Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
File: x5p8pEAn0uWtOJ8WntFZNteFEWY.mft (raw, json)
Hash identifier: Pgr4wpCqDJVrAJpYS1bktRqHRq+xcqkU+63R8BDNXkw=
Subject key identifier: 09:41:E4:58:DE:15:8C:23:8E:2F:58:4D:1F:85:D9:AA:05:2C:52:B9
Authority key identifier: C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66
Certificate issuer: /CN=c79a7ca44027d2e5ad389f169ed15936d7851166
Certificate serial: 01968C26686ECE882DAB6ADF8F461B219378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
Manifest number: 0B42
Signing time: Thu 01 May 2025 14:00:49 +0000
Manifest this update: Thu 01 May 2025 14:00:49 +0000
Manifest next update: Fri 02 May 2025 14:00:49 +0000
Files and hashes: 1: abpRqtiQtQaZu4MHu087BH1phaI.roa (hash: Oq4Z5f20QFJa82wcUjWOln7tJ0DH2NRa/Bs4WGmPNhY=)
2: x5p8pEAn0uWtOJ8WntFZNteFEWY.crl (hash: SkudeBIIL/2+oBtOjLCGugZfennvJd0mWZyuItu/ufc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:26:68:6e:ce:88:2d:ab:6a:df:8f:46:1b:21:93:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79a7ca44027d2e5ad389f169ed15936d7851166
Validity
Not Before: May 1 14:00:49 2025 GMT
Not After : May 2 14:00:49 2025 GMT
Subject: CN=0941e458de158c238e2f584d1f85d9aa052c52b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:ce:56:2d:69:a2:98:3f:f6:d1:be:42:64:
53:91:f3:36:93:2f:40:1e:d3:85:c9:cc:c4:11:58:
08:49:9f:a9:8c:64:ac:90:0c:55:4f:7c:db:5f:32:
4b:b9:28:ba:21:73:5d:2a:ac:10:20:bb:98:d1:63:
c8:a6:cd:e5:f4:79:94:ab:89:e5:45:b9:68:81:89:
ad:41:c8:18:c7:c0:eb:69:d3:37:97:c3:07:be:32:
10:9f:5d:d0:55:d9:5b:f5:bf:13:bf:35:32:86:1f:
86:52:f4:52:d0:60:37:ed:ba:5a:f6:21:ec:b1:6d:
df:31:95:b1:bd:bf:df:75:12:b3:6a:3e:65:12:99:
02:78:8c:db:a5:0a:26:d7:44:5a:78:aa:00:4f:8a:
1b:17:17:91:1e:f7:ca:a3:df:1a:2b:2f:f0:18:0b:
35:39:1d:a7:4a:d3:7a:6a:d6:17:8d:c1:89:81:71:
65:f0:26:df:e4:52:ec:d7:02:36:c5:e7:d3:63:23:
fe:c1:0e:50:89:c8:15:c3:7c:09:3e:f0:eb:6d:2b:
08:64:c2:df:95:81:70:99:3b:db:c8:c3:f7:76:12:
76:26:3a:8a:b0:65:27:c1:ba:6c:b9:c2:7f:b9:d2:
15:5e:00:b8:0a:4e:6b:e2:58:38:c1:e0:09:f9:b8:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:41:E4:58:DE:15:8C:23:8E:2F:58:4D:1F:85:D9:AA:05:2C:52:B9
X509v3 Authority Key Identifier:
keyid:C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ce:a9:37:54:8b:84:c5:f1:9a:19:dd:69:4f:41:11:e9:ad:
1d:6d:4e:51:21:8c:da:40:3e:12:bd:c4:f3:7c:b6:f1:aa:08:
b8:b3:e0:22:95:00:bb:c6:b6:61:62:0d:3a:01:2f:50:f2:37:
a2:e7:54:28:a0:04:51:d5:cd:96:b6:33:3f:ff:2a:47:e7:76:
da:65:ea:6c:05:3b:36:39:5d:e5:95:ca:81:de:20:6e:85:d4:
33:76:10:28:4e:f6:41:ea:22:9f:61:44:48:ab:ba:25:0f:c3:
6c:e1:ff:ed:3b:e7:10:04:fe:a2:ff:0b:a6:2b:1b:76:b8:74:
4f:ee:59:bd:58:13:51:16:91:8b:34:36:9f:34:3d:dc:4d:86:
67:d3:75:9a:e9:23:1b:86:a0:12:f9:4c:8b:a4:a7:2a:29:7c:
20:0e:e1:2c:f4:19:c7:be:19:f6:53:c4:ba:22:88:6d:2d:b9:
c4:c9:4b:20:e0:6a:c6:a7:98:c1:cb:ed:0a:06:01:f0:34:b7:
4c:c5:c8:85:ad:b4:db:74:0e:11:3a:98:7a:1e:62:1c:48:db:
8a:0b:aa:f8:ee:c1:9e:45:71:db:15:9e:10:b7:a5:16:53:fa:
4d:a5:a8:66:2b:e8:87:9a:ef:d6:8c:6b:f6:81:02:9c:64:c5:
8b:5b:28:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:58:24 2025 by rpki-client