Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: pQYP5faR+xL9zEG7s8OuxRRLiEii5nvgnomnVMy60VI=
Subject key identifier: A1:9C:E3:40:D3:CD:7F:81:C1:23:11:A5:80:D4:21:E2:BE:96:41:4F
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 01968F9500DDDA9BA4E504691A994948099B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 151A
Signing time: Fri 02 May 2025 06:00:29 +0000
Manifest this update: Fri 02 May 2025 06:00:29 +0000
Manifest next update: Sat 03 May 2025 06:00:29 +0000
Files and hashes: 1: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: 6h5eUiTgQWC+u2olgeGz6mUnAUZKhS+R08W9XdX6f1I=)
2: wl9SNv70naNlxlbGYA9UwaRdUUM.roa (hash: cBLc9nicdCyrqpLVSvLzNsHxSpcCPqY4HcbtkzPI2zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:95:00:dd:da:9b:a4:e5:04:69:1a:99:49:48:09:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: May 2 06:00:29 2025 GMT
Not After : May 3 06:00:29 2025 GMT
Subject: CN=a19ce340d3cd7f81c12311a580d421e2be96414f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:20:9d:45:ec:f7:6a:88:3d:4b:56:79:f8:d2:
03:d0:96:28:ff:3e:8d:4c:2e:89:62:74:ba:e5:08:
3d:39:bc:23:23:86:24:e7:d2:53:4a:94:98:b2:ed:
16:22:b1:d6:11:62:7b:ab:c1:85:d8:45:68:ed:43:
2c:c8:5b:21:34:cf:2d:52:20:b7:0a:b4:d7:de:a6:
27:88:22:fb:7b:a4:80:3d:fc:d3:9d:b6:fd:45:f5:
b4:6c:42:3d:86:61:ea:af:62:70:64:24:22:ac:91:
b3:d6:3c:04:b3:57:a4:69:db:ad:bd:7a:fc:3b:75:
90:fc:58:58:a9:e3:67:a1:0e:8e:db:19:ef:60:19:
53:3f:72:2c:ca:9e:d7:db:d2:38:f1:7e:4b:0c:07:
60:38:04:8a:c4:29:31:48:8c:e9:26:75:88:17:ed:
1f:a3:ac:be:67:f0:a8:19:00:34:1b:2c:89:ec:17:
4b:8b:dc:03:9f:5a:23:cf:72:2a:94:ff:18:17:ba:
a3:73:87:6a:dc:1f:32:66:23:9e:11:78:09:00:44:
9c:91:c3:1e:54:eb:9c:f7:09:06:b3:8e:a6:3c:78:
c2:02:4b:05:72:b2:b2:65:c3:f7:dd:71:11:42:4e:
f3:8f:b1:33:85:6f:ce:17:91:db:c2:c0:bc:62:4f:
aa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9C:E3:40:D3:CD:7F:81:C1:23:11:A5:80:D4:21:E2:BE:96:41:4F
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3b:ea:01:48:e0:8e:aa:32:72:86:2c:93:a2:6a:96:c0:ed:
42:d4:5b:56:30:58:89:01:6b:3d:96:87:08:f7:61:2d:f2:b0:
50:c1:74:ca:77:70:2b:2d:ee:0f:b5:2b:11:b6:32:2b:d1:9c:
af:fa:f2:f7:a3:32:31:75:9c:4d:2a:7a:d3:90:1e:1b:f8:08:
e6:9e:b9:60:9f:58:95:4b:ef:d2:0a:c1:3c:d3:18:f7:65:09:
6c:71:79:3d:98:c1:36:47:0d:ab:c7:83:d4:f9:40:ea:89:3b:
2c:ba:54:39:c7:78:82:ad:d0:45:1e:9a:83:15:84:3e:6d:68:
87:74:56:bd:61:de:60:49:ea:b0:46:35:69:ca:5d:9d:dd:10:
47:ca:1f:5a:34:cf:f7:46:e1:8a:16:76:96:3b:ac:e6:ec:44:
58:5f:49:fb:6b:5f:32:b1:09:f6:0a:de:91:7d:83:07:e4:af:
69:f9:a4:81:57:78:4d:69:2c:01:12:3f:6d:bb:6d:cf:dc:2d:
b3:37:c6:bf:dd:c2:ab:85:3f:c7:a4:56:7f:cb:43:16:7d:cb:
24:6d:3e:94:98:85:28:60:4a:42:e2:5d:cf:07:d0:ea:a0:3f:
01:0c:ac:9a:a8:2f:92:43:cf:b2:f5:c4:f0:d4:99:81:23:a1:
b2:ff:ae:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:59:32 2025 by rpki-client