Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
File: xeu4t5Qi-y1tioLbfxrAtqpZs38.mft (raw, json)
Hash identifier: jsCbaFjMS3+jIdV/UW5TR5vQHLj5Eanq+p8E+i0rGFA=
Subject key identifier: D1:C5:65:C4:2D:1B:38:64:9B:2A:15:7C:B4:5E:7A:D3:C5:7D:30:B6
Authority key identifier: C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
Certificate issuer: /CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Certificate serial: 019677C385600019E6A910B8248118A6BD77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
Manifest number: 1433
Signing time: Sun 27 Apr 2025 15:00:24 +0000
Manifest this update: Sun 27 Apr 2025 15:00:24 +0000
Manifest next update: Mon 28 Apr 2025 15:00:24 +0000
Files and hashes: 1: xeu4t5Qi-y1tioLbfxrAtqpZs38.crl (hash: jfOlhBLu3+SjDG6CPBuRiK0ddyHfA1heJb69Dnb2Jug=)
2: zG4ly3FhpsRy_muFf41M8ZKPF5o.roa (hash: 9tm7KsG1SMgxDQdJBogQZSZKc5Vw7KrlfAJHfrS64mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:85:60:00:19:e6:a9:10:b8:24:81:18:a6:bd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Validity
Not Before: Apr 27 15:00:24 2025 GMT
Not After : Apr 28 15:00:24 2025 GMT
Subject: CN=d1c565c42d1b38649b2a157cb45e7ad3c57d30b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6c:3b:ea:bf:7e:ff:71:e6:66:c1:7b:a8:51:
30:7a:6e:e3:79:0d:28:90:33:dc:93:1b:25:85:0d:
68:ee:01:8b:2c:88:a5:18:68:8a:42:33:f9:14:ed:
65:a0:c1:f3:9d:61:91:68:b0:74:db:29:9b:7a:bd:
89:f2:b1:fe:57:9c:8c:07:64:0e:96:4f:be:49:52:
b6:f4:a9:92:53:c8:1b:b5:21:15:62:fb:c8:57:3e:
89:da:d6:55:87:f0:12:35:c4:0e:51:98:b3:6f:62:
de:67:6a:af:03:db:33:ef:78:54:33:47:ef:04:2b:
88:f7:12:59:27:a8:dc:9b:5c:fb:2a:b9:9b:cd:13:
f4:0f:3f:ee:88:d1:c5:57:a5:70:29:1b:e7:32:5a:
4b:2a:41:42:8a:4c:45:35:ac:56:85:ea:71:5d:cd:
c8:35:aa:ba:d6:95:6b:71:85:57:5e:7e:d9:41:e2:
b5:63:7f:45:13:fd:8a:73:9f:47:f4:da:b7:60:48:
7d:03:d6:2b:3f:71:58:1c:a4:76:61:99:c9:ba:40:
3a:d5:6b:d2:49:1d:d9:b5:b9:47:b3:de:dd:05:c0:
26:25:cd:5f:1d:8f:f9:92:b6:fe:aa:88:1f:fd:b1:
e3:eb:52:e6:cf:68:3c:5c:5c:96:c2:b6:26:3e:7e:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C5:65:C4:2D:1B:38:64:9B:2A:15:7C:B4:5E:7A:D3:C5:7D:30:B6
X509v3 Authority Key Identifier:
keyid:C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:36:9b:7c:90:bf:38:7a:aa:69:9a:3d:aa:98:3d:6d:31:6a:
0d:69:3e:a3:29:34:08:4a:bf:2e:83:6f:41:2c:be:d5:8a:11:
40:e2:04:e4:51:44:38:2f:04:a0:9a:a3:5f:24:78:ff:a5:a6:
b4:9f:65:b6:4f:40:0e:3a:f2:86:50:7e:6b:fe:d6:82:79:78:
19:28:dc:0e:f9:85:36:8e:19:47:ae:4f:9f:1a:1f:9e:05:d1:
7a:7f:92:ad:1c:cd:97:a8:6f:45:70:92:c6:66:ed:be:1b:88:
2d:b5:61:49:c8:e1:4b:b3:c0:d4:db:25:43:71:e3:af:79:53:
73:e2:e4:5e:69:23:78:fd:3b:44:8e:e3:fb:29:1e:f1:4e:c4:
3f:fc:43:42:59:84:97:8f:12:27:29:2a:9b:be:06:25:bb:45:
15:03:d0:d2:e1:9b:29:30:ae:96:d1:72:b7:71:88:74:67:a0:
7a:73:d3:bd:18:28:77:f2:76:7b:a5:97:2e:b1:98:aa:df:8e:
1a:85:41:b4:59:03:8f:00:18:fe:ed:ac:9b:33:0d:4d:e8:1e:
75:46:52:56:2b:50:7c:a5:ca:16:53:61:d3:7d:79:7e:87:a4:
74:5d:63:91:49:2c:16:94:10:80:b9:3f:5a:2c:7b:9e:c7:a0:
41:9e:67:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:19:29 2025 by rpki-client