Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: SIacrOHu5VVHxLETBYRzSdkZrKBYFGDV9o8KMR8dERk=
Subject key identifier: 13:D0:0F:4E:B5:EE:B8:F6:4A:23:4B:6C:A0:66:27:78:E3:C5:F6:45
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 019674F97F5E84BEF30E13E0EF34A74B7497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 04CF
Signing time: Sun 27 Apr 2025 02:00:30 +0000
Manifest this update: Sun 27 Apr 2025 02:00:30 +0000
Manifest next update: Mon 28 Apr 2025 02:00:30 +0000
Files and hashes: 1: TbP72HU__x5-xpUX6PI_i9iyDaM.roa (hash: FLkmCrV+1GGkGMAjoDFB0RSF/lM4teoeIsYHwGZQivI=)
2: U5LzRtt7TqgwcmDyAykCjfC_tyg.roa (hash: MnSBkpXKCh2/fnPZQ+yyW+as55btZcpHuSExX+Fr9KQ=)
3: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: t3MHH0RokByxL1wx6i5LcsxfLIkteoKhWGc8E2IvRUY=)
4: XsQzypEDi3dbORi7Sjru6BV7874.roa (hash: kUYaLmJEoY+QPfzf/QKKUFqO5UN/o9EcoVpI3bOIxPI=)
5: ihdmZnPFfRQouiDEX9hoP7FnJXY.roa (hash: vMOPJDVg/5XoKEVMMHXuz77Sx41YI4RzrWjRsAiZbwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:7f:5e:84:be:f3:0e:13:e0:ef:34:a7:4b:74:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Apr 27 02:00:30 2025 GMT
Not After : Apr 28 02:00:30 2025 GMT
Subject: CN=13d00f4eb5eeb8f64a234b6ca0662778e3c5f645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:9d:68:a9:f0:8c:da:21:b9:e7:a0:17:d8:
95:94:5c:6e:01:05:b7:3b:73:94:11:b3:0f:99:69:
6c:ce:37:1c:c6:78:33:70:13:5e:5d:4b:d0:0c:a6:
eb:9e:a1:d0:14:df:5d:9c:cc:4e:65:b9:05:c8:1b:
1e:97:ea:25:5a:56:b7:d2:d2:92:71:db:ce:fa:38:
1c:d4:3d:d0:aa:7f:93:3d:16:74:bf:22:0d:a9:01:
c6:81:13:2f:8d:ed:8c:4d:4a:e7:06:8b:b6:bc:b3:
bb:c4:11:3d:c3:2d:4c:4e:da:fc:64:45:ff:87:94:
49:c0:aa:d9:ba:53:32:49:ed:13:ff:b9:4e:f4:09:
30:d4:65:31:c2:2b:58:70:7b:d9:82:7a:6b:e3:bb:
fd:82:e0:37:d5:90:bd:88:5e:67:ec:20:32:ca:d3:
8f:22:b3:eb:c5:05:16:54:7c:fd:d1:5b:58:8a:ff:
1b:c8:f1:c6:e7:e5:98:fc:53:89:88:6f:b9:0a:59:
a1:05:6b:c0:21:4b:24:b6:03:5c:07:f0:cb:5f:2e:
34:98:73:4a:77:cd:7d:20:a7:9b:bc:56:b4:2f:2e:
92:90:ff:21:e4:66:f5:db:f9:1b:76:c0:99:c1:ec:
d9:a0:65:e8:47:c6:8a:00:db:82:0d:f2:ff:5b:9c:
7a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D0:0F:4E:B5:EE:B8:F6:4A:23:4B:6C:A0:66:27:78:E3:C5:F6:45
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6e:5a:be:90:8c:eb:93:0a:c3:47:a0:31:9e:aa:ad:10:97:
a8:85:fd:08:c3:b3:a8:3b:24:b1:99:24:fa:e0:c7:38:46:a5:
e2:a8:8f:a4:bb:cb:5a:f0:40:f1:97:90:f9:e0:c3:55:da:59:
31:5c:ac:48:46:08:df:4e:51:d2:c4:32:43:c2:f1:29:21:5c:
e5:27:89:66:71:36:dc:fc:1a:db:a5:dd:4f:a8:69:f4:41:f6:
38:00:ac:36:07:e6:68:21:fd:db:ae:f1:ce:cf:fb:55:d8:33:
31:c0:58:ce:3b:ad:c9:85:8d:95:13:13:dd:95:45:65:c3:5f:
66:0e:10:2f:f8:20:e6:64:96:d5:51:27:bd:d8:29:3f:77:da:
4e:84:f6:c0:7e:b2:08:f5:36:bf:af:66:56:9c:2e:54:e8:d7:
f4:1a:ac:bf:19:5b:76:3b:2c:0f:a5:e3:65:62:99:22:c3:1f:
90:82:14:12:58:1c:db:15:d2:57:6c:cf:74:1c:09:84:c1:03:
ab:a9:0b:e4:0b:24:82:e8:1d:c6:26:74:f2:f5:03:65:01:9c:
a7:89:78:fd:bf:cd:8d:e1:9b:c2:98:1a:bb:86:a3:36:19:be:
91:23:ae:dc:25:25:94:3b:7c:36:43:18:35:40:9e:04:37:ef:
45:62:a4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:30 2025 by rpki-client