Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
File: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft (raw, json)
Hash identifier: O28Beh7VtbRxOro0Cypg5TuNE/pLqFtuoh19r7Ah4Sk=
Subject key identifier: 11:71:D1:98:8E:A7:56:19:AF:1F:20:1E:2F:5B:70:C3:4D:4F:62:55
Authority key identifier: C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27
Certificate issuer: /CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
Certificate serial: 0196808FAF3A1E97095BF67B5FC4DA18C58E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
Manifest number: 0480
Signing time: Tue 29 Apr 2025 08:00:22 +0000
Manifest this update: Tue 29 Apr 2025 08:00:22 +0000
Manifest next update: Wed 30 Apr 2025 08:00:22 +0000
Files and hashes: 1: e-ekxZnIJuci57HrEPz7zGue28s.roa (hash: 8H4l0N/E0NCOJoBHvZIBH7Jz+P9G/e+mdO0E4zzVLoo=)
2: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl (hash: bwnT+bGxuboUf/nZvZFHGx//d0HP5SN5LPMR+CO/JUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:af:3a:1e:97:09:5b:f6:7b:5f:c4:da:18:c5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
Validity
Not Before: Apr 29 08:00:22 2025 GMT
Not After : Apr 30 08:00:22 2025 GMT
Subject: CN=1171d1988ea75619af1f201e2f5b70c34d4f6255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:bc:68:bc:35:5f:af:0e:fd:43:40:a4:f0:
04:e6:48:4e:55:b0:68:b3:06:48:05:30:43:83:ec:
4e:0e:c5:39:cb:03:73:53:35:2d:ef:44:5c:6a:4d:
24:f5:89:21:94:38:2c:ef:64:67:f3:d4:34:0e:85:
42:16:20:7f:88:52:32:ab:a7:4c:ba:20:f7:00:a2:
e2:ea:17:45:f3:f9:8d:a0:22:9b:6d:7b:82:d6:39:
b8:be:7d:16:e0:79:88:53:88:6a:3f:46:0c:9c:22:
9d:f5:82:75:ba:7a:6b:39:03:4f:f2:e8:66:d9:fe:
fc:18:95:7c:6e:77:b9:90:a3:69:1d:d2:f1:43:24:
6f:5e:e7:e6:42:75:ba:2e:17:d0:7d:f4:d2:ff:af:
3c:28:e9:79:9e:6e:39:1b:27:18:bb:41:8e:7f:1e:
bd:d9:28:2e:b6:3a:37:c8:a7:1b:fe:be:bc:84:7b:
49:85:00:1a:16:45:31:06:42:b2:0f:92:d0:82:9f:
5c:33:09:72:bb:d0:04:45:68:ad:6a:95:47:57:2f:
76:a4:5d:dd:a1:a4:14:2a:3f:28:01:3b:34:7a:3c:
87:e1:46:9b:83:a6:98:db:6c:76:7a:b6:9f:b2:42:
03:97:f5:2f:c4:d4:45:c4:b1:6f:e7:27:24:72:db:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:71:D1:98:8E:A7:56:19:AF:1F:20:1E:2F:5B:70:C3:4D:4F:62:55
X509v3 Authority Key Identifier:
keyid:C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:de:ef:fc:5c:2e:1b:66:1d:cf:74:70:30:6c:39:ea:3b:56:
81:7d:fd:4c:a7:3f:be:52:53:4e:bf:24:bc:4a:b7:2e:3c:4f:
fd:59:94:a1:0f:18:9c:a2:08:36:f9:88:ae:bc:5f:e0:82:54:
a3:f8:91:fc:b8:d0:ab:bf:1b:15:92:d2:68:07:0c:ee:4b:93:
71:5e:19:4b:c8:7b:f1:25:c6:80:d0:14:4c:7c:0d:f9:53:4a:
bd:73:72:97:87:11:3e:20:03:29:c1:53:66:07:3d:28:be:32:
ad:d4:8e:61:a9:65:02:57:5e:6c:0c:11:16:7e:59:08:8f:2a:
5d:21:6d:2b:68:40:4e:32:74:83:01:67:54:ca:2b:5c:53:94:
b7:a5:23:14:15:b4:15:8b:74:b5:aa:b3:2a:ba:72:7b:55:e0:
5c:d2:a6:a6:c8:0f:cb:9f:c3:6c:7e:61:15:1a:31:b5:c4:9f:
9e:18:ac:a0:4b:83:0e:c5:ef:f2:72:b8:22:d6:0e:7e:77:20:
10:5a:84:f2:4e:b1:a8:e3:ca:3c:a8:98:50:46:64:20:1e:0b:
50:ec:26:a9:70:c2:97:6a:3c:2e:7a:95:a7:e3:ec:61:48:60:
f1:fa:04:ea:a1:cc:57:df:79:7b:64:33:27:f8:50:a9:78:b4:
72:fa:b4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:31:43 2025 by rpki-client