Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
File: xVfBn2xy2JAMTYnsers11PqSEUs.mft (raw, json)
Hash identifier: oiV5R7T4/P08ITneZ1C811p1+aA6YcpnX1/hnaUVl58=
Subject key identifier: 01:2E:FD:7F:4C:C2:EA:12:59:C4:BA:07:FC:8A:48:FD:04:5F:B4:30
Authority key identifier: C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
Certificate issuer: /CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Certificate serial: 0196C013B9C538368D307F5ACFFA7D3A4835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 16:00:40 +0000
Manifest this update: Sun 11 May 2025 16:00:40 +0000
Manifest next update: Mon 12 May 2025 16:00:40 +0000
Files and hashes: 1: Edf4BRC_SQM6caxUC9bnztO-Qtw.roa (hash: jrSFQj+uOrtwJVK8tmCsyrdBIOLOL0+D+bgHO+lUMkU=)
2: xVfBn2xy2JAMTYnsers11PqSEUs.crl (hash: HVhdNklIt3IMIQh1GWTCjHad/S3+IQpjuuQsl6kKCrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:b9:c5:38:36:8d:30:7f:5a:cf:fa:7d:3a:48:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Validity
Not Before: May 11 16:00:40 2025 GMT
Not After : May 12 16:00:40 2025 GMT
Subject: CN=012efd7f4cc2ea1259c4ba07fc8a48fd045fb430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:80:99:77:5f:05:88:51:3d:84:7f:32:a2:
f9:65:e6:f3:7a:d3:a9:30:28:08:a6:30:76:fd:44:
2d:39:fb:03:74:b7:7e:ed:b7:f4:8d:58:02:f0:a8:
bd:3b:2e:e6:7d:93:67:2a:f2:e4:2b:aa:a6:7d:8e:
75:4f:f2:e7:53:d2:7d:a4:f6:31:73:6d:36:f2:ed:
cb:df:bb:dc:c3:34:cc:a2:63:27:dd:17:f0:be:dd:
d6:dd:89:32:51:34:ae:50:76:55:bb:42:e1:d4:71:
fc:4e:71:d6:1b:1d:60:c3:d0:d4:1c:fa:96:82:13:
72:21:57:31:c8:85:53:41:e6:6a:76:e7:91:eb:ee:
5d:ff:52:44:bb:f7:33:e8:8f:47:ed:0a:1c:12:a0:
82:91:c3:39:a1:9e:ec:de:a4:02:af:90:0d:24:5f:
c5:f8:c9:de:eb:78:84:f9:33:c7:d1:af:b9:76:6f:
a7:c3:2f:e7:47:a9:d3:b6:b2:63:95:c5:16:58:8d:
f8:66:96:2c:92:f1:2b:a6:55:c0:97:87:e1:5d:ce:
18:7b:a2:81:b5:f4:2e:5e:37:da:41:5f:4f:d3:a6:
9e:d0:7b:87:7e:de:cc:50:bd:d6:bd:67:0b:59:f2:
34:b5:ab:0a:b5:ce:d1:b7:79:25:7f:df:5d:9a:2a:
dd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2E:FD:7F:4C:C2:EA:12:59:C4:BA:07:FC:8A:48:FD:04:5F:B4:30
X509v3 Authority Key Identifier:
keyid:C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d1:b6:ed:76:1d:1f:ff:02:4b:ef:74:43:3b:83:de:35:fd:
04:95:95:e7:db:33:ee:bd:ca:b8:f0:b4:74:3a:85:6a:8f:d9:
8a:12:1b:17:2b:65:87:36:b2:d5:cb:f9:f2:5c:5e:86:ed:fa:
4a:a0:14:30:fc:48:14:4e:36:5d:98:4d:96:f7:5a:4e:90:7e:
34:4d:04:fb:38:49:c8:dc:9f:93:b1:23:8e:a7:bc:9c:32:4c:
9e:35:df:29:84:51:89:27:04:ef:31:eb:30:14:9e:31:ba:dd:
d8:3e:cf:37:0a:23:8b:d6:51:ff:fd:f8:6f:94:90:c1:97:a5:
39:e7:3e:71:9b:53:5e:75:01:f3:50:b1:e3:3a:a2:d7:55:87:
d9:7a:5b:94:54:28:2e:e8:21:46:8f:db:4d:20:96:52:2c:e2:
cc:1f:3e:d2:16:c8:b7:d4:ce:fe:1c:39:15:b2:17:a6:95:f8:
e2:5e:ed:18:38:8d:dc:33:98:20:2b:39:6e:3e:e5:2f:f5:4d:
40:e5:55:2c:ed:48:d3:ff:69:be:19:1b:7c:0e:04:a4:a2:de:
31:ad:b6:77:04:9b:fd:45:04:22:e7:fb:42:b3:db:48:37:0e:
f6:ba:a6:93:d4:02:01:d6:2b:36:bb:4d:2a:26:c8:bd:20:94:
8b:c0:d5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:59:41 2025 by rpki-client