Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
File: xm3GDRbf4WSdhsFpPheFjCMGOH8.mft (raw, json)
Hash identifier: DCizozwafPZT0S5k5+k4+kPYEQVvJoTnhWvEguiCrpA=
Subject key identifier: AB:81:F4:87:CD:D2:98:63:D0:35:08:06:F1:0C:BD:97:08:F9:EB:85
Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Certificate serial: 01968359AF2260E7BA3D5BCF76139AB36BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
Manifest number: 12FE
Signing time: Tue 29 Apr 2025 21:00:14 +0000
Manifest this update: Tue 29 Apr 2025 21:00:14 +0000
Manifest next update: Wed 30 Apr 2025 21:00:14 +0000
Files and hashes: 1: 9wllcBQptpahKiXvdA8fp8dAnd4.roa (hash: EZriZJeJYlorIY+q2d7CpiKRv59NpOmz9CDJjivHJGw=)
2: JehPYERpWNPyZpbjXvQLka1W0tc.roa (hash: lTB81sn8qz5yoT+HG2SJwj2/2HvuYhBId4lkI/gSD6M=)
3: xm3GDRbf4WSdhsFpPheFjCMGOH8.crl (hash: NliTkFbuKnaVHw0J84ZVS0IMmO/at+T+yPqLPfnlgIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:af:22:60:e7:ba:3d:5b:cf:76:13:9a:b3:6b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Validity
Not Before: Apr 29 21:00:14 2025 GMT
Not After : Apr 30 21:00:14 2025 GMT
Subject: CN=ab81f487cdd29863d0350806f10cbd9708f9eb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:73:26:a5:aa:d2:d4:91:8e:25:a0:a0:d2:
d2:b0:90:3a:1a:20:46:81:d3:36:57:8b:26:2f:7a:
f6:be:1c:69:36:0d:92:0f:c1:32:e2:a6:05:ed:18:
ba:12:3c:ce:7f:71:2b:e6:a0:3d:1e:09:06:91:08:
63:59:38:42:d3:68:c4:33:c8:6c:c3:ca:5d:88:dd:
e6:89:5a:fc:86:8c:21:29:5f:8c:34:e3:05:e7:79:
2a:5b:7e:0e:c8:dd:8c:0b:23:cf:a6:bf:40:bf:55:
f5:58:10:69:c4:bd:0e:c4:2a:57:7a:3a:60:16:bc:
6e:56:64:06:f2:40:20:fb:8e:8d:2a:41:b1:a5:87:
7e:4b:df:74:af:42:7a:99:69:cb:9f:f1:e3:05:99:
3c:44:ec:72:26:e1:61:f3:48:25:f8:01:44:af:48:
6d:73:84:cd:2e:e6:35:1d:71:9b:69:54:af:fe:c6:
ae:b5:a1:ba:97:e4:29:b6:48:10:ba:40:53:88:3d:
08:23:aa:ae:8e:45:f1:c7:1c:5d:a7:e6:73:df:fe:
1d:36:6e:84:7f:78:f8:ce:58:7e:2f:5b:e4:b1:d5:
76:41:ff:20:ce:71:a7:43:a8:1e:14:ae:c6:03:7c:
d1:9b:22:0b:0d:54:6e:f1:fd:d7:e9:8f:c5:64:65:
f2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:81:F4:87:CD:D2:98:63:D0:35:08:06:F1:0C:BD:97:08:F9:EB:85
X509v3 Authority Key Identifier:
keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2d:2d:99:ff:0c:e8:a8:77:7a:81:76:59:a0:92:56:b2:48:
68:b2:e9:c0:9a:76:da:5f:37:56:49:cf:e6:f3:6d:01:51:38:
c6:5a:d0:46:8a:02:2f:b2:34:7b:b3:59:c0:46:32:a7:21:f3:
3e:cc:e1:e7:5b:2b:82:31:e4:b8:fa:ab:52:19:c6:4b:14:2b:
a5:91:8a:ff:8d:d9:6b:0d:96:4c:b0:0e:fc:df:2c:f9:f4:63:
8f:23:2a:fe:93:ae:b6:b6:2a:91:30:2d:59:0b:01:19:f2:c4:
1d:3c:e4:97:95:cd:21:58:76:4a:3f:96:87:8d:e4:62:e7:36:
9b:cd:14:a1:12:1e:cb:c8:24:51:a5:98:2c:87:52:6a:b5:2b:
a9:2c:ee:41:85:3b:c4:f8:c0:5b:34:cd:b5:2b:ce:91:7d:9f:
62:69:bc:95:61:06:71:d4:ab:6d:52:a8:c9:7e:ee:3f:5f:a7:
47:f2:9f:fa:50:aa:a9:8f:b7:f8:c3:24:be:6d:d6:10:0a:3f:
f4:6c:6a:b5:62:e8:87:78:95:11:35:a1:c0:6e:d3:18:3f:7e:
79:b2:05:53:cb:a6:2e:05:43:af:0f:b2:12:a0:a8:4e:89:65:
29:00:9d:93:ae:e3:6a:65:06:06:5b:95:ef:22:a0:4b:59:f9:
d8:40:af:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:09:25 2025 by rpki-client