Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
File: xN29nyMJGTIb9WcG8QaTd5JhGfk.mft (raw, json)
Hash identifier: akpxk+mZINPWlMID5/f8DVQNWuLZ09V30TZr8iEcyyQ=
Subject key identifier: DF:E9:5A:F4:41:34:95:68:83:61:3B:88:17:14:EF:9C:A6:82:1A:33
Authority key identifier: C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9
Certificate issuer: /CN=c4ddbd9f230919321bf56706f1069377926119f9
Certificate serial: 0196C3B9AB3A5F0EA2CCD0BCEDE45566F766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
Manifest number: 0556
Signing time: Mon 12 May 2025 09:00:47 +0000
Manifest this update: Mon 12 May 2025 09:00:47 +0000
Manifest next update: Tue 13 May 2025 09:00:47 +0000
Files and hashes: 1: 7qr12EYwsdyti-EmLWqRDogionQ.roa (hash: 5LhmlqfCFcdrvGQgZrfHuGwVjCahrEpoNBu5iKMaA/w=)
2: JEh62edtGcPK6W4aI6E72di6xCs.roa (hash: PD42vAZ0BIX3jY6yqazrN5UUOFytkMhASMCFsoaVQJg=)
3: xN29nyMJGTIb9WcG8QaTd5JhGfk.crl (hash: oLTkzDmt0JgujQmFAFQUvXLEe5jF+c4zw6bi6pnwFvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:ab:3a:5f:0e:a2:cc:d0:bc:ed:e4:55:66:f7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ddbd9f230919321bf56706f1069377926119f9
Validity
Not Before: May 12 09:00:47 2025 GMT
Not After : May 13 09:00:47 2025 GMT
Subject: CN=dfe95af44134956883613b881714ef9ca6821a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:4c:c4:ca:43:65:30:35:14:a1:a3:5f:e5:
7c:41:af:02:61:b6:5c:cf:1b:43:20:83:33:aa:83:
77:7b:67:e4:9d:9e:f3:c9:04:8b:21:1b:9e:ef:de:
ec:9a:79:c8:e7:38:fc:00:02:69:1f:87:a8:dd:6a:
1a:65:bb:aa:ec:64:c7:69:e1:9a:89:bc:cd:9c:81:
bd:98:f3:34:71:6d:56:7d:84:ba:de:80:83:db:a6:
c3:75:b3:9a:3e:fd:d0:c5:7d:bb:52:e8:ba:c5:08:
44:94:ee:f0:f2:49:83:01:e0:c2:44:89:e9:6e:73:
cb:ed:d2:3a:20:89:4b:6e:49:fd:3f:1c:2d:ec:ba:
03:aa:a7:2c:6e:ff:57:ab:5a:b1:23:f9:a9:d2:3f:
67:e1:b6:9b:a5:39:35:a9:81:fa:a3:0f:28:bc:e3:
f5:ad:b0:f3:f3:26:84:a6:5c:25:01:c7:1e:bb:8f:
d5:98:3a:a4:89:11:32:c0:3c:98:83:51:27:19:a8:
10:e1:d6:37:10:e1:e1:39:9b:8e:33:d9:65:f8:5b:
7b:99:8f:8f:6d:63:fb:54:9e:bc:d5:59:7a:c7:2e:
5d:35:e6:45:6e:75:fa:48:8b:5c:eb:9f:26:99:bc:
6f:05:c4:65:eb:36:99:00:60:8b:cd:21:71:cb:8a:
fa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E9:5A:F4:41:34:95:68:83:61:3B:88:17:14:EF:9C:A6:82:1A:33
X509v3 Authority Key Identifier:
keyid:C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d8:39:65:c7:ca:b3:f2:20:4c:fd:63:16:36:e3:43:b2:e7:
9a:ca:54:71:e1:bd:48:69:b6:c5:9a:05:45:86:d0:e5:31:2e:
b2:be:99:92:6f:76:02:92:78:55:4c:cc:97:5f:1e:7f:db:43:
79:04:e9:f4:3b:d3:cb:c7:70:fa:1e:a6:b0:e1:29:97:fa:a7:
37:82:30:df:26:06:41:8a:bb:b8:a7:1e:65:47:0b:b5:dd:d2:
9d:a5:a0:af:32:a9:55:fc:8d:73:6a:5e:49:d3:20:f6:a6:8a:
f1:d1:c2:6c:8a:4e:b4:7b:d5:d2:91:ad:f0:b7:b5:98:91:62:
1d:e2:2d:31:73:a9:06:0b:b4:c0:f8:cf:b0:a0:33:58:67:ff:
fd:ae:c0:7e:75:9c:e9:2e:09:ec:22:80:17:51:46:eb:81:83:
16:6d:eb:8d:81:f4:87:54:2c:ed:50:7d:a8:d8:73:ac:78:ab:
bf:16:ce:d8:e4:f9:7b:4c:df:e0:02:28:29:a8:3c:42:d3:61:
cf:61:6a:76:cb:2b:d1:0f:e4:1c:d9:b5:5c:bd:a1:99:d3:80:
61:66:46:c4:9b:bf:4f:a7:57:b3:d3:2b:2c:2e:7e:d6:ba:3c:
f7:b3:93:ce:52:af:0c:1f:1f:52:f1:5c:43:f9:ef:75:a4:11:
fa:8d:84:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:41:24 2025 by rpki-client