Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
File: xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json)
Hash identifier: cBkOMY0uaWArJMhmJeLCs/gwZM5le0ZsELL4VnKBqBM=
Subject key identifier: ED:3B:FC:75:4F:B8:68:73:9A:DF:D0:8C:BC:8F:84:68:D4:1F:AB:79
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial: 0196CB7389D2A989D3519FC191FADE391AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
Manifest number: 0156
Signing time: Tue 13 May 2025 21:01:08 +0000
Manifest this update: Tue 13 May 2025 21:01:08 +0000
Manifest next update: Wed 14 May 2025 21:01:08 +0000
Files and hashes: 1: _qWutZUYh7GtHc5BuqYExYnhc5E.roa (hash: coowkP6g5fodWA3YuMC9BEcTrYORzxDu9UeePR3fEmU=)
2: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: owEFXPGjzvOYOZDfia6RfYiv6jXXzwA2GGseZZAeKmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:89:d2:a9:89:d3:51:9f:c1:91:fa:de:39:1a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
Validity
Not Before: May 13 21:01:08 2025 GMT
Not After : May 14 21:01:08 2025 GMT
Subject: CN=ed3bfc754fb868739adfd08cbc8f8468d41fab79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:16:54:2d:dd:63:13:de:e9:f9:fc:ec:12:
a4:be:fb:6a:10:5e:48:53:55:9f:91:bc:07:20:20:
50:4b:70:13:09:8f:89:b7:3f:27:96:89:0a:9f:67:
d4:0e:56:9c:c2:90:86:49:f6:c9:ef:3f:c7:12:f7:
88:a5:9b:a8:93:a6:8b:8a:ff:b6:e1:10:81:52:0d:
24:18:d1:46:25:91:cb:80:c2:86:fa:4d:68:80:df:
03:1a:a2:d4:15:6f:08:77:f3:e0:52:7f:23:d7:9f:
12:12:06:fe:10:26:ce:65:ed:b6:4f:98:b1:65:b2:
34:7e:51:aa:1f:84:f6:97:8e:44:97:3d:c3:1c:8b:
e1:a1:4a:07:93:ce:d5:dd:3a:d9:e6:da:bd:79:f5:
10:1d:7e:24:ec:e4:1c:d3:69:d1:82:9f:d0:4a:27:
98:e5:03:10:c1:e5:23:d5:92:06:c9:c2:4b:31:1e:
b6:aa:ba:27:33:a2:13:f2:c7:77:78:f9:72:b3:8d:
bb:89:db:b2:3f:c3:66:36:97:d4:29:bf:a8:af:63:
9e:6c:a3:9a:7e:bd:ad:1c:8d:29:e1:54:4f:68:df:
86:60:12:2a:a9:61:4e:18:4b:02:4c:94:fd:92:bb:
40:3e:40:cb:12:68:e9:f6:26:7f:c2:d3:62:34:1f:
6a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3B:FC:75:4F:B8:68:73:9A:DF:D0:8C:BC:8F:84:68:D4:1F:AB:79
X509v3 Authority Key Identifier:
keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:21:ee:5a:5b:e2:a9:de:12:8d:48:b3:78:db:90:43:19:9c:
2f:c9:96:8b:f1:6d:2f:96:c3:7f:78:9d:d8:a4:41:b7:d3:c3:
c6:8d:47:05:78:85:1c:a5:c0:71:16:e2:d0:9c:3e:bf:b5:30:
c7:51:6e:90:60:e7:cc:f5:27:b9:3e:62:cf:40:b3:cd:67:19:
57:5e:3f:1d:8e:da:c5:ac:0c:c7:0a:fe:03:18:da:c2:f1:3f:
6f:75:db:cc:58:43:13:64:70:42:20:54:c0:47:a0:f0:a3:06:
b2:ba:48:25:8b:de:64:bc:0f:d8:4d:4a:25:83:a1:a9:7a:14:
58:7d:65:37:fe:8b:c4:ec:e9:46:ed:10:e1:6f:9b:30:dd:b3:
4e:57:d1:0f:79:1d:bc:de:63:73:a5:2c:cd:f9:f7:62:34:d2:
59:18:b5:5b:8f:af:e2:26:d5:05:f0:8d:4d:b8:17:10:ad:e4:
cd:4e:67:98:78:f8:25:b9:cc:a6:40:cb:eb:d2:66:91:e6:75:
67:f7:43:61:cc:29:e4:b4:23:e5:a5:95:1e:7f:0a:56:86:66:
8f:cf:c1:00:f1:ee:54:a1:f9:29:e3:89:f3:0d:b9:ff:dc:23:
4b:36:f7:32:58:2a:66:d5:55:f1:ff:71:ec:65:30:dd:50:d2:
21:e5:05:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:10:31 2025 by rpki-client