Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
File: _XjxP_qS8HTr5VfSotKa0Noz5dg.mft (raw, json)
Hash identifier: f7zWB+rVgz7Mx6FrfhM1iBQ3ZAvbUDtD8nm/kDTQQns=
Subject key identifier: CC:1D:2E:0F:66:53:A8:CF:15:1F:E6:D3:75:93:47:BF:9B:39:5B:20
Authority key identifier: FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
Certificate issuer: /CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Certificate serial: 019694BB8C2E6C4E73C0FA5010209036F548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
Manifest number: 0A77
Signing time: Sat 03 May 2025 06:00:41 +0000
Manifest this update: Sat 03 May 2025 06:00:41 +0000
Manifest next update: Sun 04 May 2025 06:00:41 +0000
Files and hashes: 1: IPVqTow4BPog0VgWrmL6j3UlRyc.roa (hash: yHocQSt6Dh1L30jflXp+Oc+mQ08tmbAfLa5FFYWt/64=)
2: _XjxP_qS8HTr5VfSotKa0Noz5dg.crl (hash: sBonjUoA7/zXGPBoLJdYX6k13rpJKeU5GusoJJUNdtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:bb:8c:2e:6c:4e:73:c0:fa:50:10:20:90:36:f5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Validity
Not Before: May 3 06:00:41 2025 GMT
Not After : May 4 06:00:41 2025 GMT
Subject: CN=cc1d2e0f6653a8cf151fe6d3759347bf9b395b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9c:dd:34:6b:46:f8:dd:af:85:c4:c0:af:0a:
a2:12:89:a2:a2:05:d3:d8:33:a8:20:57:0a:e4:46:
fe:0b:d8:4a:6b:59:45:47:7c:03:1e:fe:7e:97:bc:
bf:2b:7d:4f:ca:86:33:4f:4d:23:a1:47:ee:88:4d:
1a:5a:d1:09:40:23:77:41:3a:fe:48:66:1a:6f:7e:
ce:f3:26:15:49:f3:bd:4d:5e:25:6c:7e:ca:59:9b:
29:d3:59:52:1c:9f:8b:a4:95:86:87:a2:92:4e:e8:
e8:ec:54:29:3b:b7:ed:f0:c1:cb:61:20:e6:01:50:
aa:30:cf:c1:41:16:3d:20:cf:35:29:14:a9:7f:3c:
7e:ca:b9:32:90:ba:64:1d:3f:6b:ba:58:95:27:58:
30:ae:da:79:49:58:d6:2b:03:d8:10:3c:fe:a5:a3:
f9:31:0a:7a:b2:fb:c9:e2:21:72:c1:9d:ac:02:f7:
af:17:a3:f0:91:17:37:03:2a:e6:79:dd:eb:c9:78:
57:c0:cf:95:9b:64:e5:9d:33:39:d0:f2:40:e2:dd:
3a:1a:c5:d2:b1:31:ea:31:40:21:cd:49:05:b9:34:
da:6a:61:28:14:6d:18:cd:65:10:53:7f:2e:a3:12:
11:2b:64:36:8b:c3:a8:62:0d:ee:4f:81:39:3c:8e:
0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1D:2E:0F:66:53:A8:CF:15:1F:E6:D3:75:93:47:BF:9B:39:5B:20
X509v3 Authority Key Identifier:
keyid:FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2d:ee:e6:9e:b4:cb:09:b7:c2:8b:56:25:1a:22:bc:36:45:
90:20:3e:49:91:66:44:1e:11:c7:b3:10:66:76:e0:ea:19:1e:
25:9c:ae:23:df:d2:6e:f5:cc:5b:8b:02:9e:8d:ab:a1:64:f9:
b7:6b:13:3e:89:8a:cf:87:92:6c:b9:4b:90:e3:b7:6b:50:72:
27:d9:41:a7:d5:c9:f4:1d:68:e6:47:b3:c4:d4:88:ba:22:9c:
2b:4f:5f:36:fe:89:99:e6:70:4c:f3:f2:fd:a6:5d:d1:70:a0:
e5:48:90:22:cf:02:60:00:25:f2:be:c0:35:65:40:4f:9a:65:
ba:35:96:e1:20:dc:51:83:71:68:3b:85:dc:e2:eb:07:cc:dc:
52:00:96:1d:87:cd:21:57:65:a3:2f:8d:29:f6:c8:45:6f:d2:
f7:d3:14:84:df:b6:bc:30:b6:dc:0b:f9:02:b1:0b:e1:dd:0d:
c8:4e:0e:f7:11:b7:e4:f0:67:22:76:89:04:d7:ee:8e:49:d0:
38:c2:da:f2:6b:06:48:be:07:7f:da:ac:0a:9a:46:28:95:c5:
08:61:a9:f2:4f:e2:08:9d:66:58:60:c2:da:d0:07:c1:cb:46:
e2:15:ac:eb:fb:c8:70:70:13:fe:10:2a:ac:cd:0f:dd:72:0e:
47:fa:6c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:06:22 2025 by rpki-client