Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json)
Hash identifier: QJvzSONEMMTkYztgnykv6tfrqozIbwexxHP6oElthfI=
Subject key identifier: 4C:DC:73:BF:79:39:40:EB:E2:D1:64:A1:5D:89:D0:CD:DD:E7:20:7B
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 0196C75F701F259A57D58C3BE7B80EE635CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
Manifest number: 034C
Signing time: Tue 13 May 2025 02:00:42 +0000
Manifest this update: Tue 13 May 2025 02:00:42 +0000
Manifest next update: Wed 14 May 2025 02:00:42 +0000
Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: dy/bpyEYpiQaUqWcDcFF1Fp56Qu/V9seP+OlBFPAQA8=)
2: devZOEgryptZR-bT6KNMpTw3Mfc.roa (hash: u3HbxNlq49urjWUiGXoyu0fcegzQ7OgqdK+RiiJSzRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:5f:70:1f:25:9a:57:d5:8c:3b:e7:b8:0e:e6:35:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: May 13 02:00:42 2025 GMT
Not After : May 14 02:00:42 2025 GMT
Subject: CN=4cdc73bf793940ebe2d164a15d89d0cddde7207b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:db:8e:03:9f:6f:27:52:0a:13:92:59:7b:
3a:2f:ac:d0:72:9f:50:15:e3:ab:4a:67:fd:e3:5c:
8b:5d:9d:9e:8c:7c:49:50:26:80:3d:95:9c:f5:21:
c6:19:53:c8:59:7f:48:54:23:db:6a:ef:9f:a3:65:
99:b8:28:9e:c9:1a:e2:5e:fd:0a:35:9d:5f:c4:50:
4f:33:a8:8d:92:fb:56:33:0a:4a:68:3e:7d:3f:8d:
b9:11:43:b3:1b:42:93:bf:76:9a:a6:51:47:31:3e:
df:51:f3:59:09:54:fc:d5:a5:c9:79:b6:9a:dc:77:
73:e0:90:40:c0:02:e6:f4:3f:83:78:20:04:97:3d:
88:3c:8b:85:9b:52:09:50:bf:19:54:a5:43:a0:c7:
f8:c5:de:ae:64:c6:9a:12:f6:fc:6f:da:61:3e:a6:
21:84:8b:ab:b1:dd:9f:d4:65:f6:e7:20:8f:c9:21:
90:06:26:ac:9c:b3:82:9f:91:1a:c7:48:e1:a7:f6:
42:2a:7a:0c:13:c0:86:6d:e0:0e:42:24:e3:00:1a:
22:65:af:1b:e6:ee:87:86:7a:a3:8a:c4:42:0a:d6:
95:73:34:03:ad:3b:79:e8:0b:88:3d:84:38:27:a2:
58:c2:a9:23:57:0c:a4:bf:ce:e1:e7:66:5a:19:a9:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DC:73:BF:79:39:40:EB:E2:D1:64:A1:5D:89:D0:CD:DD:E7:20:7B
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:87:71:fd:96:07:81:b8:31:9d:82:5a:8e:61:da:a0:37:57:
ae:d0:a6:e1:9a:b9:d0:6e:fe:c6:52:2c:03:9d:c3:c3:53:7f:
02:c0:49:37:1c:37:34:b3:b9:53:9a:7f:95:c8:e1:6a:94:9d:
b8:28:78:ec:57:0a:77:5c:fb:83:4d:7f:aa:46:2b:b4:0a:ea:
45:e6:8d:a7:be:12:71:69:64:25:d3:9a:e7:d7:0c:04:33:55:
1c:52:77:a5:23:29:a4:92:8d:44:d9:bc:90:24:81:99:0a:81:
12:06:aa:1e:f0:c3:5c:23:30:be:23:ea:a6:21:e6:1f:f5:59:
cd:cc:89:e9:84:f0:9e:c5:16:2f:1f:db:78:1f:97:33:7a:62:
ca:b8:d9:24:ff:a6:e6:2a:20:bc:f5:46:9e:f9:ff:3f:6f:c1:
82:7c:35:74:74:ca:da:2d:a2:0f:ca:c9:be:25:73:bf:43:71:
41:e6:8d:77:1b:e7:74:ec:26:02:57:4d:31:32:4b:ff:bd:24:
ce:41:94:6a:81:c5:35:88:97:0e:f2:0d:23:87:be:9e:61:c6:
a4:f8:fc:c2:71:a2:1e:3b:43:ac:ed:b2:1d:51:0b:54:16:25:
e5:c3:4e:96:3a:6d:eb:fc:43:16:25:ce:ce:46:2a:37:aa:8e:
58:12:a5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:24:30 2025 by rpki-client