Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
File: xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft (raw, json)
Hash identifier: qm8c/WiRDfn/Cw5xFCiaohExTCiFUrniNelQ289dEFM=
Subject key identifier: AD:89:24:3A:D9:C2:65:80:AA:8B:2A:5F:79:88:2F:AD:71:3F:54:19
Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
Certificate issuer: /CN=c72e716353ec733ab4b5085308b386d89a74f147
Certificate serial: 0196816BAC2C99F21C99AD1CEC390849116A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
Manifest number: 0D61
Signing time: Tue 29 Apr 2025 12:00:39 +0000
Manifest this update: Tue 29 Apr 2025 12:00:39 +0000
Manifest next update: Wed 30 Apr 2025 12:00:39 +0000
Files and hashes: 1: i4OTVeCSPxgmFusN2MGQeEwphSs.roa (hash: swOQwwO4f3RtKfp1taiB7zCxN/mO3jgsarXonpS2zBQ=)
2: xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl (hash: wcAloTvPNjpcNx4jPd62EiyF3RVZOVnbrK2W+3n7U5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:ac:2c:99:f2:1c:99:ad:1c:ec:39:08:49:11:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147
Validity
Not Before: Apr 29 12:00:39 2025 GMT
Not After : Apr 30 12:00:39 2025 GMT
Subject: CN=ad89243ad9c26580aa8b2a5f79882fad713f5419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b6:56:97:94:52:d9:ba:db:83:8b:cf:10:11:
7f:d1:b0:37:fb:68:d4:00:d0:78:19:d4:70:99:33:
e0:ab:7e:08:c2:3b:a5:d3:15:da:6d:72:5e:d3:47:
cc:c6:3a:8c:c4:33:88:8f:61:9b:f5:cb:b9:fe:8d:
83:f1:f7:5b:b2:1b:bb:19:e8:0d:6f:f1:22:9d:6c:
df:e7:07:59:20:b9:d1:ef:5a:66:6d:89:51:ba:b2:
cf:57:7a:e8:c0:aa:64:e6:9b:d7:7d:a9:a2:ac:e4:
e0:31:b1:50:73:86:6e:da:71:17:69:b9:3a:3e:22:
17:40:0c:c5:59:92:7d:18:80:57:9c:c4:e3:e2:5e:
e4:b1:22:8d:c7:67:b7:85:d3:bb:5d:d0:ff:18:7e:
f3:c9:ce:1f:d6:5b:bb:98:24:2d:30:da:41:47:b6:
d2:37:e7:9f:45:4c:80:e7:7d:69:66:af:6d:fa:5d:
2f:51:ad:fb:33:d2:a7:f0:e6:6d:9f:69:f1:c8:f4:
01:50:2d:1f:fe:a1:a2:9c:d7:f4:b9:cc:67:98:e8:
a6:4c:55:c7:51:81:ba:a6:b7:fa:e3:b1:04:08:e4:
47:ec:31:01:b2:67:db:c6:73:46:cc:91:81:83:10:
5b:be:1d:b0:e8:79:c6:71:da:94:23:a4:68:59:bd:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:89:24:3A:D9:C2:65:80:AA:8B:2A:5F:79:88:2F:AD:71:3F:54:19
X509v3 Authority Key Identifier:
keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e7:24:f8:73:45:b3:9a:5a:68:4d:13:32:f2:9d:6c:28:33:
b5:f4:7c:2b:c1:5b:a7:70:cc:09:27:e6:32:c6:b4:ec:21:4c:
f5:e9:ef:4e:c5:65:f8:a0:c6:1a:da:5b:41:cc:8b:2f:a2:d5:
02:cb:b5:69:6f:a5:c3:a8:ef:5c:2c:be:91:cb:ca:a7:18:2f:
ab:67:d1:a9:5b:40:11:49:07:38:f6:bd:89:9e:f8:5f:c9:8f:
4e:77:2a:9c:0d:ec:8e:e3:33:86:86:61:48:f2:af:b2:0b:d8:
95:62:94:f3:45:9f:77:84:5f:e6:a2:0a:3f:f7:2c:c2:f8:f4:
5e:9a:51:b7:e4:b9:9b:35:44:0b:73:4f:d0:eb:f3:a6:28:53:
9b:ad:64:9b:9d:0d:13:37:d2:af:73:e3:5c:f6:45:c6:6a:42:
74:20:04:da:ab:65:40:1b:4d:83:6a:21:26:3c:22:11:86:c0:
54:37:0d:74:36:6a:8a:c4:28:86:97:37:6e:ef:82:51:71:37:
0d:81:d4:3c:36:2e:6d:3b:22:12:28:63:df:d9:bb:6d:18:68:
da:2e:1d:e8:21:e7:6c:62:eb:95:76:1d:11:0c:02:0a:5b:98:
95:51:fa:81:ae:f8:bb:32:eb:46:83:f8:88:88:cc:96:03:92:
62:cd:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:21:26 2025 by rpki-client