Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: NS55k2SMmz7M9v1nSxGOHSnxJcIlG1TnZ9YRMSq0p6c=
Subject key identifier: 54:B5:C1:D8:D8:89:05:DC:11:67:41:33:43:A9:A7:37:FC:CE:16:19
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 0196A61C9ED81E6B712BDDB5375271445AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 0F59
Signing time: Tue 06 May 2025 15:00:15 +0000
Manifest this update: Tue 06 May 2025 15:00:15 +0000
Manifest next update: Wed 07 May 2025 15:00:15 +0000
Files and hashes: 1: 5kIp4bFmAr9lOCjBtU4-CSX7D0w.roa (hash: zS6XZLioq/dFM9rTCOe5dC9siPtnmQmcYc9glHbFesE=)
2: WZoVc8N-YD-8FMKAITneTMD8_4k.roa (hash: d546sm0t0rb46HppUnfY7MCyS/rnnp2kV23n3HY9/us=)
3: bZJxdCs0gWqYryxwQS8EGlLZ93c.roa (hash: ZMF+prTjcHa6DFcnagp286MUC0TlcS1uVKhgY1MMJNc=)
4: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: 2vqKwquTLvZdyDiFvhC/w6VMOBDBw6elQudJ+1wTGDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:1c:9e:d8:1e:6b:71:2b:dd:b5:37:52:71:44:5a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: May 6 15:00:15 2025 GMT
Not After : May 7 15:00:15 2025 GMT
Subject: CN=54b5c1d8d88905dc1167413343a9a737fcce1619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:17:27:bd:01:c8:29:e5:6c:d9:d8:f6:00:
ac:31:fb:b8:a6:c1:f0:97:9d:93:c0:d4:4e:de:dd:
a7:a1:11:5e:2f:20:3e:ee:3f:ce:dc:4d:68:5e:7f:
1a:0c:32:75:d7:d1:6c:79:09:40:77:a3:c8:3c:ca:
53:1b:8d:42:ce:8a:b8:07:f8:e0:a7:cb:ce:18:eb:
20:ea:95:82:3a:02:b3:08:bd:9a:f4:4e:0b:da:80:
1c:6e:eb:1b:3d:f7:35:8f:aa:61:de:21:53:07:fa:
fd:cb:03:69:05:8d:e4:98:1f:37:ba:54:5c:82:34:
f9:94:b0:a4:78:f9:c6:88:71:42:06:4d:5b:d5:13:
20:49:12:b5:20:b8:83:00:e6:7b:29:68:3f:0c:5e:
d9:14:41:69:20:2c:ba:b7:07:3e:eb:6a:57:59:d7:
a2:b3:a9:5d:d2:a4:80:ea:9c:bf:58:6c:cb:7f:fa:
de:ad:47:be:50:eb:e3:6d:75:8d:8c:56:01:38:69:
9b:de:74:99:c3:54:bd:a3:b4:df:82:bb:11:1e:dc:
51:96:d5:78:ac:1b:b9:65:cd:cf:2a:22:4e:61:41:
2a:f1:b6:99:17:61:4a:39:5c:b5:74:46:7b:61:cf:
86:ef:d8:52:58:82:8d:0a:a9:f1:8d:5f:86:60:2c:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B5:C1:D8:D8:89:05:DC:11:67:41:33:43:A9:A7:37:FC:CE:16:19
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:16:c4:1c:ad:51:ac:ea:96:38:17:59:75:ba:46:a8:78:0c:
e6:7e:e5:50:6f:b9:60:c6:ce:dc:a0:6e:e7:6e:9a:a0:b7:45:
0f:6d:18:c6:72:d3:6e:6d:4e:26:36:95:8a:46:79:98:87:0a:
12:25:1e:52:5d:86:47:5a:cb:59:e1:08:d9:02:62:ac:a8:35:
71:b8:39:60:10:7b:7b:50:9b:44:e5:05:c4:9b:ae:6f:a5:78:
88:88:1e:b6:1f:4f:4a:92:9a:24:9a:01:89:26:a2:c1:57:0d:
c2:83:ad:37:65:6a:4b:ef:bd:72:29:a0:fc:b5:08:db:55:1c:
f1:c2:e8:70:90:6f:ae:a8:de:33:2b:d4:d5:6e:14:68:b2:7c:
26:cf:16:91:b7:6a:0c:0a:28:14:d0:18:28:aa:fe:04:06:8d:
2c:00:ea:09:d4:51:5a:a3:9a:53:3e:de:2d:7c:54:f8:1b:9d:
03:a4:a4:b4:8a:c9:9f:fe:c2:ea:ab:4e:eb:8a:97:fe:f6:82:
6c:13:d1:e7:34:4d:df:5b:08:52:93:f7:65:3d:b3:52:da:7e:
8c:29:f5:fd:c0:14:59:04:6a:7d:74:89:78:9b:0b:da:dc:7b:
84:9a:65:0f:51:05:65:89:c8:7c:47:d4:b1:c1:58:2e:60:17:
dc:cf:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:57:23 2025 by rpki-client