Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
File: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft (raw, json)
Hash identifier: QIMq+CzQ2jYmWkPy1XPQ3IRYalH/QET3SnYR/r7+bdM=
Subject key identifier: 8D:6F:6B:21:93:8F:A3:34:C8:1A:FD:97:09:8D:B9:07:A1:B7:C8:25
Authority key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
Certificate issuer: /CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Certificate serial: 0196C9848E6B682596411A0E8817ED253DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
Manifest number: 0FEF
Signing time: Tue 13 May 2025 12:00:29 +0000
Manifest this update: Tue 13 May 2025 12:00:29 +0000
Manifest next update: Wed 14 May 2025 12:00:29 +0000
Files and hashes: 1: GL43VxH_h-aWzE3G-2pFMtY1WM4.roa (hash: GegNsbMfLWk2tMOCfqZsrF9iNh5KkVnxnNq29fJOObI=)
2: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl (hash: tlUoTpr36NN0dMfJokfqyd9Xeenur/bv3Je2ARzZK9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:8e:6b:68:25:96:41:1a:0e:88:17:ed:25:3d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Validity
Not Before: May 13 12:00:29 2025 GMT
Not After : May 14 12:00:29 2025 GMT
Subject: CN=8d6f6b21938fa334c81afd97098db907a1b7c825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:46:cb:0e:f2:40:63:03:ba:90:6c:1b:ab:7e:
a6:da:4c:2a:74:25:04:0a:46:b1:2d:e8:16:00:7e:
6c:7c:d4:34:ca:84:49:00:fc:e4:1c:94:29:02:a9:
08:5d:aa:fa:1d:1b:b8:e8:28:26:00:4b:28:36:23:
c9:f9:e0:3c:2c:3d:35:e8:d8:ca:3f:92:a9:23:d6:
28:b9:ec:b7:74:f3:04:e9:38:89:32:c3:2e:50:95:
38:56:d6:9d:d9:ac:9f:e9:8b:f2:38:f0:bb:05:cd:
d2:84:b6:87:2c:ca:2e:26:77:10:af:a5:18:c6:5a:
53:62:49:95:0a:89:4a:3e:43:5f:ed:17:36:9a:91:
a7:89:79:d2:16:bb:57:68:8c:bf:b1:e7:88:78:34:
dd:fe:33:14:8e:a9:bc:7c:7d:f6:36:0d:f1:46:b3:
41:16:2b:42:40:9b:9c:85:49:61:0c:69:e3:9e:1b:
ab:72:b1:e5:ab:51:c0:e2:0e:47:22:b1:28:32:fb:
f0:98:05:a7:3b:c0:70:20:c0:f8:a3:61:23:ac:23:
31:83:93:6f:1b:c8:4b:85:f9:63:1b:5f:0a:43:55:
11:0c:12:a8:1e:45:12:6c:76:0c:70:4e:4a:a6:cb:
b6:84:9a:c4:a8:ab:bb:ac:3c:01:c7:0a:a1:4a:0a:
fc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6F:6B:21:93:8F:A3:34:C8:1A:FD:97:09:8D:B9:07:A1:B7:C8:25
X509v3 Authority Key Identifier:
keyid:45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:25:92:56:99:11:b3:de:02:cd:c4:ac:38:2b:e8:4f:2a:d6:
5f:07:89:de:66:4b:c5:75:ce:68:48:9d:32:48:89:09:91:0b:
33:b4:f3:8d:24:70:6d:0d:f2:37:88:49:fd:ac:c1:0c:b7:d3:
09:47:38:94:6d:f4:ce:c1:d3:82:e8:49:22:af:aa:d3:89:6f:
91:bd:fa:aa:70:16:44:cf:b0:13:45:9b:7b:a7:76:08:7e:53:
17:02:f5:e6:ef:14:0c:10:f5:03:f2:d6:c1:2e:ee:a3:62:e9:
56:90:82:1c:f4:51:d8:82:7c:5f:52:a8:97:25:d9:9f:b4:b9:
5d:f6:bf:f7:77:ea:1b:1d:53:a1:bc:03:e6:21:a1:44:75:51:
2a:d1:be:51:da:9c:3b:ec:d4:97:fc:3c:a1:3a:66:3d:b1:5f:
e1:15:93:7d:d7:7f:a9:f7:77:17:b5:4c:0b:f5:79:a7:7f:0a:
f4:14:8e:ff:09:b1:be:78:e5:b2:ae:45:9a:06:a4:8e:ff:77:
a5:d5:8f:0b:5b:f0:20:a7:f6:3f:12:b1:d4:6d:33:b3:e0:75:
25:67:cc:61:93:bc:a7:d6:d7:4b:65:1f:54:58:57:1f:35:8e:
48:28:18:4f:16:0d:71:c9:56:34:19:2d:d2:f0:1d:22:cd:e3:
e5:a5:1b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:52:14 2025 by rpki-client