Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: xrqlOxGbg7PFP5OZICcLoIqvk1Kb+FxokHir0ulWmOE=
Subject key identifier: EA:B5:2E:22:22:E2:4F:A0:FA:B9:08:99:C2:22:DB:37:41:F3:3C:98
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 019673E69E74BB0F45C59B84D98D3FCEFA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 0F3F
Signing time: Sat 26 Apr 2025 21:00:15 +0000
Manifest this update: Sat 26 Apr 2025 21:00:15 +0000
Manifest next update: Sun 27 Apr 2025 21:00:15 +0000
Files and hashes: 1: 5kIp4bFmAr9lOCjBtU4-CSX7D0w.roa (hash: zS6XZLioq/dFM9rTCOe5dC9siPtnmQmcYc9glHbFesE=)
2: WZoVc8N-YD-8FMKAITneTMD8_4k.roa (hash: d546sm0t0rb46HppUnfY7MCyS/rnnp2kV23n3HY9/us=)
3: bZJxdCs0gWqYryxwQS8EGlLZ93c.roa (hash: ZMF+prTjcHa6DFcnagp286MUC0TlcS1uVKhgY1MMJNc=)
4: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: CgqndBi0Pq6BijsUOO9WlhlBWSw1WPo7Voh2qmIkLAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:9e:74:bb:0f:45:c5:9b:84:d9:8d:3f:ce:fa:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Apr 26 21:00:15 2025 GMT
Not After : Apr 27 21:00:15 2025 GMT
Subject: CN=eab52e2222e24fa0fab90899c222db3741f33c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:d5:14:72:41:81:f6:1e:ec:65:a2:52:b9:
11:53:08:9f:3b:6a:6d:1c:a3:51:ba:6c:2b:79:ee:
2b:37:86:10:53:fa:5f:70:7f:3b:04:be:14:5c:07:
1e:ff:47:f5:92:63:cd:70:7f:4a:0f:e9:ca:2e:35:
27:3e:d3:b0:30:03:19:60:e6:07:cd:fd:2f:ba:9d:
b5:d0:a7:ad:c2:ed:5f:14:95:1f:b4:33:bd:d8:ed:
a4:1c:86:b2:44:bc:69:a6:9d:d1:33:1c:26:0b:0d:
09:45:05:09:4a:7c:95:b7:0c:25:57:fd:c6:11:77:
e1:f6:f4:45:98:1d:ae:d3:e8:06:0e:fd:7e:1f:02:
ba:cf:a5:c7:21:0a:d7:e2:70:6d:f1:04:5d:e5:0e:
ed:dd:d8:93:19:d2:e7:42:f3:97:bc:bf:82:59:e3:
bc:ed:28:f9:b1:e9:18:2b:75:30:cc:de:75:e8:c5:
52:a9:bb:78:b3:80:90:0e:50:c2:84:48:78:7c:f0:
d4:ed:a6:7b:2b:67:87:0f:40:ff:1f:30:9a:aa:16:
f0:24:b3:83:04:8a:5f:15:36:23:58:98:57:d5:c9:
b0:a9:39:a5:7e:80:ea:8e:76:d1:f6:f7:42:3d:55:
3a:e8:3a:b8:1d:3a:5e:71:bf:05:a5:c5:e8:9e:ca:
78:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B5:2E:22:22:E2:4F:A0:FA:B9:08:99:C2:22:DB:37:41:F3:3C:98
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7d:eb:d6:e4:c9:6a:df:6f:21:44:5b:e1:bf:57:a3:a5:82:
ff:97:f4:92:d7:c5:f6:92:37:ad:e4:ba:af:bf:03:c2:f2:8e:
42:0a:ef:3a:54:a7:21:da:df:fa:cc:4e:67:68:6a:82:4e:dc:
d6:c7:4a:b5:bd:88:f1:f3:58:ad:18:a4:3e:08:63:05:f2:f3:
15:ed:f5:e1:92:9f:21:0a:3a:55:d7:91:ac:3f:ba:77:27:9d:
5c:72:6a:06:66:cb:9e:d7:49:ba:b6:d6:82:4b:cc:da:c9:e5:
f2:6d:bf:48:be:40:5c:65:21:11:7f:b5:d7:2b:03:7a:0c:5a:
ba:e4:9d:23:3d:d1:8d:5d:9c:98:c0:a7:f4:b5:2e:bb:0d:f8:
1f:b3:f6:5f:1b:a4:f5:30:e6:df:f4:dc:4f:cc:ed:de:57:5f:
90:18:04:cb:42:8d:18:8f:c1:ee:d0:f9:4c:85:04:a7:45:1e:
f7:9d:55:2c:78:07:51:22:ba:c8:0c:1f:fd:a9:7e:e2:92:08:
c0:c6:91:6b:fc:85:29:7e:b2:96:8d:bd:80:97:82:74:7e:cf:
92:df:0e:36:a3:64:f0:ca:60:b8:bf:e8:14:66:23:d5:da:23:
7c:a2:42:ca:5e:53:76:19:f6:10:f0:c6:ab:57:01:88:b6:d0:
63:23:09:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:08:43 2025 by rpki-client