Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: yocjMNPCrK3wUCoc09WEv2IFUFstTsMsshKQD7r44s4=
Subject key identifier: 3E:97:17:76:95:FD:93:C4:06:F4:ED:81:CA:50:26:26:A1:57:03:8C
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 01968FCBEBA14EB819417EF33600B2FE37F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 151F
Signing time: Fri 02 May 2025 07:00:28 +0000
Manifest this update: Fri 02 May 2025 07:00:28 +0000
Manifest next update: Sat 03 May 2025 07:00:28 +0000
Files and hashes: 1: LllBFDs2gYBZI_Py2Vbfk71EYWc.roa (hash: jTm21xMBscMU1inWn9X97hwUinpmwWspFNpJiHwAkIk=)
2: wreINdEXrzvFl4TS78nixyXhWT4.roa (hash: BY0i1f9j/EXwIFUv/m6UVc3+37fV7YdiWDXciFmQ0+g=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: M72GGaQA7bA0nB5Iu6NUI7I33LgtUSHkqs6Z+U2nuAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cb:eb:a1:4e:b8:19:41:7e:f3:36:00:b2:fe:37:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: May 2 07:00:28 2025 GMT
Not After : May 3 07:00:28 2025 GMT
Subject: CN=3e97177695fd93c406f4ed81ca502626a157038c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b8:04:58:c6:fb:b4:fd:bc:b2:59:77:81:dd:
47:8d:9c:78:c5:ca:ef:00:fe:a4:3c:1a:7e:c5:52:
d2:32:91:ea:85:fe:c9:a5:30:d7:e7:41:1b:fd:42:
c9:de:9b:b5:30:8d:b6:5d:65:b0:2a:70:48:12:d1:
f2:45:19:9c:43:a7:57:07:96:3b:ab:30:de:bd:6f:
fb:12:6e:99:b5:12:bd:67:48:db:12:e6:46:f2:40:
3e:2e:79:36:be:f2:7f:3f:4c:b3:7b:2b:73:6d:30:
85:01:5c:7a:19:83:2b:5e:61:fb:c4:36:da:8c:e5:
8a:c8:61:fa:49:48:92:3d:ca:d0:7a:3c:0a:6b:80:
38:20:76:9e:d5:c1:de:3a:71:18:75:8f:20:dc:89:
7c:81:14:d4:e6:17:f2:18:25:6e:2d:93:3f:24:a3:
b1:02:56:b9:1f:73:52:ee:d9:0c:a5:db:72:a9:fc:
cf:37:2a:2c:e8:f5:39:6c:ec:aa:8b:03:90:bf:cf:
b6:17:cf:51:cd:46:96:51:5e:73:24:00:cc:11:ca:
8f:92:4d:7b:4f:fb:8e:c0:3b:cf:72:7c:dc:76:c5:
51:78:57:6e:02:71:56:af:4a:93:a3:39:09:e3:c8:
8a:9b:d2:7d:6a:dc:39:41:6f:6d:53:b6:cf:f4:23:
98:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:97:17:76:95:FD:93:C4:06:F4:ED:81:CA:50:26:26:A1:57:03:8C
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4c:28:b0:a0:fd:47:b0:46:46:c3:6d:73:50:a3:c3:7b:0a:
00:06:cf:d0:b4:13:d6:aa:5e:b9:63:72:29:53:80:67:05:fe:
d6:cc:b5:58:3e:84:56:27:66:5f:85:e7:ca:2e:83:e0:61:52:
9d:a1:02:31:43:bb:bd:70:6d:ac:ab:45:1d:0f:d4:af:4a:f5:
f2:6b:40:81:5a:85:65:08:04:43:c2:cd:c4:45:05:88:7c:64:
38:3b:3a:32:c1:db:86:0b:0f:6d:cb:c9:83:aa:7f:ac:15:90:
e7:1f:59:ef:84:ba:1d:c8:ad:70:77:6e:67:4a:21:89:bb:ba:
41:62:3e:03:00:5c:c9:76:6f:d3:2d:22:fb:c0:4e:28:30:d3:
3d:7f:94:4f:af:85:82:35:3c:68:54:e2:8d:03:cc:30:4e:85:
78:af:4d:1e:71:a2:39:2f:13:a6:49:a5:5f:7e:ca:97:14:c8:
02:cf:76:03:77:f7:6a:a4:f7:fc:7c:f8:93:fe:01:e4:0e:9c:
8f:5e:61:89:de:af:3c:c9:7c:9a:6c:c8:4c:bb:a5:0d:f9:39:
02:19:d9:34:13:01:7a:a7:ef:7f:8a:e0:69:6b:8d:f8:ab:96:
cb:86:a6:d3:21:b1:1a:19:e3:6c:b4:46:43:c2:5f:86:3b:ba:
f0:2a:7a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:02:27 2025 by rpki-client