Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
File: xrxZ-PdUTx6lulwYs44lc1F8kTI.mft (raw, json)
Hash identifier: tWoviOWkmNt8GR6STLrvlf+ciJCBg1+76Nf1X8P2rGI=
Subject key identifier: E3:1B:F1:52:6C:7C:D8:A5:29:57:72:09:CA:CC:EE:16:A8:67:81:91
Authority key identifier: C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
Certificate issuer: /CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Certificate serial: 0196BE259ED09044AD4C755B37E278581470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
Manifest number: 045D
Signing time: Sun 11 May 2025 07:00:58 +0000
Manifest this update: Sun 11 May 2025 07:00:58 +0000
Manifest next update: Mon 12 May 2025 07:00:58 +0000
Files and hashes: 1: 6MomF24SoPaNk6ERP73wy8mqx3c.roa (hash: IjQTHFK2Z40w4CuSFshJCdouXIm82jCIjL5J78qv4kA=)
2: xrxZ-PdUTx6lulwYs44lc1F8kTI.crl (hash: +hoUxQuJIvnf6Vnr4JtXoZDqe0+zz6OCFtyrUdNPjDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:9e:d0:90:44:ad:4c:75:5b:37:e2:78:58:14:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Validity
Not Before: May 11 07:00:58 2025 GMT
Not After : May 12 07:00:58 2025 GMT
Subject: CN=e31bf1526c7cd8a529577209caccee16a8678191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:a0:5a:04:50:11:92:b0:14:0d:c0:3c:37:
f2:72:f1:59:8e:b9:86:56:9d:74:60:39:95:64:3b:
8f:d9:b2:7e:05:77:81:c1:af:0e:88:dc:cd:61:64:
da:34:60:e9:15:e1:fc:39:c6:22:29:b8:30:c4:d6:
21:91:f8:a0:50:c4:a4:a3:77:df:37:4d:71:b0:1f:
00:eb:56:57:49:f4:17:b4:ca:85:ed:4d:14:1d:75:
9f:27:22:b4:7e:7a:18:91:6a:02:af:18:b2:dd:92:
c2:27:a4:c1:2e:15:20:c8:6d:bb:03:77:52:b8:8a:
69:e6:48:fd:e1:9b:e1:cd:27:84:30:c3:bd:f5:6c:
0c:e5:00:ce:33:d0:c9:98:25:20:78:c6:ae:f8:83:
34:10:03:45:b6:34:d2:ba:41:4d:a9:fe:91:7c:ee:
7b:92:f2:a2:db:46:d6:15:7b:44:9c:67:15:23:ec:
3a:a5:54:43:be:61:ba:3c:bc:4e:a5:a2:cd:20:a1:
d0:40:75:45:15:c2:e4:65:36:a2:15:d8:7f:ed:07:
54:52:73:25:17:e8:6c:02:ff:10:11:1f:e9:7d:40:
7d:18:b5:60:48:c6:d2:26:de:bd:2a:9f:b8:33:6e:
ad:b5:46:f8:92:c2:b6:c2:17:ba:ad:b0:aa:3d:7f:
e4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1B:F1:52:6C:7C:D8:A5:29:57:72:09:CA:CC:EE:16:A8:67:81:91
X509v3 Authority Key Identifier:
keyid:C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:dd:15:ac:80:89:5d:30:55:62:6f:ad:e8:7e:ed:29:c1:c1:
27:3c:bb:61:fd:81:6d:c9:29:50:68:e9:03:86:56:09:f4:54:
d5:9b:72:78:61:38:39:9c:75:bd:ec:97:cb:be:6b:94:d8:df:
11:65:31:7c:27:e2:47:5f:97:af:6b:2e:fb:50:78:b0:22:29:
27:57:9b:5d:25:7b:35:cb:a1:d3:f3:c3:52:47:05:be:c4:c5:
e1:76:3d:f5:1d:67:0c:ce:ab:3e:b4:97:d2:0e:73:1a:2f:9d:
47:67:49:67:21:37:35:ee:cf:d6:3f:92:11:d5:4c:ac:c1:3e:
a7:01:ba:10:12:52:78:72:f4:ce:07:17:80:d6:1c:18:a5:5a:
6f:83:46:60:fc:0f:4f:56:42:f4:11:39:f0:43:4b:58:6d:eb:
25:e0:e4:14:c4:66:a0:25:14:66:e3:31:6e:4e:cc:eb:f0:5e:
99:e9:48:17:3e:17:9c:0c:c5:5f:01:d6:b0:d5:18:2e:26:14:
19:18:16:1b:e3:8b:85:7f:32:5a:72:74:e9:ff:cf:3f:fa:62:
22:41:3b:24:37:09:b1:d3:79:1c:a9:28:bf:5c:4e:50:04:bd:
ce:45:70:1b:df:02:ae:5f:55:f5:93:eb:38:57:90:e1:9d:16:
cc:71:3e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:47:38 2025 by rpki-client