Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json)
Hash identifier: +V0rGEhy1RbgfRlv86c+V5BAHjbi+uLBDV2mDJ6dTUw=
Subject key identifier: 1A:CF:40:72:C5:62:02:39:65:CD:A0:08:FE:FE:29:6D:90:D5:30:F8
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 0196729D706BCD8E5BBE4ED521CA5C8C060F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
Manifest number: 0C2C
Signing time: Sat 26 Apr 2025 15:00:42 +0000
Manifest this update: Sat 26 Apr 2025 15:00:42 +0000
Manifest next update: Sun 27 Apr 2025 15:00:42 +0000
Files and hashes: 1: 40yCVkYGTOMJYURdKu5OL8q7Bzw.roa (hash: h/nti1hzbLvvpfXJilPwqQ4MgoCvDWVJCjnc6zF6lIg=)
2: 959nax4Sel7CbjLeAYmLWWQndxQ.roa (hash: liX4bBBihJXYjqG/dIaKEN/KHAc7Bsnfhrqb4D2Gsu0=)
3: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: 4SdbzdyltlBgV9FPGVzN6sr6ZShNiA2blmO0lf3snXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:70:6b:cd:8e:5b:be:4e:d5:21:ca:5c:8c:06:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Apr 26 15:00:42 2025 GMT
Not After : Apr 27 15:00:42 2025 GMT
Subject: CN=1acf4072c562023965cda008fefe296d90d530f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:37:d1:e7:6e:f4:a1:fd:3c:b0:5d:0e:e0:
b4:bd:ea:4d:05:bd:7a:cc:66:91:71:86:a6:cd:2a:
25:aa:0a:35:73:43:b7:c9:a2:2e:6a:6b:ed:ff:b1:
59:d0:04:da:ee:ef:39:0e:23:b9:81:d7:2c:c0:c8:
97:43:c3:5f:45:e6:b1:54:8f:45:45:ab:07:4f:8b:
12:26:3f:62:28:88:4d:60:a2:8b:38:79:5e:79:4a:
7b:61:21:38:7c:13:2f:24:24:34:d6:0b:76:f7:99:
73:32:ad:06:c3:ee:11:9c:81:fc:3f:e5:5d:c4:cf:
8b:8c:0f:3f:62:55:5c:b8:a4:75:8a:0e:13:8b:fa:
14:13:07:9b:ea:c9:9b:98:94:a2:32:57:52:30:eb:
49:fb:06:80:9a:e4:91:2a:57:35:ca:c2:ba:4a:9e:
ef:ed:38:2a:84:07:95:51:56:c3:ad:da:77:24:96:
be:ce:50:c6:c4:6d:b3:09:84:95:ff:75:0b:fe:47:
ac:7d:5e:0e:ba:80:87:3b:76:9f:aa:85:57:2f:1e:
64:17:12:f0:77:c9:92:95:83:97:7a:43:68:96:13:
60:d8:62:0e:0a:39:27:e6:ac:df:92:89:b5:1f:5f:
79:0d:f8:7b:e0:d0:30:38:e2:6d:6c:c2:4c:e2:ef:
c0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CF:40:72:C5:62:02:39:65:CD:A0:08:FE:FE:29:6D:90:D5:30:F8
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:98:3f:6e:bd:19:68:ca:45:ac:2c:b0:1b:d9:6c:0e:47:b0:
51:f9:81:0e:65:c3:27:22:9d:6e:0e:a9:cf:4a:e2:b3:5f:b6:
ae:7e:44:55:a2:99:56:6a:7c:e0:20:4b:c6:27:7d:fb:81:50:
59:ff:3f:fb:7f:cb:07:a4:3c:68:0e:45:a4:23:db:fa:80:69:
5b:54:6b:c0:c9:31:98:dc:87:08:b7:3e:c0:45:5a:95:74:ec:
92:d2:8b:51:d1:b8:4c:2d:84:1d:23:f1:b1:0d:a3:8b:b7:53:
cb:db:9b:e4:1a:f9:d3:db:93:1d:10:ce:25:ba:ae:84:12:98:
a6:b1:c7:c0:83:99:bb:26:3a:8b:81:ca:3c:4b:a1:5c:39:1f:
f4:00:93:36:ac:bf:82:32:aa:ec:54:66:0a:f9:0d:05:ff:dc:
20:7b:ed:18:1c:fe:f9:c4:13:24:8f:d6:8e:51:7d:c6:bf:e7:
4f:ed:9e:31:ba:37:6f:c6:29:36:00:f8:c1:0b:d1:d6:bc:fb:
05:15:e9:30:c8:99:21:61:6a:53:86:ad:f7:37:c3:10:e4:2d:
62:d0:ae:0f:7d:f8:39:bc:a9:e3:a6:07:d1:df:49:0c:89:d6:
d7:f6:16:33:10:a5:4f:80:c1:b7:ac:38:23:af:f0:af:d3:ff:
78:36:59:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:04:43 2025 by rpki-client