Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
File: Xm6clCz1a-uGksXVYu2OrWlFKO0.mft (raw, json)
Hash identifier: W1an+qWc8z7o0OVcsK3YofRt5tmxba/lkRHJi3joQLc=
Subject key identifier: 01:94:CE:2E:9D:84:34:CE:75:64:27:CD:F0:86:D1:F5:C5:B1:B1:C6
Authority key identifier: 5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
Certificate issuer: /CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Certificate serial: 01969DBE7CBAA2F7AC64F7801A3D38582235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
Manifest number: 0198
Signing time: Mon 05 May 2025 00:00:28 +0000
Manifest this update: Mon 05 May 2025 00:00:28 +0000
Manifest next update: Tue 06 May 2025 00:00:28 +0000
Files and hashes: 1: Xm6clCz1a-uGksXVYu2OrWlFKO0.crl (hash: jJzDcWqfEaTsDkAybCEn964SfWFlU4caWiaHWaP6z+Q=)
2: vosIopFKuVooFEnT_WoSvrVtBQk.roa (hash: MbdzDkBGjpybqFx3qcRSqHdBprEga+vyojjcpFHnoSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:7c:ba:a2:f7:ac:64:f7:80:1a:3d:38:58:22:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Validity
Not Before: May 5 00:00:28 2025 GMT
Not After : May 6 00:00:28 2025 GMT
Subject: CN=0194ce2e9d8434ce756427cdf086d1f5c5b1b1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:cf:1d:07:c5:d9:f7:bb:bd:32:e2:8a:a1:
e8:90:6a:14:46:6a:1f:74:d1:a2:e3:ae:ee:bb:7c:
eb:7c:c5:e3:14:ea:5e:29:0b:49:84:77:b9:49:00:
c9:64:23:b9:c1:d1:44:82:61:de:c6:4f:92:0e:4c:
69:1a:67:43:49:cc:cd:d5:5f:ff:bd:00:61:a2:94:
63:00:b0:fe:60:96:89:71:fc:ce:0a:0d:1b:63:93:
d6:85:c9:f8:02:7b:6d:db:35:d1:44:7f:1c:df:dd:
58:ce:28:bf:14:52:f4:e0:0a:1b:6b:61:57:58:4a:
17:48:6d:74:f7:02:03:05:99:81:3d:f4:6d:3e:ad:
12:b6:80:a0:28:b0:b7:ab:84:4c:36:18:7e:2c:98:
d9:06:03:c0:39:21:61:41:f7:82:12:c4:b4:b9:fb:
df:c1:29:3d:9d:c5:46:b3:21:4b:1f:a1:54:93:31:
3f:74:d9:03:81:8f:f9:0c:a1:d7:c5:37:7f:5f:fc:
db:7a:11:76:0c:04:a0:33:b9:db:2e:27:d6:8b:86:
2f:e7:ce:6d:11:f9:9c:57:bd:67:41:45:92:da:b4:
86:75:ba:cd:91:a5:53:30:e8:48:e0:0d:8d:2b:71:
b6:a0:a3:4a:43:8f:21:24:33:45:39:49:a8:61:04:
ad:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:94:CE:2E:9D:84:34:CE:75:64:27:CD:F0:86:D1:F5:C5:B1:B1:C6
X509v3 Authority Key Identifier:
keyid:5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d3:b7:91:7f:73:3f:56:67:94:b3:37:aa:80:a8:fc:36:65:
47:ea:95:a3:bf:b1:4e:d9:78:b7:9d:99:c9:8a:ee:30:f0:7e:
3d:cf:c5:b9:44:44:77:da:8f:5c:a1:b0:cb:1c:66:7f:bc:8a:
64:6c:09:a3:39:fe:88:7e:80:18:1e:75:b9:cc:99:66:fc:d5:
ba:0d:44:7f:a0:1d:3e:9b:cb:16:d5:3d:68:b1:b6:d1:8d:13:
b3:72:f0:bf:08:93:38:24:36:91:2e:a1:bf:6e:c5:8f:17:8e:
c8:80:60:63:01:dc:35:64:4f:41:4b:23:05:75:4d:28:e9:ec:
13:ac:e3:11:8b:38:9b:d4:5b:17:f4:70:85:96:e8:3e:08:b8:
65:5e:b2:e8:6f:b3:9c:e1:e7:b3:9b:57:82:75:55:e3:6e:05:
a5:cf:c8:84:07:a0:b3:04:3e:c0:d1:2e:ca:bd:b3:1a:5c:02:
99:f7:8b:ad:6a:4a:50:07:c5:86:90:46:c1:bc:c4:36:ff:7e:
06:51:55:51:ee:82:08:60:b7:9f:50:dc:ac:42:6a:03:95:d7:
90:6e:44:31:0a:29:b8:47:53:e3:2c:42:94:08:1e:99:e3:89:
2a:4d:bd:44:f9:84:9c:fe:2d:d1:2e:74:27:61:88:01:5e:e6:
cb:6a:12:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:16:46 2025 by rpki-client