Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
File: XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft (raw, json)
Hash identifier: lvroiHPo6Zxiw7ZdYyrRPy8ThaQ+X22sm6CKe61HVZ8=
Subject key identifier: ED:31:AA:B4:93:1A:B1:36:37:D3:61:00:81:FD:AB:55:F0:1E:1B:C8
Authority key identifier: 5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
Certificate issuer: /CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Certificate serial: 01967C4563E0C92AB077B979E5535ACAE304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
Manifest number: 13DB
Signing time: Mon 28 Apr 2025 12:00:44 +0000
Manifest this update: Mon 28 Apr 2025 12:00:44 +0000
Manifest next update: Tue 29 Apr 2025 12:00:44 +0000
Files and hashes: 1: FMf3Dlx3xe3o0oQ5H7VvQF4482M.roa (hash: Ky+yUEaNAFCmWfk3pIxAZYoORhQc8JCWg+sBVNOj1UU=)
2: W6TXRuSHj7Av0ycVagFuBFyueug.roa (hash: zzCpwhscwcrboKFL/7dxhPDQ5vjcVhPtCOUJlM4/l38=)
3: XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl (hash: zPYQCw4cd3lRoOXUNuAN3+BDIhDLu86gUKjPPCiq5R8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:63:e0:c9:2a:b0:77:b9:79:e5:53:5a:ca:e3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Validity
Not Before: Apr 28 12:00:44 2025 GMT
Not After : Apr 29 12:00:44 2025 GMT
Subject: CN=ed31aab4931ab13637d3610081fdab55f01e1bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c2:79:3a:c2:e2:43:7a:99:61:6a:10:8a:2d:
ef:21:aa:92:44:61:fa:d6:47:fe:e6:4c:72:d9:4e:
58:48:84:10:46:1c:14:fd:aa:4a:15:1f:13:cf:43:
14:8a:91:4c:1b:0c:f7:d2:45:9b:cc:25:3f:8c:39:
22:25:41:ca:08:57:1a:91:e2:b9:90:ff:b2:12:8d:
c9:18:79:67:ce:f4:3e:2b:d2:64:63:18:a0:d6:2a:
90:52:6b:c6:98:24:4e:a0:31:92:85:b4:d2:13:e6:
b8:36:95:01:06:5b:4b:1b:f9:81:ef:f7:59:03:59:
79:9e:02:9b:81:94:37:5d:32:3f:b4:1a:ff:40:25:
9b:86:5b:ed:1c:bc:18:83:e8:54:96:06:c3:18:ee:
bc:6e:01:6a:c4:1d:b3:41:b0:44:8a:6e:6d:f3:4c:
a9:10:a1:04:40:01:4b:08:b2:ff:05:5c:df:aa:7b:
d6:e4:29:98:3a:a5:b7:63:89:be:95:ad:46:3c:a5:
78:90:54:9e:7d:fd:0a:1c:9d:08:88:92:57:ca:be:
84:20:fe:df:8d:dc:e5:8f:21:f1:ef:92:28:71:92:
83:79:bf:8b:d6:86:53:77:50:3c:9b:33:2d:a6:1a:
e1:53:56:b0:a3:6f:d3:4e:34:01:5b:29:95:26:e6:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:31:AA:B4:93:1A:B1:36:37:D3:61:00:81:FD:AB:55:F0:1E:1B:C8
X509v3 Authority Key Identifier:
keyid:5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d7:01:1c:83:6f:4f:f9:aa:d1:d9:24:eb:ae:e6:28:8e:f3:
9e:c7:a9:2f:71:2d:59:dc:f8:ea:44:ab:79:49:a0:9b:e0:bc:
42:41:c4:74:4e:fd:36:30:22:ec:8d:2f:cd:cf:8f:ee:d5:65:
87:8e:ec:16:71:5f:98:0f:ca:8d:c5:b8:82:7e:aa:00:e2:62:
8e:49:3b:28:95:bd:6e:02:79:a0:77:58:d4:8d:9c:d6:ad:7a:
ef:97:09:1e:fa:d3:20:cf:55:88:87:e1:6e:b2:56:70:86:25:
6f:33:3d:bd:9a:3b:ad:e2:46:be:da:07:e2:cb:48:02:cd:82:
77:75:a1:33:ab:52:e1:43:91:90:2b:2a:1f:b3:fe:fe:9c:b5:
ff:59:31:af:ac:f0:10:56:40:bd:b2:8d:07:a2:f2:01:32:8a:
79:f5:db:78:6b:c8:f7:cb:11:8e:11:21:15:b2:45:da:4d:71:
c0:2d:4e:9a:b0:3c:59:0a:18:71:6e:28:50:b3:5f:ee:68:26:
24:ba:0a:a4:e7:70:51:76:c7:f9:3b:24:2b:4c:d4:c3:9d:1a:
f2:2f:d1:4b:21:db:2a:75:58:a6:49:b7:64:70:e9:35:0e:b3:
9d:ac:bd:09:82:94:3f:37:16:96:c1:e8:a8:24:54:16:40:a7:
cf:8e:8b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:02:59 2025 by rpki-client