Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
File: pXtgj8zzIw5EXJg_nja1DhH3LPI.mft (raw, json)
Hash identifier: 9N+8hXqg7CzKtNOU4dnqV2UipSojgn/NS0oV+8OCcLg=
Subject key identifier: 8D:3C:8B:9C:F8:B2:EA:DF:3E:C0:CB:A7:C5:6F:72:4B:81:DE:DD:B1
Authority key identifier: A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
Certificate issuer: /CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Certificate serial: 0196CB3BE596497055837FE302627F60CC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
Manifest number: 0FC6
Signing time: Tue 13 May 2025 20:00:22 +0000
Manifest this update: Tue 13 May 2025 20:00:22 +0000
Manifest next update: Wed 14 May 2025 20:00:22 +0000
Files and hashes: 1: NhJBxI5W8KC_WePH5ss0tv9aU5U.roa (hash: /CWlrfID9lQOxgVeBTFIGSk2eqixT2ZM3bIGkRsAuOA=)
2: pXtgj8zzIw5EXJg_nja1DhH3LPI.crl (hash: rIJVigVvblVxF40qjOKZMIie3GtPlKAACdGKtWvq89k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:3b:e5:96:49:70:55:83:7f:e3:02:62:7f:60:cc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Validity
Not Before: May 13 20:00:22 2025 GMT
Not After : May 14 20:00:22 2025 GMT
Subject: CN=8d3c8b9cf8b2eadf3ec0cba7c56f724b81deddb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:74:88:42:75:1f:88:45:b8:45:1d:ff:b4:
08:2e:16:44:57:77:83:fc:91:0a:de:c7:a0:7b:f1:
e9:f4:f4:1e:3a:92:2c:ce:db:14:cb:bb:d2:db:ed:
1e:a8:6d:e5:44:14:ca:67:19:4f:e4:74:76:da:1a:
a7:de:5c:fe:48:6a:f0:7a:04:ff:f5:06:69:2d:08:
46:99:15:5c:91:03:e1:ad:8e:f6:54:41:70:21:21:
82:40:27:02:ab:da:4d:d5:d8:5a:e5:2d:eb:d3:15:
d3:17:96:46:b8:8d:52:0c:75:f2:44:5d:1c:ed:ce:
f2:21:b0:24:ce:9c:62:75:dd:23:81:09:fb:1d:dc:
a6:6d:63:85:b5:bf:e9:4e:14:d9:b1:c2:01:77:dc:
e3:77:fe:93:04:61:29:65:ad:db:cc:21:26:c9:3c:
ac:0e:46:14:52:e2:45:88:41:9b:4e:57:c2:25:1f:
88:61:05:74:07:e0:50:01:fc:4d:e7:43:d6:72:da:
6e:be:e0:44:65:67:2a:1f:24:a9:b0:50:b4:ec:d8:
53:8d:a7:7b:51:e8:1d:c5:e1:fb:02:0a:2b:83:f4:
15:d5:05:38:ed:68:f6:f6:df:8b:f8:24:34:2c:8e:
6c:ef:18:54:3a:2b:ef:b9:78:87:c9:a9:5b:2d:6e:
af:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3C:8B:9C:F8:B2:EA:DF:3E:C0:CB:A7:C5:6F:72:4B:81:DE:DD:B1
X509v3 Authority Key Identifier:
keyid:A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:56:14:bf:4e:e6:e9:08:37:cb:1b:20:8a:a1:62:c0:88:22:
cd:8a:87:e7:5c:5f:f5:30:fb:1f:0f:17:73:ba:d6:0d:b7:be:
9a:ea:e1:2c:3a:a0:30:cd:c5:56:47:cd:84:86:56:44:58:d6:
57:81:a2:7a:16:e9:c0:63:7f:f0:2c:a0:81:3a:46:94:5f:0b:
ad:c5:b3:12:6c:3b:b0:59:9c:8b:37:cf:aa:71:3e:12:0f:6c:
48:c9:78:fe:86:a8:56:0a:58:2a:ca:e9:0f:ed:fe:71:44:9b:
9b:44:dc:9d:7b:a1:9f:9f:61:e6:b0:3b:1b:b2:8f:79:21:9e:
ba:1b:4c:5f:0e:85:85:c8:40:39:60:62:4b:5c:e3:6c:22:eb:
75:59:21:81:bb:b8:24:1c:21:a7:64:17:d0:56:ff:78:9b:70:
4d:3b:22:01:65:13:73:da:98:ef:e3:f8:46:0c:3d:69:bd:54:
42:c2:7d:a1:71:b5:9d:b0:03:93:39:06:7a:a5:cf:32:06:43:
95:b1:a8:53:fe:88:30:02:d9:af:87:b3:d1:7a:fb:72:f9:9c:
68:4f:ee:b0:b7:11:10:2d:d9:4b:16:6c:dc:1e:c5:a2:bb:4d:
60:bc:6c:de:a9:1c:50:49:d2:d4:e7:ae:85:8f:93:5c:bb:5c:
e4:cb:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:54:49 2025 by rpki-client