Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File: xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier: D3astUMX0lwHcIJUevgjNBLQHDIcCuLiJTCiSqZYz9k=
Subject key identifier: 9B:DB:A0:3D:EC:D0:C6:B3:B0:14:AB:12:05:F7:2E:EC:07:34:4B:EA
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 0196B8236444C9A540F8BADE7EEBFB59470A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number: 0629
Signing time: Sat 10 May 2025 03:00:49 +0000
Manifest this update: Sat 10 May 2025 03:00:49 +0000
Manifest next update: Sun 11 May 2025 03:00:49 +0000
Files and hashes: 1: Aoo5pP4SL3hcDLyAxdYyQ03odMQ.roa (hash: gnOrhL51cXDCcbQfIiGI9Yhz0bbwGaTW30bKBViHRo0=)
2: EEaNcgsaMR5H4thhS3cGx36KL_o.roa (hash: vkGJSlE6cWd0O4qs1ZUPczrNu5F/ToV9OcI6aqWoEJI=)
3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: iTUN8ldun52OzGteR/Teid3EGy9+sc52+TrY4ruTc6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:64:44:c9:a5:40:f8:ba:de:7e:eb:fb:59:47:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: May 10 03:00:49 2025 GMT
Not After : May 11 03:00:49 2025 GMT
Subject: CN=9bdba03decd0c6b3b014ab1205f72eec07344bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:27:be:8b:24:90:7b:74:bc:7f:48:76:2d:
8f:1c:c4:0b:62:09:de:dc:58:f1:a6:90:43:85:f7:
f8:b3:30:1b:55:4e:93:42:32:b7:95:68:4c:b8:79:
fe:66:80:0d:9c:f2:3c:9d:0e:b3:5f:f3:ac:b7:b4:
14:6f:b3:d2:0c:9b:66:9b:cf:b3:46:b4:d4:a9:9d:
ab:51:23:98:3c:c8:33:b4:ea:f7:51:f7:e1:f5:41:
bf:18:9d:56:f7:71:71:08:90:a1:04:ee:2d:c4:12:
b3:51:ac:e4:c3:42:f7:17:dd:91:37:ef:e9:d0:8e:
4e:e3:79:2b:5b:73:5f:5b:4f:cd:e3:2b:31:ba:db:
84:08:55:7e:39:8e:36:fa:bc:af:27:8a:6e:60:6a:
e1:7f:10:25:be:e1:a8:b8:22:64:79:f7:4f:b2:a7:
5a:ed:be:ee:63:ea:f2:81:f7:87:dc:8a:f2:98:4b:
dc:ee:fa:6e:f2:a4:6e:eb:8b:4f:4e:35:77:be:cc:
be:ee:25:eb:26:b6:2e:5e:5f:50:e5:f8:44:28:d9:
c4:c9:36:68:ed:a3:f0:f4:d2:b0:0b:16:1e:95:a5:
98:23:8c:f6:b9:d8:b2:98:6c:ed:b8:f7:71:33:88:
a0:5e:f6:90:c3:4f:43:4d:7d:f0:9f:4b:33:5a:71:
25:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DB:A0:3D:EC:D0:C6:B3:B0:14:AB:12:05:F7:2E:EC:07:34:4B:EA
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a8:cc:99:e1:e9:4d:1f:5d:e8:37:b3:7f:fb:61:b3:b5:7d:
ee:2d:66:50:1a:19:1b:cb:52:ae:c0:7d:07:0a:ab:59:32:68:
41:a7:56:72:21:fc:7e:d4:d3:1d:ab:42:9e:91:84:d0:0a:6b:
be:04:46:b1:9b:53:ee:d1:37:76:a5:c7:f1:ff:e4:ca:26:fd:
d0:33:94:ac:e1:34:60:b9:0f:1a:1e:a3:42:62:1e:c7:eb:26:
a3:46:33:08:0d:26:24:47:ca:43:5c:8f:fa:02:40:8d:d1:f9:
f9:4d:81:9a:93:8d:a9:d4:e9:9b:40:ba:d8:7c:e6:6a:01:da:
c7:97:70:5a:d1:76:a6:f2:8f:8f:e9:e0:ed:8d:7a:03:33:a1:
f9:8e:b8:b6:1b:bb:d2:30:b0:c6:42:3a:ec:c1:fc:99:47:41:
4b:48:7b:4f:c4:d8:25:b1:0e:d2:9f:ec:c1:d9:05:2d:60:f0:
f9:36:5a:1b:f3:8b:ae:a0:30:53:a1:32:b7:64:82:c9:bf:6b:
f3:7b:61:9a:1f:f1:af:de:e6:65:0b:e8:7a:78:da:01:1e:dd:
b7:12:6c:72:13:55:61:08:ee:df:e5:5f:1b:52:d2:a9:2c:6e:
61:19:ec:98:8a:0c:07:e7:f3:5f:1d:1f:c6:c8:a8:22:03:74:
a0:3a:a4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:59:04 2025 by rpki-client