Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: amKui8g3g19H1/LMCrvpauaypmu65Dcfl6gXHAtkUCU=
Subject key identifier: 39:28:87:61:8D:C4:F7:A6:5A:C4:05:28:17:E4:30:53:B9:0C:00:2F
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 0196BE5C4C487FF894D8E8EDA14EA1E27408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 08A1
Signing time: Sun 11 May 2025 08:00:41 +0000
Manifest this update: Sun 11 May 2025 08:00:41 +0000
Manifest next update: Mon 12 May 2025 08:00:41 +0000
Files and hashes: 1: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: P5MwEcHLWtv9oe1Y4Z3fna5R6w92MNJEtk5/z6FgH6U=)
2: oYXpqhTt3GbQvZqNdYr3EWQ5ung.roa (hash: UPRTIlRixS9CM22oBbc4c5Z63dIGJf+vJONZ8V2i0x0=)
3: pcs_PEHDTdXvP_iINnpW2AcXpTo.roa (hash: bWlTVPyUsWBnzuOtIjYtj485am3ZoH6EessaELskjTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:4c:48:7f:f8:94:d8:e8:ed:a1:4e:a1:e2:74:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: May 11 08:00:41 2025 GMT
Not After : May 12 08:00:41 2025 GMT
Subject: CN=392887618dc4f7a65ac4052817e43053b90c002f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:05:2d:9e:b5:7a:88:92:c4:26:be:25:1b:
a7:f5:2c:ba:e4:75:c6:22:39:7f:07:9e:1a:76:31:
4c:fc:75:10:e8:6e:57:e3:5b:fd:78:d6:29:c1:d4:
66:8c:5d:4a:b1:19:4e:cf:fc:c1:a4:5f:54:a7:1f:
dd:e4:56:1a:b8:3d:47:b7:85:c8:97:d4:b5:51:ed:
7b:e2:66:14:f7:62:1f:ed:ff:0b:fb:7d:af:0d:d2:
43:69:cc:e0:08:1a:97:0b:ae:30:53:08:da:9c:a5:
35:cf:32:c3:98:8e:d0:05:9a:45:15:b8:2b:28:d3:
62:42:69:15:e2:32:26:74:dd:11:50:8a:12:1a:14:
63:c4:f1:64:88:f3:b1:26:61:32:2a:65:ba:0c:99:
a0:e2:bb:8b:b0:3a:46:c3:1d:44:78:d6:4c:c3:39:
d4:28:4f:10:c3:ca:93:3f:8b:2d:b4:06:91:18:1e:
44:f5:62:d5:35:be:78:71:07:37:5e:52:91:e8:58:
bd:3d:d4:82:9e:c6:8e:7f:a1:8f:3d:d9:d7:c4:0d:
62:7a:ef:d9:d3:66:d1:c2:d7:79:92:22:d5:48:fc:
88:10:33:3b:1a:08:c3:9b:7a:78:5a:7d:f6:ed:be:
eb:41:27:63:5f:5c:06:3b:b5:e8:ce:08:ad:4e:12:
80:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:28:87:61:8D:C4:F7:A6:5A:C4:05:28:17:E4:30:53:B9:0C:00:2F
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3c:9d:7d:57:e9:34:8f:83:4e:72:c7:7a:b8:3f:f6:67:5c:
75:3f:37:ec:64:a4:92:83:0d:92:61:94:13:4b:08:89:91:9a:
00:a0:d1:1f:16:0e:d0:1f:fb:a2:9c:9e:06:80:ec:fc:c5:1f:
5d:3d:66:91:28:9f:91:80:bc:d3:a4:34:18:c1:7b:4d:75:c5:
44:bb:05:a5:6a:ab:d4:27:d6:78:08:8c:aa:63:c5:53:58:91:
b6:a3:5f:d9:3a:3b:93:d5:e2:5f:86:72:ac:72:3b:6e:94:35:
b2:5a:0c:36:ef:ad:84:8c:a4:c9:d6:18:0f:d4:68:f5:db:33:
37:2e:50:0c:46:71:7f:06:18:bc:bf:38:fc:bf:24:e9:36:e2:
35:98:ef:f1:eb:49:f9:46:75:6e:fb:46:2c:1f:22:76:97:4e:
a4:9b:67:74:41:3c:2b:00:93:30:0b:28:56:fb:a0:b1:dc:2b:
45:ee:53:ee:77:aa:ec:58:60:a9:a1:71:a7:d1:76:82:b6:fc:
f2:ae:73:cf:c4:fa:0b:4e:f5:27:a4:f8:72:83:e1:37:a5:56:
fc:53:03:e8:93:d7:b4:2e:36:ff:db:14:15:92:ca:a1:8a:f9:
2d:3e:2f:37:43:05:76:bf:9e:b8:50:6b:1e:0e:7c:42:2e:eb:
fa:2d:7a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:05:08 2025 by rpki-client