Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
File: xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json)
Hash identifier: ceAcNdL5M3cugqBpVy2Ema6XcpkSg+Lg/5Y6kj+KVq0=
Subject key identifier: 6A:0E:BD:4E:CF:DE:3E:F4:96:3D:6D:31:3D:68:57:D2:0C:11:0B:5B
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial: 0196B0D7B224FF7BC8596D17A5F1F44734CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
Manifest number: 1531
Signing time: Thu 08 May 2025 17:00:47 +0000
Manifest this update: Thu 08 May 2025 17:00:47 +0000
Manifest next update: Fri 09 May 2025 17:00:47 +0000
Files and hashes: 1: O4OjioqtdLSc9vBVs2H8waPnIgU.roa (hash: NSGxfFoC9xrE9ZgK+kDfAmJ0Yg5M2rh+aZQuRq8sgYc=)
2: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: v2ueMgeGsHuW1PxZYH/noHkrIal3jRgcpBudO8tToWQ=)
3: znlmvW2DpaFnQW1nyRCgCW8WLGw.roa (hash: YJSRBnkvLzhRF6OldluTcKQjvHWbbSsxO+vBSGh4+Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:b2:24:ff:7b:c8:59:6d:17:a5:f1:f4:47:34:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Validity
Not Before: May 8 17:00:47 2025 GMT
Not After : May 9 17:00:47 2025 GMT
Subject: CN=6a0ebd4ecfde3ef4963d6d313d6857d20c110b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9d:33:10:3b:92:ce:2f:70:b8:42:52:e3:d9:
66:00:e8:ce:80:4d:a6:cd:24:f3:83:2c:8d:70:fb:
c7:9f:10:e0:17:de:eb:b5:82:0d:94:d2:e8:25:3a:
9e:39:7f:49:0c:6e:f1:47:82:79:74:ed:86:03:04:
01:ea:b9:54:0a:9d:04:5d:09:86:f5:c1:64:27:9a:
42:52:30:f7:6d:5f:61:d7:94:be:6a:a4:39:6b:b4:
d2:93:87:26:e6:88:6c:d4:3f:06:6b:c1:4b:c3:11:
a9:04:a3:c1:c2:6e:af:a1:9a:92:2f:4c:43:38:8a:
a4:3f:00:66:94:44:c2:16:71:3d:0d:7c:ec:43:d8:
10:3d:81:4e:44:cc:ad:70:c0:1c:4f:21:0b:87:00:
f6:be:9f:aa:ae:79:e1:40:f5:8c:3f:38:32:ee:2e:
49:82:12:66:cf:64:be:40:23:8b:b8:90:be:f1:65:
f8:68:9e:29:cc:db:41:d7:8c:ac:ed:f1:8a:17:6c:
cc:90:1a:58:9d:76:18:72:6d:09:76:6c:1a:55:6e:
5f:25:c6:34:b6:f6:eb:95:ae:1b:5e:4e:ae:30:a9:
9d:78:61:d4:3d:29:5c:98:6b:ff:c7:65:ca:af:d5:
14:13:1b:df:8f:5f:59:13:e3:bc:4e:3e:a6:b3:68:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0E:BD:4E:CF:DE:3E:F4:96:3D:6D:31:3D:68:57:D2:0C:11:0B:5B
X509v3 Authority Key Identifier:
keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:60:5b:71:d1:e6:d5:ad:32:d5:35:07:9f:52:27:b7:f3:c6:
e6:fb:14:5f:98:d4:2f:5a:2a:78:7b:d1:46:4d:29:cc:d5:fa:
b4:f7:30:ae:93:d5:bd:8b:bc:90:fe:ea:ce:15:36:ac:3b:8f:
80:f4:55:81:b4:e4:52:ce:2b:eb:92:94:b8:69:84:e4:69:d5:
b8:f7:f3:61:50:de:37:85:86:5f:6e:a9:6f:25:41:e5:68:3c:
dd:23:ea:84:48:a4:d2:31:f9:9a:52:c7:ea:8f:98:57:a3:88:
f1:d5:c6:1f:69:78:db:a1:9d:b1:aa:a8:ba:ac:89:0d:6b:b1:
e8:5e:d4:57:df:58:7e:3d:43:3f:23:43:6f:ce:66:b0:06:7f:
aa:d2:31:b6:25:67:31:45:ba:67:6b:7e:bd:01:20:0b:a0:ea:
1a:fd:c2:ef:1e:02:9f:5a:47:01:d0:aa:62:4c:3f:ef:26:63:
e4:33:ce:eb:21:8f:77:7f:af:fc:28:93:dd:90:90:56:00:66:
5e:75:16:ba:51:14:18:23:c0:c5:f3:dd:16:df:ce:64:38:b5:
28:f3:95:8d:17:00:c3:b7:51:f2:fd:e9:98:fd:9f:c4:df:02:
2d:ac:32:ad:15:46:9f:80:d7:85:0f:c8:05:3d:0a:52:87:ab:
db:cc:3a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:46:11 2025 by rpki-client