Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
File: a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft (raw, json)
Hash identifier: Zarh45PIF8XSiIHMf2Qo3DOfZkPUOvSmEJqJccH0uKw=
Subject key identifier: 81:45:8C:4E:DB:E3:C6:71:7C:9A:8F:1C:B0:A8:F1:D6:DF:D9:38:D0
Authority key identifier: 6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54
Certificate issuer: /CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654
Certificate serial: 0196A2ADDA201647FD418B1A7F883507DDE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
Manifest number: 0C93
Signing time: Mon 05 May 2025 23:00:24 +0000
Manifest this update: Mon 05 May 2025 23:00:24 +0000
Manifest next update: Tue 06 May 2025 23:00:24 +0000
Files and hashes: 1: a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl (hash: 3PFLHOgyEVWQNN+x9lX0wcSMbg11Wkplun2lG0yCXM8=)
2: y1CXud9r4_KJCPJy5YSEoyYl1eg.roa (hash: kuTX8hxg4+tvv3VjP1J6iCQyHiFE3dinO8w9j6x97BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ad:da:20:16:47:fd:41:8b:1a:7f:88:35:07:dd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654
Validity
Not Before: May 5 23:00:24 2025 GMT
Not After : May 6 23:00:24 2025 GMT
Subject: CN=81458c4edbe3c6717c9a8f1cb0a8f1d6dfd938d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:6c:9f:8b:e8:06:95:3d:67:62:a0:f4:e7:
9e:72:5a:8e:6b:cd:20:55:3e:20:c5:a2:5d:dd:ff:
a2:48:b0:79:ce:62:41:af:e8:58:b1:2b:22:91:82:
bf:cd:7c:42:62:e1:59:6f:f5:09:de:e2:48:94:a5:
99:22:9d:f3:a5:c2:bc:c0:ff:04:d3:ab:87:09:5a:
74:94:f2:f6:a1:3c:63:4b:77:69:75:e5:e0:d1:8d:
a0:a2:59:b3:0a:b4:bd:65:91:4b:dd:3f:5f:dc:c0:
a6:a2:c1:0d:0d:ae:af:07:3b:f8:04:cf:75:4b:a2:
05:c0:30:88:ca:70:65:db:8e:c8:39:00:d7:28:32:
c0:af:ae:6f:fe:51:a4:b8:da:c7:8c:e1:18:3b:5f:
62:71:f9:a6:aa:7c:11:94:2b:c3:8c:7f:0e:90:4f:
62:4e:ce:c9:4e:54:34:e9:c6:35:f5:25:3f:40:04:
e1:cf:60:53:83:b7:2f:6d:e7:ea:38:e2:f0:cf:54:
6f:2f:77:7b:75:99:c5:be:e6:10:36:a6:5d:96:62:
9a:b2:d3:5c:ef:1e:6f:6a:bf:81:c1:37:e6:61:26:
4b:93:52:b8:3b:c3:08:f9:5c:9e:0b:db:92:b4:da:
21:e4:46:23:02:64:a6:b0:0b:7d:3a:19:6e:66:61:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:45:8C:4E:DB:E3:C6:71:7C:9A:8F:1C:B0:A8:F1:D6:DF:D9:38:D0
X509v3 Authority Key Identifier:
keyid:6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:97:96:05:27:4f:bd:a5:7f:e1:5b:bb:3d:86:30:bd:d7:47:
d5:57:84:1c:ed:a3:42:76:87:23:40:9a:1a:12:22:9c:c0:e3:
ea:3e:e7:94:61:d7:19:5c:3c:58:e3:83:ed:94:85:4f:4c:d1:
1e:38:dc:28:89:ce:4a:37:ac:ac:e4:77:2b:15:6b:52:46:e9:
4d:30:db:55:04:2f:33:b2:1e:83:10:8a:e0:9b:6f:2a:f5:2a:
51:89:cf:5e:9d:17:6c:f5:5b:3a:37:56:ed:6b:3b:13:36:c7:
05:1a:79:3f:0e:0c:ad:ce:fc:e6:7b:54:b4:43:c5:31:14:45:
4b:8f:93:a9:57:18:6f:31:79:7e:d2:66:91:10:2c:47:58:77:
ac:04:04:3c:10:b1:79:b6:16:be:02:26:6e:e0:2b:a6:c4:27:
dd:ff:51:72:09:f1:b9:22:b1:f0:0c:b5:a0:dd:01:7f:ba:b8:
91:4c:13:ce:b3:f8:75:e6:41:23:d8:c4:0c:96:14:f4:08:09:
5b:f8:70:61:a3:25:50:82:e3:26:94:51:b9:2b:c9:79:89:1e:
e5:52:1b:00:93:67:fa:c6:f6:63:f5:bd:20:7d:17:a0:34:04:
c5:4f:c9:88:55:f0:8e:48:5f:1b:c5:f0:62:aa:34:46:79:42:
29:58:5d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:51:56 2025 by rpki-client