Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
File: XD6sD3atIc1SRFk-TBe6Zxtejuk.mft (raw, json)
Hash identifier: /onxL/CuUU5KePq33OU0jSx6noysLZ7HIholxDiQ2kI=
Subject key identifier: 4C:E7:08:02:35:52:78:7F:5D:98:1A:A2:60:9B:1D:3C:F4:F3:60:86
Authority key identifier: 5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
Certificate issuer: /CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Certificate serial: 0196BF00F3519B3156BEE9D9BAE37E43181C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
Manifest number: 1196
Signing time: Sun 11 May 2025 11:00:32 +0000
Manifest this update: Sun 11 May 2025 11:00:32 +0000
Manifest next update: Mon 12 May 2025 11:00:32 +0000
Files and hashes: 1: XD6sD3atIc1SRFk-TBe6Zxtejuk.crl (hash: SZX1/waO7zk4O4R66BuB+4YaoGbkuAchzmVkYxBw8w8=)
2: ml5z24U6xSCTuhnWBbQRxmv1hXU.roa (hash: NWPcXIF3UeWnsTiTzSSB4msAqIPsOtzwP/oaG1rR2kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:f3:51:9b:31:56:be:e9:d9:ba:e3:7e:43:18:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Validity
Not Before: May 11 11:00:32 2025 GMT
Not After : May 12 11:00:32 2025 GMT
Subject: CN=4ce708023552787f5d981aa2609b1d3cf4f36086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:a6:64:11:d2:19:3c:92:83:da:92:ef:cd:
c3:d2:b6:ff:58:8f:6d:d9:1b:52:88:79:19:d2:62:
62:68:4b:56:4e:a6:b8:3b:b5:7d:bb:54:4a:3b:67:
b2:d3:bd:e5:dc:04:63:6c:64:7c:7e:4f:a5:b6:25:
cd:77:d6:c9:67:d3:ad:81:8b:aa:10:cb:02:2e:70:
89:31:17:99:cf:f3:e2:1e:3c:76:27:2c:6a:9f:7f:
57:83:5e:70:83:29:3b:38:5a:50:c8:6f:6e:8d:f2:
73:19:58:2f:0a:df:35:ff:0c:ca:f8:60:4a:12:13:
dc:77:82:0f:d2:1d:33:bf:c5:52:c2:cd:a5:2b:22:
2b:26:05:59:4a:15:ae:d4:a2:4b:d7:53:dd:2b:f1:
b4:f0:7e:b2:8e:a5:1b:b5:cb:24:6b:4f:60:c2:90:
57:10:2e:53:41:75:bf:4d:1e:62:12:5f:9a:c9:cf:
60:83:00:58:81:19:51:30:2e:10:e9:76:2f:d3:b7:
15:c4:1b:2a:c7:c0:7c:b8:ac:5d:84:27:ad:6b:9d:
a3:1a:e8:16:37:5c:41:c5:f5:8b:9a:fc:a4:10:75:
c6:51:fa:46:ad:44:cc:69:e1:60:28:fe:f4:7c:f5:
8a:08:bd:91:c0:7a:c0:53:44:9e:e3:73:6c:a1:14:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E7:08:02:35:52:78:7F:5D:98:1A:A2:60:9B:1D:3C:F4:F3:60:86
X509v3 Authority Key Identifier:
keyid:5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:47:a2:7b:b6:c8:a0:fc:c7:92:75:b0:f8:ea:5d:0a:14:71:
0a:cb:49:68:77:59:bc:8c:52:07:4f:2e:6d:e7:45:6e:69:af:
46:00:cd:9e:e8:1e:b8:51:03:09:7b:af:e9:cb:28:3a:3c:7a:
1a:b0:a5:5e:3d:50:c3:25:eb:19:ed:56:67:6c:35:2b:8d:3c:
50:2b:54:95:64:87:ce:61:cd:5b:95:2a:28:6e:03:4f:d1:e7:
d1:f6:a2:3f:c0:a8:93:61:83:d2:ae:7f:11:a8:90:e5:2b:82:
8f:df:05:c9:9b:d8:e8:9e:9e:df:6c:d6:e6:ef:f5:1a:10:a3:
28:70:22:4a:d6:d5:b3:25:0d:27:8a:ce:1e:62:5f:27:af:b7:
89:3d:7f:ba:15:fc:44:c1:f4:81:09:84:71:74:50:bf:3c:5c:
be:8f:12:33:2c:6a:c4:4a:c8:96:92:f1:cc:53:a7:5d:8e:e4:
68:bb:e0:7e:9f:b4:64:34:fe:23:8c:b5:27:23:ca:86:79:b7:
6f:3b:be:55:79:d0:8b:35:34:30:ee:93:d3:74:be:45:b8:7f:
2e:ce:80:ae:40:15:33:5a:b0:85:6e:37:97:b0:ed:0a:58:e9:
38:04:5f:0d:8e:25:d5:07:44:0f:bb:45:2f:bf:fc:b5:b4:29:
50:fe:8d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:52:27 2025 by rpki-client