Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: svwEnKOy3SrwdlYhCTL3kHTmKd6+XoSiKWG/QipT6G4=
Subject key identifier: AC:26:E0:9D:55:72:E6:54:36:77:11:BA:1E:12:81:00:DE:4A:05:55
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 0196760C1E770DC4DA12C823A739D53A1EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 07:00:27 +0000
Manifest this update: Sun 27 Apr 2025 07:00:27 +0000
Manifest next update: Mon 28 Apr 2025 07:00:27 +0000
Files and hashes: 1: tnQ5odqGfmjwtl_VRpWmuxnJVZc.roa (hash: jWqwIWRjWImreknKrwhsqWkckPsMaq433dW/u+UVzTY=)
2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: AFlgwCkJpktIXqgiMSPsj2fi/eo/Jg4n+aX8BC12hsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:1e:77:0d:c4:da:12:c8:23:a7:39:d5:3a:1e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: Apr 27 07:00:27 2025 GMT
Not After : Apr 28 07:00:27 2025 GMT
Subject: CN=ac26e09d5572e654367711ba1e128100de4a0555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dc:ca:e4:89:b2:70:50:e3:d9:05:60:61:a1:
cb:6a:50:59:7f:04:80:9a:b4:e4:55:cf:03:de:28:
a3:48:6e:a2:1d:a1:3e:d0:f0:b8:32:4d:54:b6:3d:
46:1a:f2:fc:64:8f:c9:17:7a:66:2d:eb:6e:4f:b9:
e7:23:2c:c0:01:9c:e4:5d:21:2f:d1:82:4a:2f:b4:
2a:cd:ea:5a:3e:0f:89:10:3d:ad:e2:5d:41:ba:f7:
08:2e:4c:fd:d5:7a:f3:a1:27:ba:a6:a2:fc:04:5b:
51:bd:46:40:07:db:20:0e:84:32:a7:11:ef:53:2f:
0f:8f:8d:83:9d:f4:c6:00:a7:a2:0a:e4:df:80:f9:
a6:a9:3b:da:6b:25:6e:8c:51:0b:d1:8b:a2:31:b5:
01:6d:57:f0:23:55:5a:b6:17:f0:a9:fa:23:5e:a5:
1b:86:25:88:7d:49:5c:95:f5:1e:73:79:48:0e:dc:
e7:45:6c:bc:a1:92:c0:65:03:45:f2:28:09:48:5e:
7e:6c:5e:8a:a7:28:83:78:4b:9d:b8:6c:d9:24:1d:
c1:5d:74:03:d8:61:ff:d1:e6:68:40:b5:88:9e:fa:
be:8e:99:7e:9c:68:4d:69:37:d4:2b:ef:8f:52:e0:
ae:8a:84:ec:f8:ce:35:cd:8b:71:28:a7:ae:e7:02:
a8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:26:E0:9D:55:72:E6:54:36:77:11:BA:1E:12:81:00:DE:4A:05:55
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:42:3d:09:0a:85:dc:dc:24:cd:71:85:02:c5:a4:06:08:53:
08:bc:a4:c0:61:57:70:60:9b:5d:00:7c:55:cb:a2:26:9e:a0:
57:9e:be:f9:5a:3b:eb:c7:66:cb:24:1c:da:80:c5:77:13:09:
61:5a:3b:fe:fa:66:0c:db:4b:2d:d5:ac:a6:de:8b:df:a6:1b:
36:32:51:70:a7:1b:48:f3:cb:f7:8c:70:b8:68:9e:78:f3:42:
b9:7e:2a:97:2d:57:2e:77:c5:3a:b5:0a:b9:1f:11:b8:8a:f4:
02:27:a4:59:6a:a8:2e:73:65:7e:eb:08:43:2c:1f:74:f6:49:
80:83:54:b6:97:68:d7:6c:38:97:7c:b1:ac:75:98:0a:ac:fe:
3f:73:75:18:cf:4e:f2:69:bf:56:f1:5c:f0:77:e7:24:08:89:
ec:f2:b5:0e:95:5b:0b:c6:0a:da:3c:e9:6b:61:21:65:87:48:
c5:99:54:03:24:ac:f0:07:73:ed:ea:68:0d:4f:77:3c:fe:7f:
92:22:69:5f:ee:dc:cf:60:e0:33:03:1f:99:93:34:68:3c:d7:
8f:92:ee:61:f6:2d:4a:68:68:c5:e1:38:4b:03:59:03:aa:3e:
f0:57:71:f0:5e:02:d7:d5:0f:25:1a:c1:63:1d:8e:41:41:8b:
b7:2c:a3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:15:19 2025 by rpki-client