Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
File: XZno1XE6XmOCwNE4nWJCgW-db7k.mft (raw, json)
Hash identifier: ZEIT5yk2ZVE/RkdAzYFhQbEho7hgZp6gL1dCdtGycIg=
Subject key identifier: AC:EF:3C:8C:03:61:D8:57:FD:5E:64:50:C3:15:23:DE:5A:1B:84:33
Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
Certificate issuer: /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Certificate serial: 019685119AEEC1950DE702877CDEB8150510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 05:00:45 +0000
Manifest this update: Wed 30 Apr 2025 05:00:45 +0000
Manifest next update: Thu 01 May 2025 05:00:45 +0000
Files and hashes: 1: 1-NGjnQxo4c6IDfqjk5paae-wSfM.roa (hash: 4pr97OcGZEpEysIvYdOK32obqFh3ATs7kdH95HWDctQ=)
2: UUanwV5xGuK3SINsq8WiMNy7Rsw.roa (hash: JbzAaEUNAUROpdNsWj7B0ylMXqQOejnEiOY//pgAVzs=)
3: XZno1XE6XmOCwNE4nWJCgW-db7k.crl (hash: 6MRmrjEiH+XSxA4hv7AOCRAymF4L0gYHDVw+Num34pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:9a:ee:c1:95:0d:e7:02:87:7c:de:b8:15:05:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Validity
Not Before: Apr 30 05:00:45 2025 GMT
Not After : May 1 05:00:45 2025 GMT
Subject: CN=acef3c8c0361d857fd5e6450c31523de5a1b8433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:fe:94:7b:52:36:5f:75:32:c9:5d:72:26:
0c:f4:fe:32:80:a5:44:8c:cd:81:7c:17:eb:1b:82:
12:f5:a4:2b:73:c0:41:fb:a2:75:f7:b3:cd:be:3d:
cd:5d:5c:59:2c:a2:66:f8:75:5b:eb:80:77:4f:4f:
04:97:ef:01:a7:1a:89:c4:ef:37:f5:81:97:7a:1e:
82:3a:a1:3c:d8:9c:84:b1:f1:db:00:6f:19:7b:42:
2f:c1:6e:85:f3:fb:d2:9f:c5:f5:ab:89:3c:32:cf:
c0:41:6c:3e:33:52:2e:73:40:d1:4e:16:92:d2:21:
b3:36:05:7a:85:33:f2:dc:34:d4:27:e7:af:a5:0f:
6e:eb:dc:01:75:c0:0a:e4:37:85:3b:60:5a:9a:94:
21:9c:e9:4c:7a:9f:09:36:a6:55:e0:fa:07:7a:25:
f5:7c:00:73:05:18:a7:6f:83:dd:53:d5:6d:31:43:
b8:38:43:93:77:41:b4:a0:a9:d5:54:99:71:d1:65:
6d:62:6b:36:23:a2:83:0e:bb:4c:17:0f:70:c4:59:
60:49:08:cf:42:2e:d2:ac:11:4d:ed:7b:d6:42:c2:
92:e9:cf:b5:67:3c:63:b3:40:b7:fa:7c:cc:1f:70:
c8:45:2b:70:ff:cf:57:1d:03:91:1f:44:6a:05:04:
de:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EF:3C:8C:03:61:D8:57:FD:5E:64:50:C3:15:23:DE:5A:1B:84:33
X509v3 Authority Key Identifier:
keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f4:ae:6c:89:6f:29:81:90:62:2b:de:8c:7a:c7:51:30:82:
15:39:47:14:8a:5f:32:d5:9e:69:75:d5:b1:3c:d3:b2:84:48:
a7:32:3a:03:45:f6:21:4e:13:32:3d:e7:69:3d:9a:f5:78:80:
9f:d6:43:ce:4e:d9:2a:74:95:99:b5:98:29:3c:b8:83:76:e5:
63:c3:0d:f3:cf:fd:9d:fc:e9:e3:a3:cf:b3:cd:d7:ff:aa:f1:
26:09:68:3c:90:25:03:35:32:17:7f:8f:f2:dd:38:18:ba:ba:
de:62:2b:c2:70:17:cf:69:b3:02:dc:45:48:e0:7a:39:d4:3b:
b9:ad:3f:96:c4:fa:f1:32:5e:b6:93:71:c7:a2:a3:03:33:05:
48:f3:78:41:5e:23:40:bf:87:60:8a:7d:ed:20:3e:95:56:4d:
49:af:d1:d0:9f:5b:d8:1b:00:6e:9f:8d:27:1f:84:4f:e1:67:
39:ae:60:40:21:35:1a:6d:b6:76:bc:01:54:94:f4:e6:b9:96:
1d:74:93:97:e1:eb:55:76:df:dc:10:9b:7e:8b:76:c6:59:65:
fb:c7:fb:7a:28:c0:e8:88:95:0c:03:35:b9:2f:6e:10:94:ce:
8f:84:70:cf:34:22:fd:85:16:fb:31:d3:65:39:fe:8a:7f:8f:
36:3b:b8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:30:56 2025 by rpki-client