Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
File: XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft (raw, json)
Hash identifier: 8McwhTG+6rkk6P7Z2kpXKvZQSaiC0jF/NUE0fwGUgj8=
Subject key identifier: A6:F4:0A:66:0E:E0:DB:99:BD:F7:45:08:20:68:7F:8D:13:35:E9:B9
Authority key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
Certificate issuer: /CN=5efccd7d7e308f81807051f8d487e9d829c24868
Certificate serial: 01967CB37E42CA1EB1768B0CCE4853EC4A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 14:01:00 +0000
Manifest this update: Mon 28 Apr 2025 14:01:00 +0000
Manifest next update: Tue 29 Apr 2025 14:01:00 +0000
Files and hashes: 1: RtI2t-xfA3CVU9o2N66E_VQ0tAE.roa (hash: DL3BEIidpUe9S3B80+Z9r5T7eyCfvhEDaHGpB/iZxlk=)
2: XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl (hash: 8SWJXt01Tdy037ZVsIN8pUFkAsjrTHdFppbaSyg4Ue4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b3:7e:42:ca:1e:b1:76:8b:0c:ce:48:53:ec:4a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efccd7d7e308f81807051f8d487e9d829c24868
Validity
Not Before: Apr 28 14:01:00 2025 GMT
Not After : Apr 29 14:01:00 2025 GMT
Subject: CN=a6f40a660ee0db99bdf7450820687f8d1335e9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:c5:f9:93:3d:d5:69:0e:61:0d:40:ff:df:
8c:dc:16:ac:29:5b:8f:0d:67:e6:4c:44:60:4f:35:
01:f3:ad:22:15:2f:3a:b8:bf:26:bb:34:57:81:34:
a1:44:46:ee:f2:46:aa:39:8f:00:bc:b8:65:b6:31:
eb:74:ff:fd:9d:9d:cd:46:cb:46:7a:e1:48:ed:2d:
dd:90:d1:68:ac:c2:76:65:d2:66:67:14:2f:3a:df:
d6:4c:c4:6c:48:9a:5d:3c:02:7e:e9:f9:49:ad:f1:
4a:ba:07:24:3f:65:66:e6:94:a2:65:7c:47:98:24:
57:9b:dd:41:d8:02:70:db:a8:5a:a2:42:e1:56:f1:
fd:e7:1c:15:62:cf:09:c4:9d:75:f3:42:84:36:ae:
dc:08:76:f3:b2:cf:a7:2f:bf:6b:7e:22:81:e0:4f:
ba:6c:d9:28:67:0d:b1:2f:8c:5a:b2:80:d2:e5:9a:
e4:db:10:e2:e6:55:62:b4:ac:43:2e:74:52:bf:09:
9e:d9:d6:4c:dc:ae:2d:5e:a8:1b:3a:41:bb:5a:2c:
f5:a7:7a:1f:9f:6d:1e:ad:26:12:23:16:14:ed:a7:
35:47:36:31:78:6c:fe:b0:45:7d:04:98:82:b1:0c:
6b:46:7c:43:8e:1b:91:1f:e4:8d:2e:8e:1b:fe:bd:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F4:0A:66:0E:E0:DB:99:BD:F7:45:08:20:68:7F:8D:13:35:E9:B9
X509v3 Authority Key Identifier:
keyid:5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5f:c9:7f:d9:07:ff:44:df:2c:74:36:38:69:ee:d1:27:75:
62:b1:63:43:7e:59:49:18:16:51:3a:1c:d8:b1:80:30:e6:5b:
96:7a:0b:2a:e3:18:fb:81:2d:87:03:67:94:3b:1a:64:f1:7f:
55:62:2a:11:1f:a9:2e:92:5e:18:dd:35:35:d9:9b:2e:65:6c:
4a:48:0c:9b:69:04:26:38:48:2d:c8:21:df:34:3e:37:20:05:
e7:a6:ad:d2:ce:5f:97:dd:27:09:32:68:33:1a:1f:08:95:09:
1d:bf:9f:2d:5a:f8:02:fb:17:dc:37:14:2c:87:fe:20:39:89:
ec:82:08:a7:14:94:99:f1:5b:e1:65:d8:8e:4f:d5:99:02:af:
c1:85:98:29:78:e3:87:20:62:70:50:a1:b8:ff:a7:8d:45:5d:
4a:2a:1f:d5:08:22:56:bf:53:7d:1b:55:f5:7a:f3:7c:13:f3:
b0:5f:ef:18:6c:eb:aa:04:a0:5f:b2:7b:be:a2:d4:b6:fb:ac:
21:d9:0f:46:2e:fd:a6:59:fb:99:40:b8:12:33:59:44:d0:4a:
e6:b3:58:16:7c:b3:1e:66:0c:26:d1:26:03:d4:1a:ac:5c:d6:
84:fc:08:ee:27:ea:e7:50:73:ab:2a:b1:91:56:16:c8:9f:d6:
48:04:da:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:01:03 2025 by rpki-client