Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: CXD83VoCrY3dP3HTMNoAP6eyp+GqE4Dtm8ODT0Xa4GQ=
Subject key identifier: 79:7F:A6:F1:CB:B4:C5:45:10:08:DF:28:0A:46:90:98:7C:24:68:36
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 019681A283FA5275533DCBA31BEBA6704311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 13:00:33 +0000
Manifest this update: Tue 29 Apr 2025 13:00:33 +0000
Manifest next update: Wed 30 Apr 2025 13:00:33 +0000
Files and hashes: 1: OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa (hash: zWY5clqa55gDcmN1fPxGPLkXmjUJa6OG2BTGiJ7PAMw=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: 5JeGxTSoGFlX1U5JFcpbhtOdDVbbjW+ybmqo4o869m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:83:fa:52:75:53:3d:cb:a3:1b:eb:a6:70:43:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Apr 29 13:00:33 2025 GMT
Not After : Apr 30 13:00:33 2025 GMT
Subject: CN=797fa6f1cbb4c5451008df280a4690987c246836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8b:6a:16:e7:f2:73:18:7d:44:ee:d2:c9:a7:
66:83:9f:82:f5:17:41:39:53:47:ef:c8:31:c5:56:
80:90:77:ef:01:ff:21:c3:93:30:95:9e:2f:86:5e:
e4:81:a4:7f:65:be:d4:f9:21:61:9c:96:4a:ce:04:
37:31:12:7a:4d:5b:e8:8f:72:b1:0f:c8:cb:be:93:
43:5c:2f:28:0a:59:f5:d8:92:fb:b6:65:6d:6e:aa:
78:81:15:48:1e:fb:06:ce:1c:f9:3e:e3:62:42:fb:
f4:e5:8d:9f:f5:87:c9:eb:a6:70:45:e9:5e:3c:b6:
4b:40:49:77:f3:6e:e9:e4:07:4b:2e:fc:cb:27:96:
dd:42:55:e8:8d:cb:12:fe:37:d1:04:29:b2:f5:73:
7b:93:97:40:88:9f:eb:ff:35:1d:1f:9e:ba:17:46:
75:8e:99:6b:0d:1c:21:cb:e7:90:a7:09:0b:3e:0c:
c5:4b:64:ad:9c:f2:f9:42:c3:c7:d9:fe:09:79:e6:
4f:f3:25:6a:38:cd:fd:ec:f2:64:47:b0:df:fb:54:
97:13:98:3c:ca:03:73:9d:21:db:44:f5:db:7b:c1:
ab:6f:cd:09:ec:70:da:8a:19:60:78:5b:23:03:fc:
38:9c:36:14:a7:39:a2:bc:59:12:22:8f:cd:4b:3e:
bb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7F:A6:F1:CB:B4:C5:45:10:08:DF:28:0A:46:90:98:7C:24:68:36
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dd:52:c8:4e:d8:45:6c:78:57:8e:7b:13:33:08:f9:bf:ba:
43:68:3b:10:b0:3d:71:c4:69:dc:bc:88:49:5f:87:46:bd:6d:
5e:60:8a:dd:04:0c:41:0f:93:ea:87:c7:d0:14:de:1c:46:f2:
26:a2:c2:55:69:2b:17:c7:bf:ae:db:ed:d7:84:0f:38:db:78:
43:b0:a8:b3:5f:ea:ed:b9:0a:f7:cd:8f:08:34:99:07:12:b7:
0b:d5:18:1b:5e:96:85:44:9d:15:30:e6:0d:78:1a:38:c2:55:
06:46:55:86:6f:2c:d0:a1:a0:26:bc:c1:36:61:7d:67:51:4e:
bb:f4:f6:9c:35:06:47:8e:9a:b3:e4:d7:40:53:6a:04:5e:04:
11:db:15:3a:5d:7d:b6:d0:60:09:6a:7a:14:58:6e:6d:41:c7:
6e:9f:8f:ba:d2:49:17:8a:36:13:e5:77:22:f0:60:24:14:f2:
83:4f:38:d1:71:9f:a0:7a:80:6a:0e:2e:f1:c0:20:fc:f0:16:
47:c7:0c:1a:86:67:6b:e9:52:23:fd:6a:23:c6:70:2f:8c:7b:
99:3c:49:31:82:df:42:1b:e6:8d:5a:82:42:10:73:58:59:06:
3a:23:ff:ac:7d:d3:e6:3f:37:91:9b:df:47:fb:7a:c2:7f:cb:
3e:82:0a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:10:14 2025 by rpki-client