Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File: XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier: upeAjEIUfL3MuKWmTbmUY0qC/0+uzUVhT6jOHgVcDDM=
Subject key identifier: 56:4F:74:F5:94:44:EE:1A:AF:95:98:0B:2C:19:83:9A:E6:8A:6E:40
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 01968AA618720C256AF8A3B3F676B3E68D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number: 16
Signing time: Thu 01 May 2025 07:01:03 +0000
Manifest this update: Thu 01 May 2025 07:01:03 +0000
Manifest next update: Fri 02 May 2025 07:01:03 +0000
Files and hashes: 1: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: T8MuDvAEr/BgYnBQ0zQqfL/+ujboO8OJ+Kc8YwmOQ8Q=)
2: aiQzKvCLxoc-jbSifPWI0H5s0EY.roa (hash: 2MNoWPbLxGTHxE75GVGoT7L//M3cbhmYnAI81N0/HEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:a6:18:72:0c:25:6a:f8:a3:b3:f6:76:b3:e6:8d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: May 1 07:01:03 2025 GMT
Not After : May 2 07:01:03 2025 GMT
Subject: CN=564f74f59444ee1aaf95980b2c19839ae68a6e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:c5:92:2e:25:3f:6f:bd:68:84:8c:ca:72:
e6:8c:33:65:9a:4e:1c:0d:45:76:cd:49:2e:0b:63:
7e:37:73:3f:06:0c:9b:eb:6c:4f:5e:18:8b:f1:fc:
82:95:e7:a7:97:d7:bf:ea:02:54:31:13:14:65:c9:
da:b7:49:76:97:95:47:02:48:42:21:33:3b:17:a3:
93:16:00:59:41:98:e8:be:67:01:62:fd:82:8d:39:
36:46:73:c1:d3:e1:c5:2f:16:66:b9:7c:aa:f7:d4:
d9:14:e1:6f:36:d8:a8:c7:77:c2:30:39:cd:87:02:
97:3a:23:a2:e8:87:9c:12:3a:7b:1b:28:a6:1c:48:
cc:4b:e2:77:9c:d0:cc:b4:f1:a2:1d:c5:f5:39:3a:
1f:70:75:03:84:1d:c9:4f:77:24:8b:fe:fa:37:f4:
97:1d:0d:20:db:bc:b8:cf:6c:51:8d:c7:b5:35:a7:
30:ed:1d:62:ae:74:b5:97:24:eb:be:6d:26:b5:cc:
9f:47:a7:ed:2a:6a:c8:53:d2:dd:a5:5f:c9:36:9a:
82:e5:6b:3c:37:1d:ee:6f:40:99:f9:17:de:9d:1f:
d5:25:5a:d1:1d:86:69:a8:1a:00:47:30:e0:8f:02:
82:82:44:b5:e5:7e:60:56:cf:bc:ef:8a:9a:c7:e3:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4F:74:F5:94:44:EE:1A:AF:95:98:0B:2C:19:83:9A:E6:8A:6E:40
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3b:fd:84:05:4c:ff:0b:62:3f:09:4c:49:4e:0e:c6:8d:02:
c7:52:3d:57:3c:b4:3e:a4:e1:47:75:bf:f9:85:bb:48:27:1e:
cc:09:b5:cf:71:28:42:8b:96:05:90:14:db:f3:ee:4f:de:35:
96:a8:6f:44:4f:0d:32:c6:9c:bd:8d:c0:a7:89:45:37:3e:56:
5e:a4:60:fc:fd:d2:c3:39:6c:26:1e:a3:b7:f6:39:7e:69:49:
16:49:37:02:c9:9c:9c:b8:1c:77:90:f4:e2:67:8c:89:49:5e:
ce:86:b3:f0:ca:19:7d:07:82:20:67:06:02:74:76:66:6c:a8:
98:14:be:58:fe:0a:bc:e9:56:4b:64:89:36:2c:be:57:15:16:
f6:19:35:e0:74:e8:5c:c7:03:b0:42:92:bc:ab:d5:39:45:2a:
2f:20:e2:1c:ab:13:c3:02:c0:3a:bb:fb:0d:a9:74:06:1d:35:
8a:7e:04:ee:14:1d:d5:4b:69:93:a9:4b:03:c1:65:b9:d9:db:
d5:6c:ad:b3:7a:d8:3f:76:94:be:c1:e4:b7:62:49:df:48:72:
fa:73:ff:70:f3:05:c1:3e:45:67:4d:f5:9f:f0:60:5c:b3:29:
fc:7b:35:c0:d3:db:a6:18:91:6d:02:78:cb:c5:72:35:76:cc:
61:02:1d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:15:07 2025 by rpki-client