Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
File: xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json)
Hash identifier: /Br1iZNKeHm+3ITsP+/Kq1Fz4g+CwKhgzTmn3PmCUds=
Subject key identifier: EE:F8:AD:52:1A:E3:96:E7:9B:65:3D:75:94:01:40:83:69:BA:04:71
Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
Certificate issuer: /CN=c42287c68458f980ca9b7c36d61f6af586464b28
Certificate serial: 0196B935CC996BFA472FB079EA2DEBD6295E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 08:00:32 +0000
Manifest this update: Sat 10 May 2025 08:00:32 +0000
Manifest next update: Sun 11 May 2025 08:00:32 +0000
Files and hashes: 1: 8Y6XKuO-_q-eZcd8PYJP4ppiukg.roa (hash: yAyB9mAE7fWNNJ4M45GAzvUfCPqHWuDqtJYIq1FJlDc=)
2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: S8jUINCT13D77bhrjPhdMQrloNiSJ+Ad8QjYBxtWTMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:cc:99:6b:fa:47:2f:b0:79:ea:2d:eb:d6:29:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28
Validity
Not Before: May 10 08:00:32 2025 GMT
Not After : May 11 08:00:32 2025 GMT
Subject: CN=eef8ad521ae396e79b653d759401408369ba0471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6a:ac:3e:69:7b:fe:ae:ee:e6:e6:63:a8:fd:
30:21:26:c4:5d:cd:81:dd:5f:64:8d:e8:95:f8:6d:
7c:0a:7a:d2:ed:66:5b:52:4a:fe:46:bd:b5:74:c7:
41:fc:5d:64:df:87:fb:31:8b:cf:55:4d:93:b6:f3:
60:a1:17:b7:90:c9:f3:38:c8:e8:5c:63:a7:4a:ae:
11:a3:be:99:0d:90:64:0a:69:4a:9d:fc:23:15:6c:
4b:b2:4b:c1:1c:77:7f:07:82:8b:72:7e:90:06:1e:
05:2b:d8:c6:b8:af:f6:68:53:d0:ed:6f:07:52:32:
75:18:f0:59:d5:4c:08:da:83:e7:ec:16:fb:07:f9:
86:f1:a1:a2:79:49:fe:e6:67:9a:f2:65:3c:67:db:
fc:27:34:fe:7e:96:5b:db:b1:d2:2a:ac:d0:58:c6:
90:d7:f9:02:db:95:f9:4a:b2:16:21:4f:73:24:c2:
94:54:6c:35:c9:01:1b:72:98:b6:4a:b6:9d:f8:6e:
c2:ab:25:6d:9a:4c:aa:8f:88:94:db:b5:64:2a:19:
c1:e5:47:06:95:9e:31:5a:62:cb:5b:5b:31:0a:59:
04:eb:42:6e:25:a1:53:da:48:50:4a:f8:91:eb:92:
fe:b1:37:bf:14:6e:d8:99:43:fd:3f:2d:08:09:f8:
2a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F8:AD:52:1A:E3:96:E7:9B:65:3D:75:94:01:40:83:69:BA:04:71
X509v3 Authority Key Identifier:
keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a8:d0:5f:ec:3a:8a:74:85:d5:66:18:f7:5e:73:25:d0:f8:
30:4a:7f:f2:04:80:7b:bc:23:14:57:77:ae:db:35:14:13:4d:
02:a8:a6:8e:8e:b2:72:3b:53:18:4a:06:bf:d1:65:f2:b2:b7:
43:5f:2f:b6:30:83:ca:b6:a3:56:6d:ae:2b:47:cd:84:df:5c:
9e:03:0f:19:9b:ba:1f:1f:6e:66:53:87:49:c7:22:4a:c1:38:
9d:f5:fa:5e:68:5e:64:0d:99:45:57:38:c9:92:ae:81:ba:6e:
01:f9:55:c4:c1:2e:9f:9d:ed:29:9f:e9:f0:62:ba:78:72:25:
9d:d1:22:e0:fe:24:b6:24:d5:bb:fb:c5:ed:9a:c5:52:c4:e7:
00:25:65:31:bf:29:8c:55:c7:c6:76:2e:2b:f3:cd:97:fe:23:
9b:be:34:5a:cb:d1:db:d8:4f:9e:08:b9:76:2c:cf:d0:b8:5e:
7c:b9:24:56:9a:ff:31:d5:49:3a:7f:5a:2e:c1:32:cb:3b:49:
f7:22:b4:c0:d2:b6:05:55:67:6c:f4:5c:48:14:57:0b:8c:20:
30:36:d7:56:a8:d0:8a:a3:d8:1f:12:0e:b4:de:93:8a:7c:01:
0c:3b:e3:1b:ac:37:13:a3:cc:20:1a:f1:56:f2:27:44:8f:d3:
14:93:6c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:26:26 2025 by rpki-client