Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
File: poXxkUzrGSIcVjGTAn1FNFAzrV8.mft (raw, json)
Hash identifier: 4SlJxDr74PSNQaabNS5hk7JD+Q/spfXvkMPQGskSrAA=
Subject key identifier: C5:0A:24:8B:A4:C5:E9:4F:C0:6C:B7:2F:74:1B:00:EB:51:F1:54:38
Authority key identifier: A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
Certificate issuer: /CN=a685f1914ceb19221c563193027d45345033ad5f
Certificate serial: 0196B9DA80E0F303439F75B4FCB12F4F76DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
Manifest number: 0175
Signing time: Sat 10 May 2025 11:00:26 +0000
Manifest this update: Sat 10 May 2025 11:00:26 +0000
Manifest next update: Sun 11 May 2025 11:00:26 +0000
Files and hashes: 1: TCiOUS2lOe-d-inEeAtaNF22X3k.roa (hash: H5jxU1+mIYAsjzlbjYeTvSFiOWLCAxpo86ZAHMuzEhY=)
2: poXxkUzrGSIcVjGTAn1FNFAzrV8.crl (hash: AgZQGFcFuWuIbxUd1TQoMVU78m9d1KQFwiX+m0akFMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:80:e0:f3:03:43:9f:75:b4:fc:b1:2f:4f:76:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a685f1914ceb19221c563193027d45345033ad5f
Validity
Not Before: May 10 11:00:26 2025 GMT
Not After : May 11 11:00:26 2025 GMT
Subject: CN=c50a248ba4c5e94fc06cb72f741b00eb51f15438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:21:0f:20:7e:e6:35:2e:7f:1f:40:65:39:
26:69:96:31:87:d7:12:37:d3:69:0b:b0:08:a6:46:
5a:e3:02:7d:aa:d2:a0:49:40:10:cc:19:ab:8e:c7:
54:a5:32:f8:1b:51:f1:5a:ea:44:f2:4e:51:79:d7:
7c:76:55:47:8b:2d:2a:ac:4a:38:d6:1a:a7:16:6a:
c5:41:47:e7:57:18:7a:ef:57:f6:cf:cb:73:47:60:
77:ec:c1:e1:ad:04:63:22:67:c0:98:63:8b:ec:7f:
93:55:10:49:68:ba:c4:84:79:a9:51:ba:e3:83:0b:
45:e6:bd:46:a5:ff:83:d9:8f:ce:ed:8e:2a:f1:55:
eb:32:eb:b7:97:f9:45:a4:51:8c:6d:f8:6a:15:21:
a1:4b:72:9e:0a:2e:27:ea:39:3c:14:a7:0d:b5:b8:
a1:70:3a:03:67:1b:e2:a6:d2:32:8e:e2:5f:73:2f:
f8:53:65:aa:0b:41:cb:b3:a4:a6:69:c7:14:4d:1c:
82:59:40:15:36:62:33:f0:e8:c6:a3:93:28:97:8f:
bf:6e:f2:15:71:39:da:56:9f:bc:1f:ff:9b:c1:38:
fb:d2:ed:6d:f7:c7:71:34:8f:d8:d0:38:41:2d:8b:
81:df:5e:a2:51:5c:97:dd:f8:f1:ba:a8:c8:d7:77:
c9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0A:24:8B:A4:C5:E9:4F:C0:6C:B7:2F:74:1B:00:EB:51:F1:54:38
X509v3 Authority Key Identifier:
keyid:A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:49:d2:4c:92:8e:ea:54:64:4a:51:36:a3:29:4b:af:c4:75:
1f:cd:4e:ad:4e:2c:c3:5a:7c:83:39:ec:be:66:fe:a6:e4:b4:
6e:ef:a5:78:74:92:05:32:61:6d:e7:e8:2f:a6:4d:1b:07:73:
1a:a2:43:a2:e4:4e:97:51:f6:11:c6:51:4a:12:9b:b2:f6:fd:
cb:b6:be:0a:2d:20:3a:6e:47:cd:8f:f6:fb:ff:d2:fb:5c:21:
11:fe:4a:1c:f3:1e:58:bc:8a:4e:ac:3a:a4:bd:e7:39:df:e3:
76:9d:eb:94:1c:92:5e:a3:a8:8f:5a:36:06:9b:0a:af:e6:3f:
d4:ba:00:0f:13:68:cd:5e:98:9f:46:7a:30:67:c7:20:76:75:
3c:76:41:84:c0:01:8a:f8:af:88:b0:23:84:14:b9:04:87:03:
6f:2a:9c:5e:7b:83:5e:e7:58:a1:16:6e:c4:94:14:f0:e9:d8:
c4:68:4f:92:06:c1:f5:42:6d:f1:d7:31:ab:89:93:b4:93:fa:
3c:d3:e4:39:06:35:5f:a7:64:72:52:8e:a2:dd:87:f0:e0:4d:
76:28:65:31:b3:3e:5a:f0:01:20:c6:89:46:de:13:9d:14:97:
7a:79:4b:32:a6:be:41:d2:33:3e:de:a5:c3:e1:ff:90:67:ac:
cf:b8:bc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:10:38 2025 by rpki-client