Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
File: XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft (raw, json)
Hash identifier: szKUGnPPw34yGknqca8fZGL+8nuvLkQDY5Astc704/0=
Subject key identifier: 82:A8:1C:77:00:4B:53:11:71:93:26:C2:F7:0F:0B:B4:9B:44:D2:01
Authority key identifier: 5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
Certificate issuer: /CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Certificate serial: 019674C257226D3F543A311BA25D2F59D500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
Manifest number: 51
Signing time: Sun 27 Apr 2025 01:00:15 +0000
Manifest this update: Sun 27 Apr 2025 01:00:15 +0000
Manifest next update: Mon 28 Apr 2025 01:00:15 +0000
Files and hashes: 1: XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl (hash: G3V3XAlQbZCOTW1fmpohsO3rDWyji3B+/iENjeJ+0hI=)
2: sHWJgB25eZ5MsxkzvHCaC9Q9eBU.roa (hash: tfZrpnb6Dc4xLEKe9XCNdEh3R+ehL6A7wZM06Ogyh8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:57:22:6d:3f:54:3a:31:1b:a2:5d:2f:59:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Validity
Not Before: Apr 27 01:00:15 2025 GMT
Not After : Apr 28 01:00:15 2025 GMT
Subject: CN=82a81c77004b5311719326c2f70f0bb49b44d201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:6a:df:34:3d:7e:92:95:2a:94:9d:dc:3c:
c6:e7:b5:50:b1:37:7c:54:76:ff:17:fc:ed:f0:03:
45:3a:00:c8:c8:f8:1e:85:ab:e5:8a:10:86:24:57:
e2:28:73:1d:88:d2:88:d5:db:98:0e:d0:ad:eb:b1:
eb:3b:39:90:74:68:c1:65:e4:05:a3:a9:b9:2d:d9:
c3:be:f3:62:b4:fa:3f:d4:e5:cc:8a:98:05:c5:08:
1b:aa:ae:c9:a3:3f:f1:96:be:f9:79:20:03:5a:88:
13:db:91:47:a8:49:ff:4f:9c:d7:66:ac:b2:a7:12:
4a:6b:ab:95:a7:ad:5d:b8:a2:07:45:68:43:52:05:
1c:8d:82:10:b5:90:74:dc:be:b0:68:dc:45:44:40:
eb:93:9d:a8:ba:a4:eb:b7:46:07:bb:f1:1b:20:6b:
92:09:45:fd:bb:89:0b:c5:c1:f9:1e:b5:66:02:6b:
2f:c0:62:b6:60:21:b0:33:69:52:a3:7b:04:21:4e:
3a:95:51:63:93:a9:63:49:53:2f:fc:78:0b:c3:da:
0a:d1:df:cf:61:15:e9:a5:5e:07:d7:6f:f0:4b:bb:
51:8c:d3:ca:30:6b:4e:c1:23:36:63:40:7d:1b:f1:
2a:71:4c:a2:87:3d:ef:09:ad:f1:b6:4c:24:33:3f:
56:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A8:1C:77:00:4B:53:11:71:93:26:C2:F7:0F:0B:B4:9B:44:D2:01
X509v3 Authority Key Identifier:
keyid:5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:cb:3c:3e:13:1e:e1:98:e1:e2:b5:61:39:07:bc:d4:ce:29:
16:bb:d9:2a:6e:b7:61:30:73:d5:f1:79:9d:28:2f:dc:0d:fd:
6c:16:f8:48:7a:7c:97:5c:5a:a3:d4:4d:0d:23:2a:6f:86:c4:
9b:c2:1b:78:3a:c7:8f:6f:ef:88:83:61:00:c0:d0:74:57:47:
6e:9d:91:01:71:d3:62:c8:0b:c1:06:53:48:f0:e3:4e:84:c0:
a1:61:a9:8f:38:dd:30:e0:ee:18:60:cf:b8:47:0b:f7:7c:b0:
e6:53:5d:ee:90:b5:78:94:42:d1:1f:de:b1:cb:93:43:d3:5f:
0e:35:12:d6:f6:d1:5d:f1:6a:93:13:ee:cc:e8:01:66:c8:18:
df:e6:66:cd:dc:c5:e5:da:7f:2e:f3:cb:53:c4:4e:6a:e2:ed:
ab:55:07:6c:41:b9:74:51:f3:0e:c6:a1:04:84:1a:66:f6:74:
c0:73:7d:13:79:64:b7:82:c4:36:2c:fc:5b:1b:f0:2e:6f:11:
26:3a:d7:6f:48:0d:9d:8c:a5:97:28:d9:b7:cf:5c:8c:a8:8b:
bd:9f:a4:4b:29:0a:b9:58:43:a4:ca:26:08:9a:0b:06:85:aa:
6f:34:40:d0:9d:7d:db:43:94:62:7b:95:3c:e6:f6:4b:e4:01:
ad:c1:e5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:22:20 2025 by rpki-client