Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
File: x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft (raw, json)
Hash identifier: IzLOfHBOFTK+QKytavDjvZbn1mzG3SCC7c6PaIvxhf4=
Subject key identifier: C7:3B:7A:CE:7D:5D:AA:ED:ED:D1:95:86:2E:33:85:3C:1B:95:20:13
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial: 019677C3D19C739DE121BA8DFEE14909C811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
Manifest number: 1313
Signing time: Sun 27 Apr 2025 15:00:43 +0000
Manifest this update: Sun 27 Apr 2025 15:00:43 +0000
Manifest next update: Mon 28 Apr 2025 15:00:43 +0000
Files and hashes: 1: BmvH7Z7uqcJeleMQ8G7clQImys0.roa (hash: lHLdYcAsPsm30xzIk5bUgfaHNZnvFrDG5BK0e9ZCPyo=)
2: x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl (hash: drR7Z/oNUmx9wFYgdcC9XXvSCa+dWWOF1lrFsFHinmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:d1:9c:73:9d:e1:21:ba:8d:fe:e1:49:09:c8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Validity
Not Before: Apr 27 15:00:43 2025 GMT
Not After : Apr 28 15:00:43 2025 GMT
Subject: CN=c73b7ace7d5daaededd195862e33853c1b952013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:99:ae:66:cf:31:5f:de:87:44:18:a5:5b:
33:83:0d:43:92:fd:a2:50:8a:15:72:74:25:f6:ca:
e5:d3:fc:5c:e2:99:72:fc:d3:f6:02:02:95:8f:32:
aa:51:7c:51:90:90:56:e9:fc:66:25:4a:91:bf:05:
89:0c:f3:04:29:5f:f3:14:95:ca:aa:52:92:d9:da:
8a:d9:74:a7:6d:64:3c:ee:4e:2d:bd:0f:8c:6f:be:
9b:e9:ca:5f:cd:8b:32:e3:a1:f0:0b:13:9d:d4:1e:
2f:03:e1:dc:f9:39:f4:06:33:a3:65:94:e2:be:21:
c7:3d:81:d3:d7:86:02:cb:96:6b:4f:83:39:11:0d:
3f:39:3c:5b:2a:26:f1:f6:a5:a0:8b:14:ec:75:c1:
a4:6e:7d:55:b8:13:99:24:90:de:38:16:6e:f7:fc:
0d:49:b5:d3:2e:a6:f3:ad:75:26:6f:20:14:d1:8b:
45:6c:58:ae:a3:bb:fc:d4:c7:8b:a9:00:a5:15:c5:
76:d6:1b:86:87:15:70:b2:dd:49:54:1c:46:c1:0a:
93:c2:57:a4:da:d4:bc:40:ff:43:e9:bf:5c:b2:a4:
83:da:28:6d:ab:66:dd:e1:ec:23:57:a3:c6:a8:bf:
3f:62:46:4d:f6:d6:58:59:3a:f3:b4:64:3f:02:22:
34:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3B:7A:CE:7D:5D:AA:ED:ED:D1:95:86:2E:33:85:3C:1B:95:20:13
X509v3 Authority Key Identifier:
keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c4:fe:80:07:7c:9f:de:e2:52:b4:ad:23:79:18:14:50:53:
4c:9e:11:51:42:28:70:15:61:fe:96:4a:a0:f9:21:4d:ab:fe:
ad:01:a6:5e:85:36:fc:64:39:f7:b1:97:be:c9:ca:1a:a5:35:
1f:2a:89:37:5d:1c:47:50:a2:b1:aa:cd:35:cb:38:60:38:9d:
6f:32:af:ee:be:c0:3d:90:f4:bd:57:69:2a:a5:e2:e2:fc:45:
f5:84:ab:0e:16:fc:05:2b:7e:a3:ca:33:6b:92:dd:8d:38:c9:
78:29:25:74:29:0b:03:87:a1:07:69:cb:6f:9b:52:78:a0:58:
94:1f:1a:1c:01:13:61:57:dd:ea:24:ea:e1:0c:f8:12:89:d8:
b4:0c:5d:c2:be:4a:16:70:a9:5f:dd:b5:db:b7:65:dc:ff:6c:
d4:bf:34:96:55:84:1e:5d:ef:92:a4:55:72:6b:a0:87:f0:ce:
41:1c:53:54:f9:44:20:bd:ff:fb:17:3c:af:29:57:71:2f:1b:
4d:73:69:a9:20:51:81:19:f8:3b:6e:c2:b4:04:b5:02:fd:19:
ca:37:aa:37:93:a3:e7:04:d4:52:24:cf:2b:98:02:6a:07:09:
5b:4c:3a:0c:fc:84:38:b8:24:2e:40:80:d1:1f:ee:07:c7:ae:
bf:46:17:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:11:38 2025 by rpki-client