Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json)
Hash identifier: ZnD0s+LJ3kVFKt/v7uqMGU/wkJhoQhvn9pT6e+bSTeU=
Subject key identifier: C3:F7:A3:5F:C7:39:DC:A7:F8:99:20:AB:49:CC:A2:89:68:97:BE:25
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 019688B75C8C5EE66D8BC6C9D7009D76C9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 22:00:40 +0000
Manifest this update: Wed 30 Apr 2025 22:00:40 +0000
Manifest next update: Thu 01 May 2025 22:00:40 +0000
Files and hashes: 1: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: MrlI2t1Itq+ZGqZKcVKPVgW6SbuyAvus3hxagZWTKl4=)
2: hmvS4nDPTxWW6kYfDbr8j0yfqsA.roa (hash: lNR9K/eeK5h6bqGDhHsX+aTIDMdTknqLa5mK45GIX18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:b7:5c:8c:5e:e6:6d:8b:c6:c9:d7:00:9d:76:c9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: Apr 30 22:00:40 2025 GMT
Not After : May 1 22:00:40 2025 GMT
Subject: CN=c3f7a35fc739dca7f89920ab49cca2896897be25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:32:b9:cd:4f:29:4c:b6:c8:f0:de:2d:68:
28:70:81:69:bc:b3:d9:0b:1f:9c:ae:15:a7:80:53:
8c:c4:ce:a9:66:c1:60:66:1e:0a:e1:b7:7b:aa:e2:
a4:91:4c:68:93:76:61:e4:e6:fb:b1:d7:8d:7a:67:
03:2a:18:b9:d6:56:ca:d3:31:0e:54:a4:30:38:7a:
14:9c:ef:7e:a2:d8:0b:2d:7b:1c:c1:5f:a8:b4:4b:
5f:d0:fc:22:0d:1a:a3:91:3c:3c:15:66:c7:6a:75:
cd:de:10:8c:60:ee:be:9f:ef:e6:c2:0d:0c:fb:16:
18:04:3e:6a:3b:65:38:73:1b:f4:e9:8a:80:3c:38:
e1:d7:5f:b4:20:e7:d4:32:03:a3:d1:da:41:61:b3:
0a:e5:57:0c:f0:7b:6e:a8:d0:48:74:44:59:e7:55:
3c:88:b6:0b:b8:bd:b8:05:8c:9a:f9:b3:5a:39:9c:
60:73:94:6d:19:8f:b6:3b:3d:64:2a:cf:42:f0:2f:
fe:15:e7:cd:82:07:26:91:78:81:43:14:88:5b:93:
aa:cb:f7:a9:68:1d:da:fa:fa:2b:2a:5f:1a:b6:6b:
cf:e2:66:0a:56:77:49:c5:2e:02:aa:1f:d9:e2:a7:
49:16:26:b1:a0:9b:9b:22:1a:79:20:ee:79:f5:75:
8d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F7:A3:5F:C7:39:DC:A7:F8:99:20:AB:49:CC:A2:89:68:97:BE:25
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:fc:18:e4:b8:1e:9b:ab:49:93:de:4a:5e:bf:13:82:b1:c8:
08:b4:ee:6e:2d:c8:7b:af:a5:34:2c:7e:8f:eb:70:ae:bf:2b:
3e:67:d1:c1:39:5c:07:cb:d6:1d:df:40:12:d3:ba:d4:cd:44:
02:9e:af:7a:3f:2e:20:0b:f9:8a:ae:74:ba:6c:16:43:2f:0f:
f9:7a:f4:96:c8:8c:22:56:02:79:cb:88:ca:27:bf:56:40:e3:
9f:49:6d:c2:7b:92:e6:3e:f5:aa:9a:ea:e8:b0:9d:d7:86:ed:
76:02:cd:dc:da:81:fc:01:7a:38:5c:54:b1:f9:98:cb:bc:41:
d5:5c:5c:c1:e6:7b:6a:5f:bf:74:2e:97:ad:9d:93:cc:8d:b0:
60:57:66:d2:4a:1b:55:35:d9:27:c8:3a:db:33:dd:b3:3b:1a:
40:cd:52:60:4c:b7:8f:6b:16:c5:78:64:8b:bc:11:4b:49:12:
53:bb:ee:79:b3:a4:e7:4e:b1:62:d3:d2:8e:63:ce:ee:66:b4:
ac:71:23:85:46:50:30:a9:aa:18:53:6d:c5:2a:d8:8e:d6:be:
7d:3e:1d:0f:51:ac:ea:f0:24:a5:25:6b:cb:be:74:4f:26:e5:
9c:52:c0:25:32:e2:18:19:25:b5:af:b1:e8:e6:bc:c5:05:1d:
19:d4:ef:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:23:07 2025 by rpki-client