Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
File: X4anFB9vt7TCi84xRGe2FU4Pk3c.mft (raw, json)
Hash identifier: wTuDDm06vfIXxm/LfVDhbtBDzi1MqBYMqzQMcJUqKBk=
Subject key identifier: C3:E2:97:B6:91:BD:81:FA:D7:4B:AA:24:3D:5A:BD:A5:37:DB:67:5D
Authority key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
Certificate issuer: /CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Certificate serial: 0196A2E56D4C85FE10F55CE8469B5CB1897D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
Manifest number: 0CC0
Signing time: Tue 06 May 2025 00:01:06 +0000
Manifest this update: Tue 06 May 2025 00:01:06 +0000
Manifest next update: Wed 07 May 2025 00:01:06 +0000
Files and hashes: 1: BR7Kxw4uDHIJjtWZxBN3yY39MEc.roa (hash: NNnpY2dCMdRRtPAK+Xc47po5O7wykSonQcaPlzT/ALM=)
2: X4anFB9vt7TCi84xRGe2FU4Pk3c.crl (hash: Bp1bYhY0poxprzqFA3fSkvZfuJ2si2EsYiOU0fOEROA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:6d:4c:85:fe:10:f5:5c:e8:46:9b:5c:b1:89:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Validity
Not Before: May 6 00:01:06 2025 GMT
Not After : May 7 00:01:06 2025 GMT
Subject: CN=c3e297b691bd81fad74baa243d5abda537db675d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:07:da:19:b2:a9:b5:95:aa:c5:94:9a:88:
1f:12:e9:bb:0b:f6:d0:7d:a9:b2:69:71:8a:60:d1:
be:75:d4:1d:57:04:d8:fd:73:93:11:7d:02:83:1d:
95:e1:9d:33:32:17:ad:86:60:9a:97:00:bb:a7:5d:
b4:6f:10:e9:57:30:bb:bc:38:b8:21:a5:50:a5:5f:
97:9e:b0:a9:b1:4e:70:50:96:70:42:b3:f0:0e:37:
ca:35:8e:d3:47:31:7d:31:34:75:40:8c:5b:de:b6:
85:9a:2c:e8:22:7a:d8:1e:77:36:00:c3:2d:df:e1:
27:ac:24:f5:b4:ed:9c:d7:cc:94:1b:5d:c0:4c:97:
94:ec:46:87:67:24:ac:0e:69:23:18:7d:3c:5e:1b:
90:d8:3a:dd:da:d7:61:0d:e5:3f:c8:64:5c:99:cf:
b7:b9:98:e2:65:ae:4b:4c:b8:9f:4d:81:17:96:ec:
03:8e:18:18:dd:f3:07:90:f3:5d:4c:cc:80:1a:92:
b4:a0:22:14:3f:43:00:33:03:8d:ab:ad:d3:80:1b:
12:e6:d8:ad:62:00:ef:4c:6b:bc:3b:50:81:07:b2:
77:9a:bf:27:0b:03:c8:ad:21:93:9d:6c:d0:16:be:
cd:3d:32:8c:53:33:59:ce:bf:55:bb:dc:a9:8f:09:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E2:97:B6:91:BD:81:FA:D7:4B:AA:24:3D:5A:BD:A5:37:DB:67:5D
X509v3 Authority Key Identifier:
keyid:5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c2:66:ca:ed:76:ea:5b:83:16:af:9d:9d:6d:e7:b4:78:b9:
18:34:aa:7a:42:a6:8d:28:8b:2c:e8:7f:ac:ec:22:7f:6f:f4:
9f:ef:18:a3:51:37:8e:ed:0a:cb:4a:84:d6:60:53:6c:c9:92:
13:ac:96:b1:c0:d7:f7:42:1e:e9:8d:04:b2:be:6d:db:37:f7:
24:fa:2d:5c:ff:a5:2c:f7:6a:0d:1b:ee:d5:5c:5a:b8:0f:29:
2c:f2:51:02:c4:df:b0:87:fc:c0:37:59:60:0b:40:39:c7:65:
af:64:40:2e:20:19:72:6b:03:85:a4:d0:de:3f:0e:97:0b:fd:
ed:bb:16:42:7e:76:a9:4e:03:67:02:ab:35:ce:98:23:fe:87:
0a:a6:84:33:3e:66:ba:f5:08:b2:1a:a6:c1:b2:09:c7:d0:8e:
b9:87:ea:b0:27:ff:ea:cc:f0:7b:ca:04:60:84:11:1f:f1:cc:
d3:22:a8:48:88:1c:34:97:c7:57:1d:4c:da:cf:a8:02:32:43:
f2:97:eb:10:12:52:0c:45:a3:26:12:89:04:dd:3e:4e:cf:26:
90:1d:4f:d1:27:8f:e3:4a:de:54:5e:c6:92:38:47:bc:68:51:
dd:33:08:bd:6c:a8:80:30:9e:bf:2e:68:31:96:9e:f5:0b:d2:
ab:56:29:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:28:56 2025 by rpki-client