Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
File: xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft (raw, json)
Hash identifier: zp37dVmaWFHxhyn751OWbS1IwvHcJiuiLVjMqbm0zQ8=
Subject key identifier: AA:63:9A:CF:A8:F8:3F:0F:91:0B:D7:78:D8:D4:BD:D6:C1:B6:C6:A7
Authority key identifier: C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
Certificate issuer: /CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Certificate serial: 019678D62620244EDE415942E3E62BA0A730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
Manifest number: 110C
Signing time: Sun 27 Apr 2025 20:00:22 +0000
Manifest this update: Sun 27 Apr 2025 20:00:22 +0000
Manifest next update: Mon 28 Apr 2025 20:00:22 +0000
Files and hashes: 1: S4GEAGQpLNuwxd69ASEGW9Vms4c.roa (hash: FsqX6X9yKqotnT07LkiZuZ69e3G5OYb0RnxsqAXswi8=)
2: xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl (hash: Ss1+37x+7Hvg9AeYmaYn4JXcUriM7qvz95Sn8lIFiVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:26:20:24:4e:de:41:59:42:e3:e6:2b:a0:a7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Validity
Not Before: Apr 27 20:00:22 2025 GMT
Not After : Apr 28 20:00:22 2025 GMT
Subject: CN=aa639acfa8f83f0f910bd778d8d4bdd6c1b6c6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:1b:ea:be:2f:2f:f5:d1:15:36:d4:49:a7:
e5:d8:d7:8b:87:03:55:20:e9:f7:c7:b8:41:ba:bb:
26:14:62:8e:c6:f2:e8:c9:05:08:d4:69:a1:3e:b2:
73:e1:8a:86:06:06:95:b3:6a:27:e0:22:4e:38:3c:
fa:21:b8:a4:70:4a:1a:40:13:bf:00:e1:4b:c2:1b:
39:be:5e:d9:ac:0c:d3:e9:c9:63:fa:5e:7c:1c:a0:
3e:95:33:f2:fe:84:75:ea:ec:6a:f6:c0:a5:e2:7a:
1a:61:8d:8e:ab:26:d6:e3:ba:06:d5:01:ca:0e:7d:
ce:dc:1b:54:b5:72:4e:4c:74:d7:6e:6c:fb:b9:a5:
b3:86:7e:47:ff:71:55:a1:64:20:2e:50:aa:9c:31:
11:8a:c5:85:f3:57:b0:15:42:ae:bb:5e:06:c1:eb:
21:b5:68:48:e9:3a:2f:41:63:d0:04:37:0f:e8:6f:
49:78:fa:60:12:31:6a:18:a0:07:91:5f:d8:4b:65:
9c:df:12:2d:f9:2b:16:20:21:96:d6:7f:44:6a:7d:
23:67:5a:03:4a:d2:15:41:a0:aa:09:7d:d1:df:3a:
6d:60:6e:7f:8c:f5:6d:50:3c:c7:a8:c8:75:f4:f2:
22:d1:2c:46:12:4a:96:da:34:ea:e4:92:54:57:3f:
ca:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:63:9A:CF:A8:F8:3F:0F:91:0B:D7:78:D8:D4:BD:D6:C1:B6:C6:A7
X509v3 Authority Key Identifier:
keyid:C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:13:54:c8:57:04:72:67:11:8a:ba:2d:96:e9:81:c1:53:8d:
7c:6f:af:92:47:a8:ab:f5:6b:36:88:32:ad:94:6e:98:c5:15:
a0:f7:d9:9e:bd:49:15:a8:8c:c3:35:ff:76:48:e8:5f:66:17:
f5:e5:60:f8:9d:3e:56:f2:ff:99:99:39:45:f4:a5:44:5a:a3:
9a:43:e0:e4:ef:20:2c:80:f7:96:98:30:3d:2a:0a:63:6c:4d:
b4:d4:0e:c0:84:c5:7f:bd:b4:a8:5c:7b:1e:65:9e:3e:aa:df:
91:e0:ad:27:73:46:24:b9:87:1c:22:74:42:bb:2a:49:47:f4:
20:05:d8:42:91:12:d1:b6:14:a5:4b:1a:d9:2f:14:96:7d:84:
a5:de:35:02:d0:21:83:ee:46:60:38:86:a4:ab:f2:13:da:ed:
18:21:c7:b1:56:ba:a9:be:a1:fa:20:7e:30:22:ca:28:25:13:
a6:82:6a:5c:90:d3:ad:53:57:0a:e7:d2:c1:77:20:94:1b:9c:
4e:97:9a:66:46:66:d5:9e:e0:31:36:80:06:48:ee:d3:3d:8c:
8d:15:a5:6d:a1:13:30:43:34:b4:a2:24:50:ec:cb:8c:b9:a7:
2c:b1:4f:d4:ea:c7:99:e8:ad:c8:3d:c3:a4:f6:8c:4c:7d:2e:
e5:70:01:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:15:09 2025 by rpki-client