Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
File: _xwhiBHZKUrWMSU6RF7R05WpY58.mft (raw, json)
Hash identifier: hyNSfuSJ82MFxKuKORGWFr1AaSdeAutlfeEfmtk0biU=
Subject key identifier: A9:B6:2D:35:9F:0C:1F:A7:71:58:0A:85:19:97:2F:A2:F0:1E:94:39
Authority key identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
Certificate issuer: /CN=ff1c218811d9294ad631253a445ed1d395a9639f
Certificate serial: 019677FB70C85AEFE7BFCA33F728B403AFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
Manifest number: 136B
Signing time: Sun 27 Apr 2025 16:01:29 +0000
Manifest this update: Sun 27 Apr 2025 16:01:29 +0000
Manifest next update: Mon 28 Apr 2025 16:01:29 +0000
Files and hashes: 1: _xwhiBHZKUrWMSU6RF7R05WpY58.crl (hash: MYTk9YEALrwSOsDc2JkoAkn6DQDt+LL2feoa2aCDMSg=)
2: v5mMLWDyDi7CQki8wtNGLvZaSFo.roa (hash: QY/aaNbMvjreUlmsWUFxIkBwGJaecYw8AUp+m4XK/7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:70:c8:5a:ef:e7:bf:ca:33:f7:28:b4:03:af:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1c218811d9294ad631253a445ed1d395a9639f
Validity
Not Before: Apr 27 16:01:29 2025 GMT
Not After : Apr 28 16:01:29 2025 GMT
Subject: CN=a9b62d359f0c1fa771580a8519972fa2f01e9439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:c9:b5:0b:69:8b:2b:24:6e:46:bc:ce:7b:
b9:d3:c8:59:5a:84:4c:48:ab:74:41:d7:e9:51:31:
94:9f:dd:2b:48:06:44:88:7d:5d:3b:a6:3e:99:75:
14:57:ab:35:58:79:ba:3a:43:e9:ce:d8:50:94:a2:
58:64:89:7a:7b:ca:7c:d1:2c:50:79:dc:ee:5f:da:
e7:0a:72:e1:15:1a:bb:cf:f9:9e:0b:74:ed:30:4c:
4f:69:09:bb:75:56:a2:31:a4:ed:96:9f:b6:4b:ca:
90:0a:32:d8:a6:5f:d7:1c:b6:41:a9:ee:c8:0b:6f:
11:bb:c9:a0:06:c8:0d:5e:6a:f1:34:dc:b1:43:0e:
11:5f:a6:cf:4a:27:e9:5e:47:a4:75:d1:8a:55:6d:
b8:1e:7b:03:68:f7:7e:4b:22:2c:16:65:90:66:ef:
df:f0:6a:8d:65:59:d1:2c:cf:33:fa:47:08:42:a3:
c5:bd:d0:43:43:77:ee:94:c1:ca:27:53:81:7f:39:
16:65:fb:94:ab:2f:d9:72:63:35:ae:8d:7c:f3:dc:
f6:89:21:f6:4e:ed:08:2e:c1:d0:24:17:83:1a:37:
3f:bc:8d:0e:2d:ff:5a:76:c7:bd:32:93:b4:34:18:
a7:d1:a9:1c:ec:9d:84:e8:a6:70:62:5f:43:78:68:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B6:2D:35:9F:0C:1F:A7:71:58:0A:85:19:97:2F:A2:F0:1E:94:39
X509v3 Authority Key Identifier:
keyid:FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0c:21:46:8c:3e:f9:26:d4:4d:07:55:38:b8:85:81:de:3e:
38:27:db:5f:33:4a:88:6e:1f:58:02:3c:56:5d:59:6e:c1:14:
4e:4e:4d:fe:b5:fd:11:4b:28:c9:83:3e:a3:59:0e:f6:e5:45:
9e:eb:4b:a5:30:65:df:2c:10:d4:93:5e:3f:49:58:36:88:e0:
20:6a:5c:85:2a:aa:a5:7e:43:4f:fa:45:04:b2:71:dd:a7:23:
db:6d:b0:34:50:38:33:05:b0:3d:b5:40:ef:ba:26:9b:08:a7:
f7:c6:61:a0:2e:35:32:85:5e:9f:b9:b3:d0:75:88:4e:c0:bd:
c2:73:bf:17:df:c7:c9:07:e0:06:71:43:03:89:1a:e2:ae:97:
25:44:ed:63:7f:ea:b6:d0:2d:e0:7f:af:78:b4:16:01:0e:12:
0e:c2:d4:d5:83:b9:a3:b2:b1:77:50:00:db:db:f3:9e:45:f7:
03:ba:3e:ae:a0:e5:87:12:3c:aa:69:0e:b0:85:f5:54:c3:f5:
ae:ac:41:a3:74:0a:7f:94:b5:bd:3f:31:46:a1:44:f8:f2:90:
07:ae:fd:34:e7:85:06:a2:58:73:40:6b:11:6c:15:18:b0:da:
9e:26:08:5d:93:6f:04:2a:d8:e3:80:f6:3f:fe:29:73:15:41:
40:3d:c2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:00 2025 by rpki-client