Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
File: x0HESpzVjhJWkGY32TXDGQ9_6xo.mft (raw, json)
Hash identifier: fJIF1FApDXeK0naR97wB6xq/zwoYve/e3Hs4wR/b+mM=
Subject key identifier: 0F:C5:20:82:15:FE:C8:C7:6B:A6:82:54:9F:C3:6E:E5:BA:D9:28:4F
Authority key identifier: C7:41:C4:4A:9C:D5:8E:12:56:90:66:37:D9:35:C3:19:0F:7F:EB:1A
Certificate issuer: /CN=c741c44a9cd58e1256906637d935c3190f7feb1a
Certificate serial: 0196ABB10549E1F4BFCF3B06F69F3258AB09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
Manifest number: 12CC
Signing time: Wed 07 May 2025 17:00:27 +0000
Manifest this update: Wed 07 May 2025 17:00:27 +0000
Manifest next update: Thu 08 May 2025 17:00:27 +0000
Files and hashes: 1: qptSZ2XpOAOxaz7moTgQi3lsLeM.roa (hash: KtrtO/sBSgHAN1gAhTfDKw+KYUTZI/b5RNJ8EjfK/UU=)
2: x0HESpzVjhJWkGY32TXDGQ9_6xo.crl (hash: g/Ur3sNs6UzTqkC6c3Yoke7iBRHkNhb4NnGOl6SeszI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:b1:05:49:e1:f4:bf:cf:3b:06:f6:9f:32:58:ab:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c741c44a9cd58e1256906637d935c3190f7feb1a
Validity
Not Before: May 7 17:00:27 2025 GMT
Not After : May 8 17:00:27 2025 GMT
Subject: CN=0fc5208215fec8c76ba682549fc36ee5bad9284f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:6e:64:fe:ba:51:c9:cd:73:bf:d6:f5:36:
8f:7a:85:a4:5b:7e:a4:e5:9a:4b:9e:96:18:78:b0:
72:d4:76:ae:c0:b7:4f:8e:08:3e:5c:c0:31:be:9f:
68:52:0b:25:e8:26:0d:2b:13:ff:19:f0:5c:5d:a2:
cf:93:16:f5:76:a0:c4:68:bd:a6:c1:14:1b:48:48:
18:6e:af:03:71:2d:aa:92:64:ac:0a:42:13:29:38:
9b:31:71:63:3e:20:81:1b:b4:59:71:58:67:35:71:
4d:78:31:1e:5f:48:fc:1b:97:73:55:eb:1b:18:d2:
08:f9:03:6f:a1:7a:9f:6d:36:87:f1:3f:cf:5b:22:
f0:77:7b:62:80:8e:52:3e:1e:2d:7d:1e:56:96:44:
fe:58:49:39:4a:ec:c7:a7:e6:ca:84:9c:32:4d:0d:
6e:6f:3f:a1:27:c4:8e:72:f3:03:c7:fc:77:78:ac:
71:b4:b1:97:92:3b:1c:da:d5:f4:d5:89:cb:c2:ba:
94:22:1c:fb:a5:c0:63:b4:34:f5:18:0b:a7:4d:9e:
1c:2a:31:b2:8a:d3:ca:ab:93:b0:16:2a:4a:3b:ae:
a9:1f:b8:e0:d9:ab:17:05:46:fa:6a:a5:44:6f:45:
20:ad:aa:04:b0:e4:9d:d6:ad:04:c5:de:19:fc:3a:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C5:20:82:15:FE:C8:C7:6B:A6:82:54:9F:C3:6E:E5:BA:D9:28:4F
X509v3 Authority Key Identifier:
keyid:C7:41:C4:4A:9C:D5:8E:12:56:90:66:37:D9:35:C3:19:0F:7F:EB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d0:e9:03:85:4c:f7:53:39:1a:fe:74:2c:2d:eb:e8:0b:f4:
c1:32:c1:20:c4:20:a1:74:60:c7:26:29:1c:ba:65:7a:8c:92:
e5:6a:83:fc:66:43:7e:6f:45:b5:54:49:e0:46:e6:7b:45:16:
99:0a:c2:b0:e3:76:21:f1:52:f9:3f:bc:68:75:64:b8:3f:01:
71:90:7a:bf:14:b0:51:e6:ba:09:14:d2:a4:af:47:dd:21:8e:
59:b9:66:2c:3a:12:ea:ab:e7:5c:e0:35:c0:42:d9:87:9f:2a:
4d:6a:e0:6b:eb:44:bc:75:d6:12:bf:b7:2f:74:03:e7:cf:06:
91:00:93:6f:fd:a1:ea:0e:3c:0a:c2:84:8d:14:ed:2b:e7:71:
eb:04:cc:f6:38:2d:87:a2:fd:86:42:c3:38:5c:ad:83:14:2e:
8e:ff:46:28:69:0e:f0:64:ae:4c:4c:e0:cf:89:2d:df:e3:7f:
e1:28:28:ca:af:70:86:d1:82:9e:78:6c:8b:c0:b2:9b:47:6d:
52:8a:21:35:4f:a0:fe:1e:0d:81:a4:cc:60:8a:a2:95:39:4e:
9d:59:59:11:57:91:72:03:4e:a3:94:e7:c9:74:0c:13:82:b2:
06:ec:69:3b:6e:2d:7b:f3:4d:ae:d3:c1:d4:12:ab:c4:15:5d:
a6:20:3f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:20:00 2025 by rpki-client