Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
File: xTtM8KdHHwAPilagSbFjlnzDvZk.mft (raw, json)
Hash identifier: VTqmGfGXIHlSrrtxYeS6Dk4DKUrNbg1idoZcJ4oTIk0=
Subject key identifier: 70:50:7B:9C:DE:87:A3:F4:70:83:78:65:5F:32:AA:EB:B3:80:CB:5D
Authority key identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
Certificate issuer: /CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Certificate serial: 0196759E35F7433F819EF90628C8935521CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
Manifest number: 142D
Signing time: Sun 27 Apr 2025 05:00:24 +0000
Manifest this update: Sun 27 Apr 2025 05:00:24 +0000
Manifest next update: Mon 28 Apr 2025 05:00:24 +0000
Files and hashes: 1: 602Z4NiRUVoUbtoD2a1_hKZKM5w.roa (hash: 3NgwOwVM6/UTanDsySZE3RJFx37z0Ri4EFGUt0jIqTA=)
2: xTtM8KdHHwAPilagSbFjlnzDvZk.crl (hash: dIKvuOEuzh2iSrA985ZbjWhGSzk+Pv9o6pBVHbqoe7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:35:f7:43:3f:81:9e:f9:06:28:c8:93:55:21:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Validity
Not Before: Apr 27 05:00:24 2025 GMT
Not After : Apr 28 05:00:24 2025 GMT
Subject: CN=70507b9cde87a3f4708378655f32aaebb380cb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:fa:16:00:90:77:7c:d3:9f:9f:b8:55:0e:
1c:73:6e:9a:79:12:f2:c2:e1:d0:b9:ca:91:56:80:
48:73:8f:76:ab:53:e9:0e:c4:2e:c2:2d:90:21:55:
b6:cf:96:a1:2a:89:e5:3d:da:c0:74:64:d4:9d:2a:
7b:66:74:c6:65:5d:9d:d6:a5:3b:56:ee:3a:55:a3:
ae:3d:d5:71:9c:7b:f4:30:c9:ba:9f:ef:67:27:61:
d3:94:80:d6:03:4d:3a:1f:05:71:a0:83:af:16:60:
55:60:97:74:9d:ec:29:03:63:f2:1f:aa:60:6f:0e:
e1:7e:a4:81:6a:3c:e2:14:f9:e1:c5:fc:fc:60:79:
e0:43:fa:78:fc:07:05:77:11:49:ef:63:12:3a:97:
c0:92:ba:6f:f4:44:9c:5f:63:06:1d:e9:22:ad:da:
aa:fc:3d:f2:85:4f:78:20:4b:5a:ce:2b:4b:b7:8b:
58:6a:45:0b:b2:27:3f:6a:2b:50:57:1a:73:ab:72:
0a:8b:41:8c:a1:6a:06:fd:48:94:7a:90:6d:9a:7c:
a4:7b:93:37:7f:73:48:3d:41:6e:d0:7c:84:ea:51:
d0:16:4c:84:f4:b5:90:c8:cc:31:2f:bf:d2:f6:19:
ea:97:54:6c:74:bb:f5:80:a5:43:ac:4c:76:3a:ab:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:50:7B:9C:DE:87:A3:F4:70:83:78:65:5F:32:AA:EB:B3:80:CB:5D
X509v3 Authority Key Identifier:
keyid:C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:88:28:0b:2d:96:ae:c7:54:1f:fe:a0:5a:03:88:42:1b:f6:
4b:41:dc:7a:2c:1b:bb:34:c7:99:ba:98:4c:01:2e:6a:31:00:
da:1b:05:a0:bb:e8:20:b1:4f:f1:e9:53:f1:8c:d4:81:6d:fb:
5a:d4:a2:d6:c0:64:4d:61:28:a4:d0:ae:c4:34:cf:fd:42:57:
37:41:28:1f:9b:5b:fd:28:69:00:b1:3c:b1:91:22:03:aa:36:
9c:d2:83:94:b2:b5:9a:ab:f5:eb:30:e9:c7:14:d8:a4:39:07:
7b:40:c9:89:88:d0:f5:50:c1:e4:84:45:6f:a6:5c:52:76:8e:
55:35:64:11:7c:87:c4:de:e9:a4:6a:fd:8e:8c:c0:54:a1:dd:
07:be:15:b6:41:bf:3c:89:90:f2:6e:c0:2b:b3:6e:4a:05:12:
aa:e9:cf:3f:e7:2b:8d:11:a9:49:00:05:80:b6:ce:4c:3f:5a:
11:5d:68:4b:92:48:1d:f0:23:8b:4b:8a:22:be:2c:63:37:c3:
4b:f5:b4:2c:38:dd:e6:38:9f:e8:0d:5a:37:da:e0:66:7f:78:
44:b7:a9:45:ef:78:3a:6f:d7:dc:70:27:21:1c:30:92:a6:fc:
93:ad:d0:ac:ae:69:ec:25:0c:81:34:ed:91:bf:1e:27:64:51:
2c:a5:48:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:32:08 2025 by rpki-client