Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
File: XpgU1DFdMK28jeMGAFVq6cPPns4.mft (raw, json)
Hash identifier: vlXkVVEcNAp0ykVyYHhy+HulPi0AB1i5wIDe11ZGRlY=
Subject key identifier: EA:0C:93:FF:E5:05:BA:D1:6F:8D:FC:83:60:B3:3F:91:FF:B3:51:D4
Authority key identifier: 5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE
Certificate issuer: /CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
Certificate serial: 01967E342981663214FB273A502515666E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 21:01:09 +0000
Manifest this update: Mon 28 Apr 2025 21:01:09 +0000
Manifest next update: Tue 29 Apr 2025 21:01:09 +0000
Files and hashes: 1: XpgU1DFdMK28jeMGAFVq6cPPns4.crl (hash: bGWVPmqE1ijISwTIzxAdpnkKjR2iACP52pzo/dxWJ5U=)
2: srWs4lSgEcXww8bmZ8Qduqdxgdw.roa (hash: Fa3vdYsDt8LbAe4PXMPi2JDBOubqWHhdVQas9y66mmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:29:81:66:32:14:fb:27:3a:50:25:15:66:6e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
Validity
Not Before: Apr 28 21:01:09 2025 GMT
Not After : Apr 29 21:01:09 2025 GMT
Subject: CN=ea0c93ffe505bad16f8dfc8360b33f91ffb351d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:72:2a:d5:56:22:bf:50:a8:42:cd:b6:2d:cd:
a4:99:f7:7d:81:cb:fc:94:f6:22:24:63:f3:fb:80:
e5:d6:fd:43:2d:9d:57:a3:ad:42:34:0b:9d:06:ca:
29:ab:2f:ba:8e:c4:f0:4d:0c:00:ba:75:20:7e:09:
f2:38:70:c1:a6:3b:67:c5:be:1c:e7:99:f2:cd:9a:
0f:f9:90:0b:9f:7d:69:37:b5:81:89:2c:66:bb:70:
fe:f8:1b:15:da:7d:f1:01:9d:a1:69:4d:0e:12:15:
78:1c:a0:b2:56:0d:d5:66:9a:9f:0b:44:a1:36:f6:
e7:38:96:ca:2c:41:3e:0c:d4:81:74:f3:d9:37:bb:
7c:be:77:e6:5d:4b:ca:f7:0a:e1:b6:73:44:9e:5e:
a5:61:23:82:a5:08:fb:a8:ef:01:e6:3f:fc:88:23:
68:af:6f:66:ac:cf:8d:f1:21:2a:0c:7f:4d:52:20:
19:e0:31:46:88:4e:a8:80:45:79:c0:ae:c8:73:a3:
77:a0:da:67:a2:19:4a:7d:6c:d0:07:12:0e:75:34:
32:3e:82:d6:82:49:26:da:f7:0f:6b:ee:26:05:c5:
57:1c:42:af:1b:03:78:e5:dc:2c:fb:68:0b:1d:1b:
b9:2e:26:7a:be:69:67:62:c3:36:de:1e:e8:1e:81:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0C:93:FF:E5:05:BA:D1:6F:8D:FC:83:60:B3:3F:91:FF:B3:51:D4
X509v3 Authority Key Identifier:
keyid:5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:56:6f:68:ff:c0:49:c4:5d:31:76:56:b8:a4:af:8f:b7:eb:
bf:93:d7:66:b3:3a:44:df:d6:1c:f6:bd:bc:41:e1:36:9d:6c:
2d:9d:92:aa:34:0c:d5:21:12:f8:0b:c3:53:5b:46:ec:c9:60:
c8:98:53:10:e0:34:d9:24:41:35:a3:5b:50:ba:33:e0:27:9e:
66:6a:d8:98:4e:14:6d:ac:cf:28:c2:cc:f6:9f:66:60:19:98:
7e:53:24:1c:d0:f3:ef:81:95:e4:c8:0f:7e:ca:77:6e:c7:61:
68:23:d2:63:0a:c2:a4:35:f8:f4:92:e3:6a:2a:f8:0e:65:ef:
46:b7:56:bb:89:44:12:95:c5:45:85:be:45:7b:82:bb:a2:11:
75:87:8c:3f:a0:fb:95:07:f1:a5:79:5a:cb:32:57:28:3e:76:
ab:f2:ba:bd:12:9f:6b:99:43:62:49:7c:50:90:02:96:bd:3a:
16:f8:c6:f8:1f:2f:31:de:d7:91:0e:dd:d7:0b:c8:8c:d0:9b:
44:1e:14:a4:89:28:1a:b2:58:95:07:57:27:89:3d:e2:74:16:
d4:0f:cb:11:8e:33:d0:c7:09:27:b9:1a:b3:5c:28:74:03:ec:
5c:7e:23:f7:39:5c:ba:e6:76:0d:d8:7b:4f:5d:2f:3b:d5:24:
f1:4f:0a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:14:45 2025 by rpki-client