Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: O6Ni1/muFr8UsD9tv759lQsTTxWKiFI3DiyI+foJfh0=
Subject key identifier: 3D:68:60:CC:87:94:39:7C:E3:CC:38:5F:4B:0E:FA:67:35:42:D9:51
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 0196BECA3C5B48859F64D750FB7C9DEBC774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 153E
Signing time: Sun 11 May 2025 10:00:46 +0000
Manifest this update: Sun 11 May 2025 10:00:46 +0000
Manifest next update: Mon 12 May 2025 10:00:46 +0000
Files and hashes: 1: V1dxs9JhyjDMxU7zwFABoBAdx60.roa (hash: jK0rBU9juj3Cm9p+z0cyDJb76/ejVGKYQgHCoAgwZ5Q=)
2: ggaujxDkTjz3ur815c8t-PcBT3o.roa (hash: kBi/tXIf057RjeVgxSaejXzvw/f4YkfQil/vCr+FLSM=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: 0O+Y9m5A609Zd2kWVR2bZOenUL9S7ptoZCrFNcsjU1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:3c:5b:48:85:9f:64:d7:50:fb:7c:9d:eb:c7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: May 11 10:00:46 2025 GMT
Not After : May 12 10:00:46 2025 GMT
Subject: CN=3d6860cc8794397ce3cc385f4b0efa673542d951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9b:c2:ba:75:f4:8b:5e:dd:a7:f2:40:cb:20:
41:0e:8c:80:72:48:8a:bc:94:6e:a8:a8:96:db:9b:
16:53:bf:dd:85:74:9f:67:09:76:58:37:ff:97:94:
78:2e:73:c8:37:c2:1f:a7:e3:3b:97:ed:04:32:1e:
f2:22:77:13:53:8b:75:f4:54:9d:91:83:08:81:66:
95:f6:c9:b8:9c:2f:e4:be:fb:55:d9:9f:1e:00:fb:
d2:f8:99:02:27:bf:66:86:c0:c1:79:84:88:44:bc:
29:6e:3f:23:0c:e9:15:fe:e9:f8:63:52:63:07:6f:
2c:32:92:24:cc:27:56:ac:cf:08:f6:37:06:4a:4d:
a9:45:36:cf:8b:86:41:02:4f:bd:c7:82:f0:a6:71:
a4:ab:ee:5a:74:83:72:d7:94:e1:e2:b7:dc:51:38:
ac:6f:e2:f2:40:7f:4d:e2:5c:25:a8:56:0a:56:44:
e8:48:b7:2f:2a:32:e5:ed:41:4d:ca:66:ba:c1:94:
fe:8d:18:19:6d:e5:b0:e7:b6:a8:cf:87:08:dc:b3:
53:5e:7e:11:fa:57:96:8e:85:88:54:ac:e6:fe:9f:
1c:2b:f9:26:18:38:75:b4:85:fd:a2:cf:c5:63:fa:
63:85:aa:b3:95:f2:b1:8a:47:6f:eb:13:43:73:13:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:68:60:CC:87:94:39:7C:E3:CC:38:5F:4B:0E:FA:67:35:42:D9:51
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:fb:66:5a:ec:98:64:59:c1:a4:ce:1b:85:ce:b0:85:f8:db:
f5:8d:47:58:ac:9a:48:bd:eb:8d:c1:16:46:2e:28:af:fb:12:
09:ab:a3:fb:18:ab:1b:b6:9a:c4:bf:3f:27:db:78:b6:14:12:
8e:e6:ca:3e:65:b5:68:3e:0b:ff:d3:bf:23:01:66:2a:58:1d:
75:c9:87:cb:fc:af:0d:01:d5:7c:73:e6:54:fd:b3:5d:73:2c:
60:0f:8f:31:b4:14:20:79:f6:0e:1e:0b:2b:cd:2a:00:b6:50:
89:d7:fe:98:e2:e0:c1:97:58:8b:44:bd:54:48:85:da:7f:4c:
ba:9f:12:e2:52:ec:b2:b7:3a:83:c9:d1:ad:ee:1f:3b:70:4c:
23:03:36:fe:76:ad:2f:83:87:ac:a0:38:99:09:41:53:77:60:
46:20:e9:bb:59:d6:23:19:3e:40:a7:d7:05:06:16:7b:9e:3a:
0e:f1:bd:86:3a:66:59:a9:64:64:c1:52:82:0f:1b:de:8e:a3:
4e:11:cb:d2:42:9d:2b:7c:d7:85:e1:b6:a1:4a:fc:c6:10:83:
cd:ed:75:b0:04:51:18:fa:9d:e6:97:02:ef:c3:e8:41:45:57:
1a:2d:8a:c6:ad:00:4f:1c:51:b2:2d:1e:af:35:59:c0:d3:6f:
0a:bc:82:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:41:41 2025 by rpki-client