Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File: Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier: Nz/bGJXWw9+HPeye8EsRt0dwoYcXGJowyFOA5x2FL60=
Subject key identifier: 48:E7:52:07:A5:B0:A5:8A:DB:6A:AB:89:6A:E3:A6:2C:BB:77:31:E3
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial: 0196771EF3F57AE945C5521C9B91F689FFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number: 068E
Signing time: Sun 27 Apr 2025 12:00:39 +0000
Manifest this update: Sun 27 Apr 2025 12:00:39 +0000
Manifest next update: Mon 28 Apr 2025 12:00:39 +0000
Files and hashes: 1: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: XBNuuXQZ2y6nl6wZiVXbDXIdQAQAYKxCU29x1+1Wn88=)
2: oNaxj3U73YsxY2SMYd62wSvMB4E.roa (hash: +NOpZAlgmwl+h9fy4R1kVxAQ1d7pxMvgMiKewHh1e4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:f3:f5:7a:e9:45:c5:52:1c:9b:91:f6:89:ff:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Validity
Not Before: Apr 27 12:00:39 2025 GMT
Not After : Apr 28 12:00:39 2025 GMT
Subject: CN=48e75207a5b0a58adb6aab896ae3a62cbb7731e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cc:bc:09:c1:1d:e8:79:87:77:76:67:9c:6e:
a8:8d:c5:b0:53:33:c7:b4:d1:f9:08:81:40:19:60:
eb:ee:50:ff:1d:9e:73:35:f6:ef:b8:91:8f:43:e0:
7e:ca:f6:b9:40:95:bf:4d:78:24:6c:3d:af:0b:87:
61:24:ef:4e:2f:64:c3:cc:00:a6:ec:0a:ac:da:63:
46:c9:59:3c:02:3d:e5:56:52:3b:57:71:98:18:2a:
6d:b6:1e:93:1b:9e:44:2d:40:4c:b5:76:84:81:6f:
33:4e:2a:61:95:68:9b:fd:71:ce:37:9b:1a:60:78:
72:f9:0c:61:7a:a1:c5:1f:a0:21:d0:38:4d:bc:7c:
54:33:e3:f2:f4:51:2b:e6:4a:15:12:c2:c1:81:f1:
04:48:c5:ca:2a:81:50:85:6a:0f:a3:54:ae:6c:8c:
6c:9e:ac:22:a5:bb:7b:dd:a5:d2:13:38:8e:a4:15:
ba:9c:ff:1f:4d:85:c9:99:ab:77:78:f7:ee:58:a5:
2f:b0:09:93:89:df:97:18:b8:55:9a:5c:9a:8c:dc:
e3:1d:3f:d2:91:6f:af:56:d2:37:a5:a5:21:f4:0e:
f6:4b:a5:cf:15:2f:86:07:e1:16:b8:0b:06:7f:d6:
a9:a0:cc:16:9e:61:f5:d0:b9:8d:42:c4:7a:96:90:
4a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E7:52:07:A5:B0:A5:8A:DB:6A:AB:89:6A:E3:A6:2C:BB:77:31:E3
X509v3 Authority Key Identifier:
keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:17:ed:ee:49:73:4d:f2:04:9a:81:b6:2b:02:7c:8e:11:86:
52:f1:2c:ee:4b:f3:33:13:cf:a4:b6:92:09:5b:6e:3b:bf:d1:
f4:fe:ad:69:af:81:27:1d:3b:14:1d:a1:8c:5c:0d:ba:d6:be:
d8:41:c6:de:29:e2:ea:a8:24:75:11:a4:7e:e4:9f:61:2b:02:
67:83:03:d2:8f:d1:36:b1:79:62:23:82:88:df:82:7d:e0:86:
f5:1a:6e:e5:73:5d:58:ec:89:2d:9c:2f:a9:b9:4c:43:7e:5b:
4a:50:b2:e5:6f:a5:0e:fc:23:94:2c:54:50:fb:ef:99:fa:f1:
6e:cb:33:b4:98:9a:7b:f8:82:00:aa:90:b7:5a:e1:ed:67:9d:
ce:6c:48:4e:f4:78:d4:85:08:98:6e:c9:2b:83:a6:2e:50:12:
7f:66:44:2e:2a:9f:d9:10:78:19:9a:8a:28:53:dc:91:a0:37:
d4:91:15:5c:fa:bd:4b:be:a9:72:22:7e:75:ea:76:4a:df:17:
3a:a9:8f:a3:53:ce:6f:6c:f1:59:f5:e6:b1:a7:ff:ef:81:63:
ea:e2:cd:ac:b0:f2:6d:9e:28:87:02:30:53:d6:56:94:f7:3f:
9b:54:fe:d3:15:a6:93:28:30:59:ae:4e:91:6a:f0:26:b3:01:
44:21:2b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:19:10 2025 by rpki-client