Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
File: xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json)
Hash identifier: DBrCLO5YeVDPTsvnh95PqWLh8MYHm8T7Bwhkd2Bfd/Q=
Subject key identifier: 8C:44:33:0C:5E:5D:48:5E:CF:15:BD:3F:A9:C9:F0:97:5C:DC:9B:8D
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial: 01968DA7607DDE87DD8DB82FFF37F1A3B2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
Manifest number: 0136
Signing time: Thu 01 May 2025 21:01:18 +0000
Manifest this update: Thu 01 May 2025 21:01:18 +0000
Manifest next update: Fri 02 May 2025 21:01:18 +0000
Files and hashes: 1: _qWutZUYh7GtHc5BuqYExYnhc5E.roa (hash: coowkP6g5fodWA3YuMC9BEcTrYORzxDu9UeePR3fEmU=)
2: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: 6d+V7ESlmf4kDp4nuEcMktAcjvNmukZjOUFyUTjfS3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:a7:60:7d:de:87:dd:8d:b8:2f:ff:37:f1:a3:b2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
Validity
Not Before: May 1 21:01:18 2025 GMT
Not After : May 2 21:01:18 2025 GMT
Subject: CN=8c44330c5e5d485ecf15bd3fa9c9f0975cdc9b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:63:5e:f1:2b:35:f1:fd:1c:53:35:6c:ae:36:
a7:cc:d8:89:60:0b:d3:1a:60:24:8b:b3:82:35:a9:
a3:ff:63:76:df:8a:cf:1b:74:46:18:0e:f2:d8:e0:
2d:b2:84:94:6b:71:9b:4f:06:e2:4a:ff:c5:ab:c5:
84:b9:d3:48:1f:ff:df:91:28:48:52:c0:f9:74:39:
5b:be:a8:26:fe:92:5e:3e:66:0e:ab:53:42:18:f0:
99:bf:9a:2a:e8:cc:c1:f4:02:00:c4:51:c1:26:6c:
f7:ed:68:6a:d5:89:28:ae:87:a1:f6:48:c2:df:50:
b8:1a:46:5c:7c:8d:23:84:5b:5b:a3:37:00:79:e0:
f4:ad:c4:5f:d4:87:fb:4f:d9:34:d1:d1:32:9d:5b:
fb:26:0f:c5:7c:dd:56:81:4e:02:40:9d:cf:a4:eb:
7a:a0:c3:e0:30:91:ae:f9:2c:08:31:8c:83:6e:dc:
b4:17:39:ea:1b:3e:96:e9:09:f5:e7:b7:2a:3a:6c:
11:70:48:3d:6b:ce:ee:33:10:d9:5b:28:1f:9a:ea:
5a:6b:d0:d0:9f:4f:eb:1a:dd:5e:50:31:92:39:9e:
b8:72:eb:5b:3c:26:4d:df:e8:1a:77:f9:1f:ad:6a:
73:2c:77:f8:f0:14:12:9c:31:08:f3:1a:a0:8b:f1:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:44:33:0C:5E:5D:48:5E:CF:15:BD:3F:A9:C9:F0:97:5C:DC:9B:8D
X509v3 Authority Key Identifier:
keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:bd:b9:ee:66:f8:d0:e8:fc:ce:af:1e:52:aa:ba:d5:4d:00:
8d:d3:18:c7:4e:0c:10:e9:ef:56:e0:60:dd:d5:54:33:84:8e:
3e:72:ac:32:2d:14:a6:f3:b3:93:cb:ef:19:ba:c2:79:6c:29:
76:85:e5:ea:98:3d:fb:c9:f0:bb:9b:35:bf:7c:e6:e6:3f:80:
ac:04:6d:f9:9a:ae:cf:9e:85:0f:db:ba:71:b5:10:e4:d2:19:
95:2a:40:c8:47:55:b4:ae:10:76:0f:32:6e:7b:db:9d:9b:ed:
cf:58:ea:69:fa:1c:1a:33:43:60:8f:05:d1:7a:99:16:3d:36:
40:5f:81:a7:bd:94:5d:7a:a2:ec:c5:86:68:a6:b0:0f:6b:0f:
1e:59:ec:78:7e:f6:24:6f:f9:e3:fb:26:9f:41:80:3a:d1:4d:
f5:e1:33:c6:18:1c:5b:82:b5:a7:50:36:02:7a:a3:76:f8:f2:
a5:6a:b2:7b:8a:dd:19:ea:dc:d7:08:10:54:19:78:19:48:59:
20:ce:bc:b6:5c:08:6a:61:69:45:d3:e6:d1:c7:4a:24:2b:6e:
4f:52:98:97:86:70:0c:11:44:6f:c4:e6:e8:90:77:9f:7b:74:
5a:65:e9:9c:51:54:cb:f4:7c:e5:4a:a1:bd:8b:c8:dd:03:3b:
f2:3b:65:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:54:03 2025 by rpki-client