Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: JC+C+cC+yOvqK4v7OOuqCTpf1AbmGLh6/K2WPfReTCk=
Subject key identifier: 38:C7:84:18:D2:40:AF:6C:91:92:81:C2:38:C2:74:A0:4C:09:6A:6A
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 0196722F5B608E147421365390B001E06061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 141F
Signing time: Sat 26 Apr 2025 13:00:28 +0000
Manifest this update: Sat 26 Apr 2025 13:00:28 +0000
Manifest next update: Sun 27 Apr 2025 13:00:28 +0000
Files and hashes: 1: 6BSNFyDmxjJKuKKXuAvPxKEuvHY.roa (hash: c6KHneV5lWrYB0vjR6eF0or+/RE98WhZucc1FLSvOaw=)
2: WVzv9IPs18jpEk9vxuxZJ9DgM6E.roa (hash: B0rUdnUd104guvU3/ZQlq+5h7/GgTzLKvxjoBYXsJx8=)
3: WdMCPBRF3SYVyusOAvLG3Px1q0o.roa (hash: 0pYw3BfMJddkmV2iZ0Sn1GwTLycumrvuPn+XFayO/cA=)
4: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: zx1cA5m/n+iIqyzdzRj55zbfdoZj7k3/8+ACIXZA6Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:2f:5b:60:8e:14:74:21:36:53:90:b0:01:e0:60:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Apr 26 13:00:28 2025 GMT
Not After : Apr 27 13:00:28 2025 GMT
Subject: CN=38c78418d240af6c919281c238c274a04c096a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fa:0e:f0:e8:d8:8f:86:48:67:33:58:7f:a0:
92:6f:cd:f7:81:85:26:81:8b:0f:37:4f:ed:e1:f6:
43:97:a9:c6:1d:26:3a:d4:10:3d:4c:3f:ff:84:e3:
d1:57:96:98:64:59:53:7f:3d:3a:6f:0a:b1:f4:2d:
5f:cf:89:cc:e4:d7:75:e4:80:18:6c:da:73:02:ca:
1a:d1:08:c1:28:f4:fd:b4:5d:1d:b4:9d:8d:c2:5e:
4f:cb:92:7c:ed:7d:d3:86:cf:c3:b4:40:c0:a0:17:
03:51:f9:60:28:a3:81:f1:05:e5:b7:6e:fa:15:ff:
1c:8d:52:2e:37:ce:4c:c6:14:8e:c3:70:6f:6d:47:
a3:4b:4c:03:ba:52:43:8a:d3:bf:9f:a9:39:7c:c4:
ab:6b:df:0d:46:01:c8:b5:0d:7e:8c:f5:ac:95:72:
fb:07:63:2e:12:b3:ba:23:2b:a3:de:34:44:bd:1f:
dc:94:6e:1b:fe:81:79:97:a1:a8:14:94:68:47:67:
64:f6:ae:f7:ae:45:ca:d3:4b:d6:db:3a:9e:38:49:
9f:0f:bd:25:c4:f1:b0:91:3f:eb:25:30:f6:99:0a:
81:9d:bc:d9:17:69:34:41:30:ad:6b:6a:81:0b:e2:
f4:48:36:8e:58:57:f7:81:7c:b3:8f:de:db:36:1f:
ba:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C7:84:18:D2:40:AF:6C:91:92:81:C2:38:C2:74:A0:4C:09:6A:6A
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:dc:2b:a0:da:d1:cd:de:ba:46:c3:09:ae:a6:08:ec:8b:78:
cc:0c:9d:89:39:7e:c2:d9:ea:c1:f2:40:9d:93:80:f6:5a:44:
90:29:4f:59:fc:fb:8d:1a:cc:91:1a:9a:81:a8:80:8a:64:bd:
32:0b:e4:07:dd:cf:8a:60:8c:84:b4:04:a3:59:01:56:90:bf:
1f:70:bd:ef:20:70:db:1a:c5:24:c7:24:b3:94:cf:d0:ce:12:
6a:08:30:97:6e:7a:c9:34:07:d9:7b:e9:c6:27:1d:97:23:aa:
99:fa:40:a4:3e:34:f5:74:fe:41:24:58:1a:e3:6c:67:3c:96:
cb:c1:24:d7:88:01:ef:18:71:30:d9:86:09:34:10:34:85:e2:
3d:7f:93:71:94:84:4c:77:91:8d:0a:b5:af:28:ae:c9:aa:60:
cf:71:86:4e:18:4d:da:c1:01:9d:a2:93:26:49:93:ba:fe:99:
8e:f7:ad:2b:99:4c:9f:5f:5b:d3:5c:6d:4d:b2:73:90:19:0e:
55:88:04:1a:cb:64:c9:be:8e:8e:da:56:be:eb:3e:ba:8a:56:
b7:4e:ed:51:1f:58:10:18:e3:fa:3a:ae:9c:c3:f5:49:ae:04:
47:8b:59:42:03:d5:c6:48:d3:c1:bd:ca:fc:e6:07:5d:4f:a9:
88:d9:8a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:49:15 2025 by rpki-client