Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
File: xW0hVO1TtinYcrKjjZzQQb20sSg.mft (raw, json)
Hash identifier: KcL8WT8ky+T3q4iOTMHGbwcgVmHaxWnLnImPAkfJvTY=
Subject key identifier: 06:6E:5A:E6:F7:89:82:E0:10:48:C1:BF:86:D9:95:57:06:AC:51:21
Authority key identifier: C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
Certificate issuer: /CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Certificate serial: 0196C502E03C0275A8A40FC636516F6D2DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
Manifest number: 08AB
Signing time: Mon 12 May 2025 15:00:22 +0000
Manifest this update: Mon 12 May 2025 15:00:22 +0000
Manifest next update: Tue 13 May 2025 15:00:22 +0000
Files and hashes: 1: LGIjR37T32om32PNGVlywqITYQM.roa (hash: PDrBaXBEFkBMQXE+r+pZdqQOvhiNvqlNo622ZzA4QS0=)
2: h3E3zuaVe9Fd-K2eeSfreUoqzxE.roa (hash: zkBB1N0MG6XqITCSMbDyxtWFtXhvrbfgV/J1jxkBcRM=)
3: xW0hVO1TtinYcrKjjZzQQb20sSg.crl (hash: 0R16EuWU9cWr0naIFQVqkKS5EvodVjh+z0ijqDJdaCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:02:e0:3c:02:75:a8:a4:0f:c6:36:51:6f:6d:2d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Validity
Not Before: May 12 15:00:22 2025 GMT
Not After : May 13 15:00:22 2025 GMT
Subject: CN=066e5ae6f78982e01048c1bf86d9955706ac5121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:56:46:34:8a:e7:e8:bf:ac:c7:b2:81:b9:
6a:3f:cf:0f:01:ac:98:71:13:1f:24:12:40:5e:42:
ee:dc:44:12:5e:2e:a2:e1:df:d3:57:60:23:09:01:
4b:78:e0:b1:68:9e:2b:22:75:ec:70:78:b4:71:c8:
13:96:c8:24:e8:03:3c:89:b8:ca:be:e2:a9:39:bc:
12:89:f6:9c:17:e5:63:bd:4a:04:e8:34:24:d9:6f:
87:92:61:de:ab:02:af:0f:db:46:3e:d6:18:d9:8d:
6e:2a:ac:8d:72:ce:b2:fa:d1:b8:3c:5c:3c:f5:fa:
38:cf:c7:af:27:8b:84:50:2b:34:ca:28:51:67:be:
f9:d3:69:2f:17:4c:0b:25:a4:9c:11:3a:63:62:b4:
02:c7:dc:fa:b0:cd:5a:c5:14:a0:a2:0d:b5:88:5d:
de:1a:54:20:5d:26:25:a2:cb:23:6e:a9:bc:23:9c:
27:95:2f:e6:29:ea:02:fc:84:13:c1:e7:9c:57:68:
d3:05:d8:74:b9:a8:4d:41:c7:aa:91:6f:f9:d2:e8:
5e:7e:6e:33:0f:9e:e7:d2:e4:3d:ec:50:7a:41:be:
b0:33:d3:df:2d:5c:43:a8:18:0f:9f:87:ba:a3:91:
f1:e5:33:d9:ce:68:6d:bf:83:c2:82:d8:7c:e4:6d:
61:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6E:5A:E6:F7:89:82:E0:10:48:C1:BF:86:D9:95:57:06:AC:51:21
X509v3 Authority Key Identifier:
keyid:C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e2:71:f7:08:40:1b:9f:26:a1:c0:63:3a:7d:2e:9f:23:a4:
ae:85:67:1e:1c:f5:7a:52:04:4f:4e:ec:d4:62:c7:fc:a9:3e:
e1:21:5a:bb:c6:e8:d5:ea:53:ff:04:18:e1:ac:18:b3:b5:ba:
cb:b1:97:18:ec:ed:85:d7:c5:c9:ea:93:25:a2:44:04:28:39:
13:99:1f:1f:4f:4b:fd:ef:9d:2b:53:f5:05:c1:50:4a:f8:9f:
63:60:d8:6a:a0:e9:1b:d6:9a:a8:c1:9c:bf:3e:1e:9a:c8:82:
49:8d:ae:c7:6c:84:e8:a9:13:95:8f:69:ed:d0:11:e3:ed:64:
3e:94:8a:42:4c:10:9d:96:8b:c9:c1:c1:7d:09:a9:ae:9b:b0:
3c:61:3c:03:c1:25:bb:97:39:36:36:5e:25:13:1c:b7:99:fb:
03:17:23:24:13:c2:0f:a8:49:9d:d5:91:47:c0:76:1a:72:1a:
15:a4:0b:6a:af:4f:24:bb:a3:c9:58:25:4a:70:7e:0b:cc:87:
cf:c1:97:42:29:1c:98:ed:f9:51:84:7b:39:a4:9c:88:53:cf:
51:d4:dc:de:a7:1a:93:44:cb:da:47:a9:a9:7e:80:b4:5b:80:
f6:7c:2a:1f:1a:4a:fd:a5:2e:26:93:8a:ec:a9:95:73:83:0b:
05:29:29:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:19:42 2025 by rpki-client