Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier: PgrLi5WVwBFMt+aM4a6bSSlFuGKOWMCZUXVk0893W88=
Subject key identifier: E5:17:69:A5:D4:3B:0F:09:AF:9F:8B:E1:25:E9:31:C1:74:2A:1E:67
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 019678686E69994399DB279C14E34BC45485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number: 0C06
Signing time: Sun 27 Apr 2025 18:00:32 +0000
Manifest this update: Sun 27 Apr 2025 18:00:32 +0000
Manifest next update: Mon 28 Apr 2025 18:00:32 +0000
Files and hashes: 1: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: xwZJXkp7lRP6d71Ky9A1XHMGcg2k32dCcjaG0l5ZB80=)
2: ZfrqB-JhfiqNRWe3zj0YhBh2Vgk.roa (hash: AZkZxydWTOa7MDw2bfdTftJLCSFU1oN9eZ8WQJFQzJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:6e:69:99:43:99:db:27:9c:14:e3:4b:c4:54:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: Apr 27 18:00:32 2025 GMT
Not After : Apr 28 18:00:32 2025 GMT
Subject: CN=e51769a5d43b0f09af9f8be125e931c1742a1e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:aa:6b:a1:0f:76:4e:95:fd:83:d7:eb:bb:
44:33:07:99:f0:3d:07:55:26:c2:4c:25:c0:20:ec:
51:0a:43:ba:70:9c:93:14:5d:68:f6:a2:83:44:27:
83:68:5f:be:28:64:a3:aa:ae:57:59:da:92:e1:2d:
57:40:ba:e2:99:be:b3:c5:43:29:0f:81:07:e4:13:
81:55:5e:fd:6a:b2:e3:0a:f8:00:e2:17:52:56:0a:
cc:1e:b1:82:c6:b5:96:7f:df:cc:5f:c4:09:1e:8a:
b6:35:74:7a:fa:53:f0:1d:f6:de:f9:d8:da:1f:54:
5b:a5:a6:02:a3:bd:7a:5f:17:ed:b0:a4:0a:ae:7e:
c1:71:78:1d:f5:51:f0:b9:d8:e1:04:2c:a5:be:de:
4d:08:59:27:8e:a8:fc:10:4b:0d:90:84:bb:cf:a2:
cc:29:ca:cb:af:cf:04:32:e6:b8:84:ca:e7:cb:c6:
3a:32:86:97:d2:64:fa:1b:b1:0c:b9:44:c6:3d:a5:
be:85:1e:48:1f:df:11:f1:44:85:51:c3:e2:a7:00:
e0:6b:36:9c:78:70:6b:d0:ce:bf:9c:62:e8:67:e8:
a4:59:82:30:81:69:15:ae:17:05:31:f4:c0:a9:44:
92:f4:7e:2d:9e:bd:94:dc:90:20:66:65:08:4f:0f:
ee:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:17:69:A5:D4:3B:0F:09:AF:9F:8B:E1:25:E9:31:C1:74:2A:1E:67
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:00:62:08:d1:1e:5e:32:11:cd:de:21:eb:87:60:02:3b:9f:
b0:f3:a3:b2:8c:ce:2e:46:9c:a4:83:9c:4c:4f:c9:d6:34:b8:
95:25:10:5c:af:b0:4e:c1:de:77:7b:1a:8e:c6:93:0c:12:a1:
54:ce:97:60:b8:5d:c8:a1:f8:35:23:de:17:12:a1:f4:01:4d:
18:72:21:47:88:6a:a3:c7:dc:3f:4b:0a:f0:4e:a1:ca:c2:dd:
ec:db:32:29:c6:f8:78:39:7a:34:2a:f6:f8:0c:d2:5b:6a:4f:
33:b8:7d:ad:8f:3e:1b:1d:1a:d1:c2:68:3f:19:2c:44:c9:57:
8f:58:4b:94:fe:54:eb:e7:61:2d:1e:08:06:6a:62:3f:14:19:
b2:01:8c:0e:8f:9a:ae:58:c3:de:e5:7e:8c:04:47:f1:73:29:
b9:6f:2e:53:d3:d1:34:1e:8b:33:74:2f:dd:8d:46:19:ae:c9:
2b:4b:34:30:f9:1f:83:4a:d6:d9:27:9a:5f:82:0b:cb:65:58:
a3:6a:6c:8e:20:73:36:6d:cd:9f:35:75:31:6c:31:d7:f0:36:
ba:d5:3b:66:be:ff:83:0b:8e:66:27:60:52:9f:4a:fd:d2:e2:
87:c2:a1:a2:b1:86:16:0c:ee:62:e1:27:9e:2e:ae:d7:60:5d:
03:57:b7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:06:30 2025 by rpki-client