Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: 30+JWeT4+gZwB7IMK3ovsbO5B69hghu289jeZgb/VJc=
Subject key identifier: 7E:52:E1:AC:FB:B2:99:92:95:95:DD:19:83:F1:BE:C0:F1:A0:EB:FF
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 0196741D89ECE8E099DEDFC525C1FBCDAFA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 08A4
Signing time: Sat 26 Apr 2025 22:00:14 +0000
Manifest this update: Sat 26 Apr 2025 22:00:14 +0000
Manifest next update: Sun 27 Apr 2025 22:00:14 +0000
Files and hashes: 1: Jg_jfBjHb0Vu6fkwZ37mMS91qI4.roa (hash: TfhNhqloOoAsI4fDNQ7bFxjaWUIihAJVfn4SJGIonjE=)
2: RAYhGqxG90i3Xl4IbOmBMXLaWWU.roa (hash: PkL3yCHqeCepv6d1R3k2egY2vgT3zl8lcQ+M9WOKBkE=)
3: WhuuzI-giOvU0WJGmRMWrjSlbX0.roa (hash: sWWRUBfHkfBvOOVFSvoXP3yUbe11I9qeTgURb62iypo=)
4: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: 1s++bbWcSE05zYN9IM9Ray0KYlQJWyCuSRt6hwtSW7E=)
5: cu8YZEomM6yhTT6rKGZD0EswcrA.roa (hash: E+q2Kh42Kr16IAejR3Z8uLwJmIfrudkWS/YgHicEZAY=)
6: shFSKFhffIiUAgxysGmRtXRHjKM.roa (hash: dQvH9QymMjpXXdgyrmMvhjbB83wD/WfhP9dhFWk+qZg=)
7: syw_ZhTYU1w7NStTQl6XEtYJ7iw.roa (hash: vh0bYcr2sbcc1SgjyRRRbNDSidOSKXW4Nng93TqNAKw=)
8: ycVnM1zp10CMEnPemmwHq5Kmb7k.roa (hash: X47wni4QutejMcFMTFg2gNEEKNeesZr+QmIkUicE1Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:89:ec:e8:e0:99:de:df:c5:25:c1:fb:cd:af:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Apr 26 22:00:14 2025 GMT
Not After : Apr 27 22:00:14 2025 GMT
Subject: CN=7e52e1acfbb299929595dd1983f1bec0f1a0ebff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:f2:98:af:48:d2:68:84:20:c6:7c:b3:e1:
5d:3f:7b:b7:51:20:3e:6f:98:bb:0a:03:7c:ed:07:
c4:29:83:c2:ee:fa:0a:36:6e:5c:34:49:5c:50:15:
3f:7e:e8:cc:d9:31:1e:5c:ca:57:2b:b2:22:34:95:
b9:0c:40:26:fd:f5:4e:70:bb:b2:5d:35:ee:08:c9:
1e:fc:1c:29:8c:2e:7c:14:24:b7:60:14:12:cc:e6:
59:05:3d:b3:2e:05:97:f8:18:31:65:cf:92:9b:8c:
6b:e2:5a:cf:b6:5f:1f:d3:80:f2:82:4a:34:07:35:
5f:68:be:41:5a:60:f9:aa:fc:22:00:c7:a0:8f:b1:
21:4a:ee:d9:db:00:0c:ce:14:3d:8a:9d:b8:f3:ca:
08:de:9a:de:57:02:a8:ec:86:94:3b:39:fa:83:31:
49:80:a5:d5:24:9e:59:57:f2:bc:93:40:27:05:de:
eb:e0:4c:58:5e:6d:8e:4f:e5:24:7d:5b:09:14:5b:
bc:a6:0b:30:67:72:74:23:de:25:9d:4a:9d:bb:94:
4d:74:38:d0:0d:71:8d:ec:50:cb:2a:76:00:6d:74:
c9:6a:3e:26:11:aa:18:12:44:5e:f0:ab:42:9c:4c:
38:16:83:27:0e:e2:c7:88:3e:19:07:a8:90:a3:1e:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:52:E1:AC:FB:B2:99:92:95:95:DD:19:83:F1:BE:C0:F1:A0:EB:FF
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:59:8e:96:8a:1b:20:cd:bd:1a:23:ce:69:6f:5d:ad:a8:5f:
5b:5a:7a:14:95:04:22:03:c6:66:36:69:b8:6d:a0:4f:bf:b8:
63:82:bd:78:81:8d:b1:3b:12:3e:bd:ab:98:e9:dd:2c:bd:cf:
29:e5:cc:3b:4b:cc:b1:e9:e6:47:8a:75:3e:c6:2b:22:b3:8e:
ae:36:1b:e3:24:19:c8:b4:ac:94:b4:3e:db:b3:d6:53:3a:58:
25:c7:cc:b3:b7:af:59:45:3a:87:9f:09:a5:39:de:34:29:29:
0b:5c:8a:56:f9:f7:78:a5:68:28:be:43:d6:a4:d9:35:7e:1e:
d9:f1:67:34:c1:a8:d2:94:99:f0:1c:e6:da:9e:fb:af:f6:c1:
a6:4d:9f:6e:61:09:f0:51:21:12:10:14:18:21:3a:a2:00:0a:
8e:ce:1a:a0:de:7b:1f:31:17:fa:60:a9:af:8b:85:74:73:db:
e3:23:6f:0c:5b:61:17:6c:48:6e:9f:8f:43:ec:64:a3:4d:ae:
1a:41:49:b2:f1:25:39:55:df:20:0b:14:dc:41:fd:59:a3:28:
1f:1f:1f:2f:ab:01:35:b2:14:3f:9e:6e:f9:c5:4c:f3:fb:b7:
b1:d6:98:a5:70:f1:b1:4f:6f:19:1b:19:bf:e0:1b:0b:c2:3f:
d3:ef:f8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:15:44 2025 by rpki-client