Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
File: X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft (raw, json)
Hash identifier: STn8WT0wv/4k+6aGOiMCZDUzYgCoV33Vm6f9d3nKb+k=
Subject key identifier: AF:74:8C:F7:E9:C9:E7:AD:D0:02:B4:58:BA:2E:21:DA:52:B3:8C:78
Authority key identifier: 5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39
Certificate issuer: /CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
Certificate serial: 01969FAD2CCEBC35179EC2840A5991DFA80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
Manifest number: 035A
Signing time: Mon 05 May 2025 09:00:48 +0000
Manifest this update: Mon 05 May 2025 09:00:48 +0000
Manifest next update: Tue 06 May 2025 09:00:48 +0000
Files and hashes: 1: Tadh_qpMdGoIN33tMjbACuKsZOE.roa (hash: 9pXxqdk2JpjcdUH8kyShVqd2tJEpgHvO7OyF9bO5c78=)
2: X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl (hash: wsZB8Si8MLfzbQpEAWGsqANdNnws52Va/iSEsrCspEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ad:2c:ce:bc:35:17:9e:c2:84:0a:59:91:df:a8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
Validity
Not Before: May 5 09:00:48 2025 GMT
Not After : May 6 09:00:48 2025 GMT
Subject: CN=af748cf7e9c9e7add002b458ba2e21da52b38c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f8:b4:82:2b:ae:bd:08:9d:cf:ce:53:e6:14:
49:4a:86:19:db:d4:84:da:dc:cf:16:58:3e:26:77:
d3:c4:7d:30:70:76:9a:e5:bf:1e:21:b4:f9:f1:0d:
33:17:6b:3f:39:b9:1a:23:b8:3d:05:77:4d:18:17:
65:ef:aa:52:24:25:3f:6b:31:dd:0f:1f:43:9c:57:
33:9f:58:10:0c:ef:f1:b3:97:95:12:2e:8a:79:42:
c0:f4:e4:64:7d:4b:a0:32:46:ee:dc:2f:55:22:38:
d4:71:29:76:5e:4f:86:d6:66:c2:6e:c5:e0:98:a1:
bf:4a:b0:ed:46:ad:2c:85:38:b3:4a:61:73:43:09:
0d:31:18:96:db:ef:2d:dc:5a:3e:9a:20:d7:c9:b2:
6a:dc:9a:71:7f:80:9b:11:c2:91:d9:72:b8:eb:86:
05:37:e3:da:2e:a4:06:56:54:c4:53:3a:30:aa:6c:
b8:b3:f8:c1:9c:de:e7:e1:04:fd:5f:01:5c:fc:55:
24:5d:3e:e2:44:1d:0d:9d:54:61:36:71:f9:b8:5f:
0c:ae:bb:ec:4f:4e:31:96:5a:57:a9:c3:9f:7a:c8:
e2:15:8a:a2:39:22:fc:b2:5f:38:6a:ad:a8:51:09:
66:58:f4:18:b6:8c:28:cf:94:d9:63:27:08:64:f2:
cd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:74:8C:F7:E9:C9:E7:AD:D0:02:B4:58:BA:2E:21:DA:52:B3:8C:78
X509v3 Authority Key Identifier:
keyid:5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b2:43:e0:3c:e2:74:51:ab:5d:f2:6b:4f:90:0e:05:b3:c9:
e4:b6:6b:ad:cc:16:ed:f8:59:9f:45:b1:33:0a:4b:eb:56:03:
4a:92:ac:bd:09:c1:dc:3b:f5:9c:3e:2b:1b:2f:91:50:3f:01:
1f:93:e4:9d:b8:74:94:52:64:6a:05:8b:cc:ca:7f:8c:d0:20:
22:e6:88:f2:35:f9:1e:21:50:5a:c5:86:fa:d5:6a:84:bd:f0:
f4:e2:fa:cf:98:d3:88:5c:79:dc:72:ae:48:fd:18:b9:23:77:
c1:40:5f:4c:ab:91:5e:7d:72:32:9a:bc:d3:e3:9f:a1:60:c0:
46:c0:a3:bf:54:62:d5:63:15:fe:7e:22:7a:15:1c:3d:94:85:
23:70:18:83:8f:6b:cf:bc:8e:b9:ec:cb:9d:27:f9:22:a0:17:
b2:5d:b1:40:50:98:25:af:3f:8c:c2:57:a1:55:cf:64:28:af:
18:a9:52:7a:7a:b9:70:bc:85:37:4c:c9:c6:e8:ba:63:4a:d5:
ac:59:91:12:51:b4:eb:3d:05:bb:89:32:f8:84:59:3d:5e:e7:
12:de:be:93:05:55:ff:16:d1:4e:d5:bf:6d:57:5e:66:19:79:
f8:f8:24:d5:08:79:e2:2b:43:25:41:8b:a3:d3:a6:70:56:b8:
a3:c5:ba:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:26:38 2025 by rpki-client