Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File: x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier: DgAPX2jRm/eNRpI4fTW4tkZimdtjvtn/vou1KeMtafc=
Subject key identifier: 27:1A:3A:1E:C5:D9:FE:E0:CE:11:0F:84:FF:29:18:C8:1E:62:50:5F
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 01969D1A4EDABE832549CDDC63C449AFA611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number: 1524
Signing time: Sun 04 May 2025 21:01:09 +0000
Manifest this update: Sun 04 May 2025 21:01:09 +0000
Manifest next update: Mon 05 May 2025 21:01:09 +0000
Files and hashes: 1: cFEMcTrZnpJM6OI3sLSildoG7_o.roa (hash: 9byuaTVIbm1V06CyQEH6JUvAc6lfIjdANtz73++4OCM=)
2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: 04GMlWj8OomO8ukICq7lV43ih1qTClBt1f9ouPYTaHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:1a:4e:da:be:83:25:49:cd:dc:63:c4:49:af:a6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: May 4 21:01:09 2025 GMT
Not After : May 5 21:01:09 2025 GMT
Subject: CN=271a3a1ec5d9fee0ce110f84ff2918c81e62505f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c3:b5:5a:ea:05:c9:ab:45:d0:c3:a0:e5:99:
24:84:5a:13:00:96:15:18:c3:fa:e1:28:94:d2:84:
9d:01:d4:eb:45:3b:d6:61:66:13:04:3c:c2:9a:9c:
dc:e1:44:cb:c7:ec:63:2a:0d:69:d4:2f:f0:6f:d3:
9f:db:61:5e:86:76:46:56:2b:df:f5:25:80:2b:6d:
d2:4b:5e:d7:fe:41:28:2a:f0:96:2e:be:47:c2:1e:
ff:fd:eb:10:fd:39:ea:2b:2d:9d:04:67:b9:ea:92:
15:53:e8:aa:22:2a:5a:34:4c:91:e0:74:48:51:8c:
af:f5:08:2e:f2:88:27:7e:b6:03:b8:fc:7c:d3:07:
9c:5e:4b:1b:cf:05:05:18:d2:bd:a3:16:d1:38:0c:
e6:a0:98:93:69:0b:54:04:b8:c6:2f:b7:57:fd:2b:
ab:75:db:aa:c8:e0:5c:31:2f:41:37:47:1e:ed:a2:
80:3f:3f:53:6d:d3:bf:71:4d:96:1f:b3:f1:a5:5c:
da:d9:49:d9:8a:cd:7d:56:6f:f2:27:4e:79:24:34:
d8:6c:51:b5:79:75:5c:cd:3c:b9:a2:25:93:17:9d:
7c:71:da:9a:54:f5:9a:d7:4d:78:b7:3f:1a:22:5f:
36:21:89:02:85:4c:b5:04:26:70:99:9c:7e:ba:73:
6d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1A:3A:1E:C5:D9:FE:E0:CE:11:0F:84:FF:29:18:C8:1E:62:50:5F
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:89:da:14:6e:f2:5c:32:38:69:9c:83:fc:4f:29:f1:23:db:
6c:ed:a8:49:e7:b2:06:58:01:a3:97:e4:b3:70:cb:92:6a:fd:
c7:bc:72:3c:17:28:ca:f6:7b:da:ff:c0:b1:92:10:cb:bd:a4:
0c:ad:f8:3f:15:5c:80:15:de:bd:1e:72:c1:d8:19:67:b7:a5:
17:3f:15:e5:40:2c:00:a5:2e:29:90:fb:f7:4f:e2:d9:92:ab:
9f:fb:f3:36:db:92:8c:3a:cd:02:30:e3:8c:f5:05:1f:08:6e:
ec:dd:75:52:5c:1c:0e:3c:e7:9f:83:fd:fa:8c:53:a5:68:e0:
77:47:ea:44:69:50:a8:ae:2c:d1:bc:80:d1:15:17:36:ec:73:
2c:37:14:cf:96:35:47:9b:f7:12:7c:8b:6d:bb:16:7f:cc:aa:
e5:fa:09:a9:83:93:a3:cf:07:19:45:85:e6:98:1d:5b:bb:b5:
43:d7:33:38:e3:94:81:f4:19:16:b5:ab:ca:37:90:19:17:a6:
81:a9:aa:6b:33:b7:9b:55:d2:e5:b8:b4:71:38:3d:e1:b8:d8:
c8:08:2c:c6:d4:4a:5d:3b:14:2c:1c:5d:2e:01:ea:57:3a:e6:
a6:4f:14:e4:6c:c0:eb:2a:11:99:0e:af:f5:7d:b6:fc:f2:9e:
63:7a:1b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:17:36 2025 by rpki-client