Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
File: xyCKi4W8uAfK1kE4VDJjrLIERIs.mft (raw, json)
Hash identifier: ujlUfTzUswL3wvquVxZUwm6/MM4t5CEhT0yb16PQPH0=
Subject key identifier: A6:97:85:C0:E9:F8:7C:AC:02:A8:1C:0B:5A:6A:57:63:CC:2F:A3:AB
Authority key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
Certificate issuer: /CN=c7208a8b85bcb807cad64138543263acb204448b
Certificate serial: 01968AA5D75EC11FB6A69128B7467FA6EB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
Manifest number: 0506
Signing time: Thu 01 May 2025 07:00:46 +0000
Manifest this update: Thu 01 May 2025 07:00:46 +0000
Manifest next update: Fri 02 May 2025 07:00:46 +0000
Files and hashes: 1: vH1JJD9D24fFC1pA8PsnKijiP6M.roa (hash: i0B3P6h6TyOcZqs+27w3JzYg10hL8qvRbmomwjVt9VM=)
2: xyCKi4W8uAfK1kE4VDJjrLIERIs.crl (hash: gR7l2y24/5ckQjxrq+Ndc8xZRthB5Q0bnz48CK669ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:a5:d7:5e:c1:1f:b6:a6:91:28:b7:46:7f:a6:eb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7208a8b85bcb807cad64138543263acb204448b
Validity
Not Before: May 1 07:00:46 2025 GMT
Not After : May 2 07:00:46 2025 GMT
Subject: CN=a69785c0e9f87cac02a81c0b5a6a5763cc2fa3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:10:01:c7:a9:d8:3b:af:df:53:44:64:83:
82:80:be:9f:47:d1:bc:66:e2:0d:29:6b:9c:59:08:
03:58:95:d3:91:bb:b1:f8:f9:cc:17:4e:d9:3d:3f:
93:05:7a:b1:b0:a0:f2:1a:a1:bf:cf:08:0b:bf:19:
bb:ce:1e:e9:e7:2e:05:19:dc:c5:37:67:97:42:6c:
83:35:3f:cd:c6:fe:ea:4e:d4:be:59:25:a3:e2:fc:
c0:41:82:ce:1c:f0:9a:64:c6:78:a1:54:fe:9f:4d:
0b:43:f3:52:d0:29:43:fe:92:63:1b:ad:6d:99:62:
be:a0:50:7b:99:e7:c1:b6:0c:9e:8e:ef:59:5f:e3:
cb:f7:74:44:78:0d:f4:9c:49:8c:65:ba:22:3f:45:
46:d0:02:51:02:bb:24:0a:18:aa:0b:9b:39:e1:ad:
e0:50:b9:12:fc:a8:06:e6:1c:b0:a5:17:b0:35:9e:
2e:f6:b0:40:b1:37:22:49:bc:8f:e5:6f:ae:4a:72:
3b:1d:db:12:60:d6:e5:62:65:f6:a5:49:1f:a5:7d:
5a:40:7c:38:e1:7e:80:e9:0e:3b:8b:da:fc:e0:4e:
7c:93:ae:76:19:ee:df:40:52:d1:1c:f6:9a:d5:b1:
d3:ac:8b:1e:b7:48:1c:fc:a5:97:a9:49:11:bb:ed:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:97:85:C0:E9:F8:7C:AC:02:A8:1C:0B:5A:6A:57:63:CC:2F:A3:AB
X509v3 Authority Key Identifier:
keyid:C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:67:40:a9:57:7b:82:cf:54:25:7b:8e:28:5c:8b:8b:0a:64:
ab:29:47:9e:a4:ee:6f:59:d4:2d:8f:c4:00:9f:ce:07:8e:9d:
90:26:3d:77:03:b3:89:23:1b:df:4e:4e:27:b7:86:04:2b:dc:
23:7d:bb:aa:da:1a:d2:f9:85:43:df:d0:3a:b6:53:b0:54:5a:
4b:a4:1b:0a:99:9b:57:c3:15:1a:5a:aa:89:17:2a:e7:0f:06:
f8:51:ad:d0:fe:52:e8:c3:6c:dd:2b:4d:dd:e2:1c:fc:99:b3:
bc:06:d9:c9:53:d6:72:86:49:c1:b9:0f:ec:8e:67:25:ef:70:
80:18:a5:6d:69:26:66:bf:86:c8:54:7f:b8:ad:e9:d6:3d:38:
d4:6c:ad:df:a1:22:5f:63:9b:0c:b5:de:74:b0:b3:32:bc:08:
5b:32:32:25:08:dd:69:18:35:66:be:17:f1:5d:26:15:87:e2:
cd:74:9e:20:0a:04:f4:48:ef:30:8e:5b:9c:39:75:cf:58:3e:
05:9e:f8:10:3e:aa:01:1b:7d:c5:59:47:2d:a3:f1:26:09:f5:
f2:4c:4f:7c:c7:07:24:51:18:32:46:8e:4e:0a:aa:e7:a6:68:
f4:7c:05:b4:b8:5c:eb:2a:70:e5:5b:1b:89:28:cb:00:cb:52:
c3:71:9e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:08:36 2025 by rpki-client