Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
File: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json)
Hash identifier: U9JNyWA4RfStKRVTXmL9iPN0X4nBuPrMmFT2MvUl5CA=
Subject key identifier: 22:86:29:3F:70:F8:BA:C9:90:EA:CF:04:DD:CF:0E:CD:94:72:64:A4
Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
Certificate issuer: /CN=c76c3644741336b01b638563314f40d10c69d30d
Certificate serial: 0196C239824724B30D2A6E4541C499887E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
Manifest number: 0944
Signing time: Mon 12 May 2025 02:01:10 +0000
Manifest this update: Mon 12 May 2025 02:01:10 +0000
Manifest next update: Tue 13 May 2025 02:01:10 +0000
Files and hashes: 1: VL_sUVNGEMQYYwl9Xv-gftIOtVk.roa (hash: Nb6N1oOcP6n4dJnS6N2r/DJY5HC1wzR3gXjz4D8FCrM=)
2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: nOZZGIk+MN9Iqc6IeKyGeKJkUmqOxhoi2/lUJ9RHwqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:82:47:24:b3:0d:2a:6e:45:41:c4:99:88:7e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d
Validity
Not Before: May 12 02:01:10 2025 GMT
Not After : May 13 02:01:10 2025 GMT
Subject: CN=2286293f70f8bac990eacf04ddcf0ecd947264a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:aa:23:c0:f5:2a:6b:61:42:c0:9a:da:3f:
bc:e1:a9:28:0e:0b:f9:1f:56:0e:54:d4:c1:ad:3f:
9b:65:73:e0:68:f7:0e:5c:4d:3f:cd:4f:7f:55:5c:
44:c3:f0:67:a4:27:78:31:27:7a:68:31:05:57:fe:
20:a9:2f:3e:d7:be:1c:01:19:3c:82:6c:3b:32:ef:
79:ee:33:d7:50:5a:45:36:64:31:e9:4f:13:3f:6a:
5b:89:f7:8b:da:42:02:77:84:5b:2b:cb:73:6d:f6:
7f:06:13:ac:68:b1:f6:99:f0:e0:53:0d:fa:62:9e:
b6:6a:22:a2:2e:ee:7f:6a:71:74:a4:3a:21:0c:26:
c3:f8:50:1c:45:38:08:8c:f9:d5:09:ee:96:5a:a8:
e5:2c:25:e4:15:93:9a:76:1a:74:fb:c5:d7:8e:7a:
1f:bb:e2:b0:95:76:af:9b:d2:c1:11:ff:a5:89:45:
3a:e0:7e:78:d2:a3:e1:5a:32:ef:27:37:56:a4:4a:
e7:eb:4d:91:a9:5f:b9:a0:56:0f:49:d6:f2:63:ce:
dc:68:06:a5:d5:ae:42:0b:44:57:90:fa:a8:7e:f6:
50:f8:cc:3a:11:ca:a9:77:cb:1a:33:5d:6a:8f:a7:
90:b7:67:95:31:69:4f:2c:90:8c:7d:f5:15:e8:00:
13:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:86:29:3F:70:F8:BA:C9:90:EA:CF:04:DD:CF:0E:CD:94:72:64:A4
X509v3 Authority Key Identifier:
keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5c:51:35:31:9c:41:fa:00:00:92:41:a4:3a:6b:88:73:42:
13:d1:a3:70:e8:41:8e:4a:84:e6:ac:b0:18:7b:50:22:8b:8b:
86:44:21:18:64:6c:d7:1a:57:8a:d1:e6:6f:34:09:e0:86:b3:
49:6c:7a:26:96:b4:9f:78:b7:5b:06:85:12:e3:49:2b:2f:79:
9f:7f:f6:9c:48:d3:5b:53:0b:cd:d3:7d:ab:11:0d:f7:32:5a:
8f:e0:c8:a7:17:64:10:9b:e6:0d:0c:06:7c:4c:7d:70:f5:b6:
e1:37:f1:80:8d:01:d7:08:49:44:c3:55:9b:a1:78:2b:94:92:
08:26:84:dc:71:0a:10:af:fc:fc:fd:a8:d4:a9:a0:c8:fb:d7:
5d:18:cf:b8:c6:4c:ff:a3:58:ef:52:0d:31:0f:0f:18:8c:21:
ae:6f:cf:a0:4e:c6:21:6e:08:74:19:8e:c6:35:68:00:cf:e0:
ba:fa:5a:5e:b3:16:0a:5c:42:88:24:62:a9:ba:42:89:5e:d0:
73:b0:3a:5e:24:23:32:54:e3:0d:5f:d7:b7:3c:0d:1c:1b:3a:
93:29:8d:1b:b9:3c:41:65:bb:35:7a:77:c2:c4:90:48:2e:2b:
ac:f9:ac:18:94:f5:24:45:00:79:1c:1f:df:3d:ac:b3:a0:d3:
6c:8f:ad:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:27:21 2025 by rpki-client