Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
File: XTcKSLWfuBFJXxHElzRILyKxo5I.mft (raw, json)
Hash identifier: 44NUfKd3A3KqoQROuPUU8lE5e994MksPfv1KUM4iN3I=
Subject key identifier: 04:01:3F:23:91:3D:C8:4D:80:8A:08:DD:DE:FD:38:F6:D6:FA:76:8D
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 01967F0F4F3B1D75A58EE1367C1BFB0128E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
Manifest number: 121C
Signing time: Tue 29 Apr 2025 01:00:31 +0000
Manifest this update: Tue 29 Apr 2025 01:00:31 +0000
Manifest next update: Wed 30 Apr 2025 01:00:31 +0000
Files and hashes: 1: NKYWlz4gwZY4JXbw2fZ-33Yiq7Q.roa (hash: 78EN8i32FjxMTLLdcIXwd9Vb1kdj7OWCE2WX2/B4rLA=)
2: VUj2jDG1P5mpu3G51mRFUhrIbU4.roa (hash: twr8z4nqYemreBGHT9Kr4AfrcVcZYqpeai7rZry08Us=)
3: XTcKSLWfuBFJXxHElzRILyKxo5I.crl (hash: +vp+EFo+/2EdCsu59gC5Ed4JXahGcU3W+r8nDeFc/KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:4f:3b:1d:75:a5:8e:e1:36:7c:1b:fb:01:28:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: Apr 29 01:00:31 2025 GMT
Not After : Apr 30 01:00:31 2025 GMT
Subject: CN=04013f23913dc84d808a08dddefd38f6d6fa768d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:82:38:82:c9:06:fb:41:6e:83:6f:6e:e3:ce:
39:51:9a:68:07:c6:3d:6b:93:2b:5d:35:85:1a:25:
5a:9c:6a:f3:2f:b9:9d:a6:34:f6:82:f7:ff:f7:41:
c1:77:11:1e:b5:35:a9:73:ee:ce:0f:e7:c9:84:d5:
43:24:d8:25:d6:72:59:65:32:27:93:57:ef:5b:03:
bf:4d:b6:f5:b4:75:76:c1:e3:3a:ca:42:17:24:dc:
18:f7:59:b1:03:4d:f9:ea:a5:94:b4:8e:be:a7:b3:
40:ac:06:fc:2d:8a:f7:a7:bd:1e:01:96:01:d3:a3:
16:b7:15:ac:18:c3:e7:6a:c8:00:ed:83:e3:23:c7:
b7:8b:7f:6f:ec:4c:02:e9:4c:a9:b3:e2:23:83:d3:
42:2e:55:ed:a2:dd:1b:2e:6d:ad:83:0f:c6:69:c4:
8b:c6:a9:81:5d:4e:4e:e1:95:23:06:f2:08:b2:e1:
27:f4:30:9e:32:c1:1a:45:cf:7a:c7:1e:b0:2b:99:
77:c8:66:2f:f0:c0:f6:47:2b:c7:d1:3d:48:7a:d3:
9a:20:f9:82:d9:28:7a:12:1a:12:9e:07:87:6d:b0:
c7:dc:51:f8:67:0a:cb:04:de:e0:94:9f:ce:04:af:
98:e9:be:39:44:aa:34:a5:03:79:34:ce:4c:38:85:
5c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:01:3F:23:91:3D:C8:4D:80:8A:08:DD:DE:FD:38:F6:D6:FA:76:8D
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:07:9b:27:a9:0b:25:a4:19:c1:e1:a0:52:69:52:48:38:04:
e2:38:d6:2d:76:51:83:42:83:65:96:d4:ae:94:1b:07:d8:1a:
1d:3a:4b:93:17:01:6f:2e:bc:42:12:5a:23:e8:26:4d:b0:79:
f2:4a:db:69:df:4f:63:e6:12:7b:f4:8a:ca:b1:2d:81:3d:49:
ae:91:e1:6f:db:25:de:3e:92:5b:e3:a3:66:71:16:4f:08:23:
d4:f8:a7:ef:9d:a6:fd:77:1c:1c:c4:9a:d4:de:50:8f:6d:71:
51:a8:25:ac:e6:13:51:56:97:80:35:75:d5:bd:ac:63:a5:95:
f6:5f:ff:25:21:43:59:03:1d:c5:0c:c8:ad:1e:22:65:ac:3d:
d3:07:a0:a4:6c:20:13:13:01:42:e7:af:33:30:b7:82:3a:fa:
39:46:8e:20:96:53:88:43:d1:c9:30:56:14:b4:5a:bb:77:5d:
f7:8d:28:e7:7a:05:71:c3:04:88:2c:54:ab:5c:ee:c8:38:af:
8a:9d:af:a5:26:ca:43:7b:69:6a:cd:22:ff:23:0a:93:46:9d:
37:7e:c8:c1:72:88:95:f4:35:3e:b0:5e:fc:8b:47:fa:20:aa:
60:1c:32:3d:2d:f8:fa:89:cc:11:47:1c:40:12:6d:20:59:8a:
30:b9:c2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:03:46 2025 by rpki-client