Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
File: x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json)
Hash identifier: r7L4Jdn/eg61p3+nteTN3nZxEgcP32BSZl+VGoUYuR8=
Subject key identifier: C2:7B:E1:DF:3F:9B:B4:2A:17:1A:D3:BF:B5:16:82:28:E0:28:DE:5A
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial: 01967643306E05E3160BBAFBFE9CF680AA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
Manifest number: 1221
Signing time: Sun 27 Apr 2025 08:00:36 +0000
Manifest this update: Sun 27 Apr 2025 08:00:36 +0000
Manifest next update: Mon 28 Apr 2025 08:00:36 +0000
Files and hashes: 1: 1-FIWmYuNIJI-Cwk15dhF5oxGQws.roa (hash: 5WgQd9Yh0UTrO+r9EgLHuyHwMYhN32NKq3EDRy9j2p0=)
2: 7yURIEiYXPhLVZDi97wbUcsfcDY.roa (hash: Ol8VywPbGCR2MgIy9CM4htLL8MW0LNUUW5y21OBGiZM=)
3: I2QulkDn2KJ47c0S4-OMmVLx31g.roa (hash: 6xzBl4bZ4a5rXXVvnxUC4raf2cq3cMarrtfKS85kss0=)
4: RipMkwup9NsgAPIlQi1_XcX5wqM.roa (hash: PKXzaXWv76nde6R//GV8jsOM053aaHLrBAjby7FXNqk=)
5: b4vNMGbRo2o67bz3u22uz2ItyKI.roa (hash: F56Nx008CaMRp5Gdw8I8PExmWIZfZ1jjPIYQMLnTJ8s=)
6: hyGdIxYjhpqU0-02Qe9kMQYj3as.roa (hash: 9uhvciX7Lxjh2PeJ2H7HVv5jBuVg9P3AFweq88tYGFU=)
7: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: fjzyMsmpedn2+wQXGA7Yr93Dn23GuOD+nUiL1yYV/lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:30:6e:05:e3:16:0b:ba:fb:fe:9c:f6:80:aa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Validity
Not Before: Apr 27 08:00:36 2025 GMT
Not After : Apr 28 08:00:36 2025 GMT
Subject: CN=c27be1df3f9bb42a171ad3bfb5168228e028de5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:27:35:bd:fe:bc:05:b0:dd:b2:74:8c:31:74:
b4:b3:2f:69:0b:bb:24:02:6c:0b:cb:ae:22:cf:13:
f5:a6:07:e9:a8:9c:09:fa:5b:7d:27:22:f1:4e:36:
26:48:e2:5c:e6:7a:69:35:80:71:46:04:32:ba:39:
ca:0d:43:06:72:81:cb:be:7a:e5:91:d4:d4:64:6e:
59:7f:94:31:1f:cf:51:b6:97:80:69:16:cb:e9:68:
2f:de:ca:ae:dc:eb:e3:a0:65:7b:b4:26:a8:35:58:
e3:d8:47:96:2b:4b:7a:bb:c3:6b:c8:74:fb:0d:98:
02:dd:f7:6c:c2:1c:1f:84:8a:f4:8e:a4:e2:ce:c5:
bf:7d:19:4e:9b:c9:9f:24:40:3b:7d:73:99:e7:30:
5a:99:81:f3:ed:99:9e:90:e0:c1:d5:98:8d:65:e2:
47:9b:50:5f:5b:d9:db:5a:5f:93:ef:da:b7:fa:3a:
9f:43:b9:0d:2f:80:68:4d:11:d6:b5:41:1e:26:d3:
2f:2a:e0:ea:4c:b8:06:ab:93:cb:8d:18:63:a3:30:
8e:da:a4:62:56:c6:cf:06:de:09:1c:ef:2f:a0:0a:
ab:de:49:37:ef:b1:40:21:71:32:bd:59:17:22:4c:
10:d6:2d:da:64:74:31:1e:7b:e2:93:b6:1d:1e:2d:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7B:E1:DF:3F:9B:B4:2A:17:1A:D3:BF:B5:16:82:28:E0:28:DE:5A
X509v3 Authority Key Identifier:
keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:58:74:29:62:3b:b4:f9:e1:79:33:38:ee:10:56:c4:64:0f:
65:d7:16:6b:f7:8c:ac:b1:55:75:32:ca:3a:e2:ee:b5:b6:1d:
90:f4:20:9c:2e:26:ed:56:13:37:cd:0a:34:41:0d:22:0f:e9:
6f:13:f5:27:d3:e8:22:cb:24:06:51:6d:20:17:d6:4e:29:4c:
b3:6b:1e:f3:46:a8:e6:14:66:09:9f:6e:df:cd:9d:74:6a:c1:
8a:5b:87:e7:dd:a8:1a:91:88:5d:89:14:c3:10:a0:56:6f:15:
3f:75:d2:7c:14:ed:29:ec:7c:7f:c3:05:7b:2d:21:cd:77:77:
5a:40:02:b6:7d:b5:5b:ef:1e:0b:d0:78:e2:57:90:2e:d2:13:
e5:e3:05:99:f6:d8:9a:8c:d7:6e:ec:e0:6e:87:d6:f8:63:64:
6a:b7:8a:57:55:7d:8b:b2:ef:12:4e:46:49:c4:96:11:84:ac:
04:99:3f:41:76:56:35:a1:12:e1:74:86:c8:02:57:cf:b0:ac:
c5:e9:9d:87:c5:ee:7f:ee:b5:a8:3c:22:a2:f0:86:70:f7:b6:
32:cb:df:7c:4a:4e:07:97:15:8a:00:91:d0:87:71:51:0c:86:
d0:ea:6c:d1:fa:c1:e0:38:a7:6b:91:09:0a:73:14:44:43:d1:
b6:79:31:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:18 2025 by rpki-client