Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
File: xmJhwznF7fjYxIPwjka4SAqAXvE.mft (raw, json)
Hash identifier: s7fv9Da7u/ogDAHU/RJixOjXTDB3VKloogLqDvKgots=
Subject key identifier: 4A:18:EA:25:E2:75:53:3A:DD:3A:C2:E2:B7:2D:AB:86:DA:C5:D7:ED
Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
Certificate issuer: /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Certificate serial: 019677FB79F28F8A8A949D80262D02C9F8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
Manifest number: 144C
Signing time: Sun 27 Apr 2025 16:01:31 +0000
Manifest this update: Sun 27 Apr 2025 16:01:31 +0000
Manifest next update: Mon 28 Apr 2025 16:01:31 +0000
Files and hashes: 1: n0PQVaq6lp0buyh71HmvCGJy3cY.roa (hash: QL9cb+VrnWZDKfgvQ3BKYLRd9xHYcd+B/V/qEKLIfgU=)
2: xmJhwznF7fjYxIPwjka4SAqAXvE.crl (hash: 1dlj5rdstBnkDVXtXZ/HI+03FrE37SFySVpdPOkgCgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:79:f2:8f:8a:8a:94:9d:80:26:2d:02:c9:f8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Validity
Not Before: Apr 27 16:01:31 2025 GMT
Not After : Apr 28 16:01:31 2025 GMT
Subject: CN=4a18ea25e275533add3ac2e2b72dab86dac5d7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:03:e5:c3:a1:e1:39:e4:bc:05:20:bc:61:
1a:6f:f1:8b:38:c9:1e:0c:46:69:26:97:fe:53:5b:
89:8b:84:ac:52:79:4a:8b:36:2e:41:ca:1d:dc:7b:
c2:6c:65:a7:a9:50:95:fd:75:fe:0e:f3:e5:fa:58:
8f:a6:91:ef:21:2e:ca:38:db:ef:67:e2:c5:b4:76:
50:83:fb:bd:24:86:f3:ea:77:0e:ad:70:bd:1e:99:
64:ae:1b:62:87:c9:3d:a6:99:b8:67:3f:d5:f7:0d:
b1:d3:49:a7:57:59:4d:be:4c:1b:da:05:35:9a:39:
33:c2:5b:b6:49:94:2f:6c:c9:8f:25:f8:5f:92:a1:
b1:25:5f:a6:da:e3:31:74:62:66:21:fd:dd:f1:3e:
fa:a9:f3:5b:b6:75:5b:b6:26:ff:18:e7:49:c2:39:
d8:91:22:0b:13:60:ad:7a:b3:3e:45:3d:1d:88:cd:
39:6c:76:ee:eb:dd:ba:17:f8:bc:cf:c0:df:50:4c:
e2:ff:6a:1a:b0:1d:37:5e:b5:59:38:5b:6a:f0:d1:
f3:41:bf:c9:c8:30:30:c8:19:d3:90:f6:8f:89:27:
0a:2d:cb:b4:b6:17:3e:3b:30:80:7a:34:51:07:8b:
42:30:9c:94:3d:cf:6f:7e:09:de:c9:7d:bc:d7:73:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:18:EA:25:E2:75:53:3A:DD:3A:C2:E2:B7:2D:AB:86:DA:C5:D7:ED
X509v3 Authority Key Identifier:
keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:31:6f:88:d5:65:e2:12:5a:1c:3c:30:16:8d:9f:e2:77:50:
df:e2:ed:66:d9:53:78:d9:4b:bb:85:6c:92:5f:8c:6c:31:c1:
b6:46:a9:e9:f0:20:de:bd:79:a7:65:8f:b7:2b:73:b7:c9:f4:
c2:80:62:fb:d3:b5:c6:13:79:bb:87:b7:ba:e1:78:e0:5d:71:
d5:76:6b:d9:d2:50:17:4c:55:98:b1:3f:aa:2d:a0:b9:1c:72:
bb:18:91:94:75:4d:d1:c9:56:45:b4:f0:fc:d0:40:f2:05:1b:
2c:48:cf:40:71:d4:b2:85:4d:3f:79:8c:51:0c:e5:76:42:e9:
a2:02:a4:93:ac:b7:56:fc:85:95:94:b9:38:91:e0:d8:60:74:
cd:b4:ac:30:45:ff:14:16:8e:45:71:29:9e:ce:79:46:3f:f5:
ba:6f:54:c0:fa:8f:1b:70:18:0e:66:8b:21:2f:e8:5e:da:2f:
e7:35:38:f5:44:4a:ff:08:04:44:ae:26:0a:e3:96:3e:a8:70:
1b:09:ac:2d:a6:70:5f:b3:6e:7d:c2:46:a0:48:81:d2:1b:7e:
d5:c8:33:78:45:8a:14:0d:d6:96:ae:dc:ef:3e:f0:0b:b5:8a:
56:89:bd:92:e2:53:f6:16:f9:2e:35:67:0d:8d:70:1b:a3:ca:
f9:df:3a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:46:29 2025 by rpki-client