:00:40 2025 GMT
Not After : Apr 20 10:00:40 2025 GMT
Subject: CN=b3414ebad8f5b49080c60fb06b09f22c9cc59819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1d:69:1b:d0:23:ef:63:3c:04:21:58:20:31:
c3:54:b0:6b:d7:d8:88:58:fd:6b:47:a6:4f:e7:4b:
7d:c6:6b:db:51:41:f2:cf:ba:aa:56:94:43:2a:e6:
1c:a2:ad:fc:1c:7f:87:f6:68:1b:9e:dd:8f:c6:ad:
4e:6e:07:a1:b9:cc:85:80:06:c1:2a:b3:b6:0c:97:
c6:8d:80:56:b4:e0:7d:00:e2:5f:0f:ad:f7:04:ef:
16:fb:3b:c9:24:4b:c6:3a:9c:76:d1:db:ee:50:fc:
0e:13:88:da:68:d6:f1:9f:91:6b:1e:b9:13:1d:85:
e5:db:bc:12:fb:43:9e:53:a5:aa:1c:4b:5b:3b:f0:
11:72:2f:b3:c6:54:fb:6b:01:23:a4:25:4a:f8:d7:
92:b4:e7:4f:c9:50:53:3d:07:c6:13:52:97:a1:97:
b3:6c:a3:84:5e:e2:e4:4b:34:14:2c:10:99:36:a6:
14:cb:55:fe:87:13:1f:a6:a3:45:26:c0:40:c4:7b:
59:a3:82:f1:b4:51:bf:5e:e0:fd:2f:d7:69:9a:16:
01:33:d8:a4:10:b8:13:0c:f7:5d:97:fa:86:df:5f:
07:65:0b:96:4a:fa:5a:a7:f6:95:78:5c:1b:97:07:
95:bb:ea:5b:fd:1e:d4:09:f3:f0:f1:d6:e0:3f:c9:
91:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:41:4E:BA:D8:F5:B4:90:80:C6:0F:B0:6B:09:F2:2C:9C:C5:98:19
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:20:57:2e:8d:3f:cd:5b:63:bd:ec:76:ea:55:01:eb:7c:89:
9a:ed:de:91:cb:6c:f6:56:81:c8:87:2b:23:f8:1e:22:58:2c:
ab:f9:34:4f:4b:82:9a:69:bc:f5:3d:78:99:17:a2:e5:c0:77:
b8:e5:3f:3a:ff:a2:82:dc:af:9b:5f:6a:08:63:ed:92:61:4c:
c8:8c:f5:99:de:89:4d:05:8f:b2:26:9b:f8:c1:bc:8e:6d:fc:
81:12:5c:61:62:36:20:38:1f:10:0a:8a:2e:fb:ee:d5:e1:d0:
d0:95:c3:00:be:59:b8:36:79:b9:6d:2b:be:a0:77:93:4a:5c:
2e:7d:ec:dc:ce:b7:e6:5c:63:ee:68:21:4a:de:2d:7a:4e:da:
02:b1:b2:cd:c5:62:9e:27:d4:21:f5:41:2a:b4:03:0e:4d:cb:
7a:77:65:43:8d:cc:c7:6b:8b:12:df:ba:d0:f5:5d:97:a2:a1:
40:8d:b7:74:12:4d:8b:d2:ae:0f:9c:6b:ce:2b:15:f6:dc:97:
da:72:08:74:fe:6c:77:df:61:d1:88:27:f5:da:80:bf:36:13:
ac:1f:df:b1:e9:de:22:81:32:ff:6f:4d:25:1a:1b:ab:ed:20:
d8:4a:ac:8f:83:1e:01:30:ec:86:00:7a:59:14:cc:98:ef:99:
0b:af:57:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:45:56 2025 by rpki-client