Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
File: XE_B5N78Rxyf23_a25iVVj2vmZw.mft (raw, json)
Hash identifier: wKdu9SnqQC0DTETFX27NNVs71Ed7VT+u5DxSMO7QLUQ=
Subject key identifier: 28:D4:81:40:98:E1:0F:86:B8:23:8F:15:41:93:BB:38:22:38:73:E0
Authority key identifier: 5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
Certificate issuer: /CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Certificate serial: 01965726AFEF3E32848FC365DCDF4652DF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
Manifest number: 111E
Signing time: Mon 21 Apr 2025 07:01:15 +0000
Manifest this update: Mon 21 Apr 2025 07:01:15 +0000
Manifest next update: Tue 22 Apr 2025 07:01:15 +0000
Files and hashes: 1: XE_B5N78Rxyf23_a25iVVj2vmZw.crl (hash: 4C+rXRFIVtiIQx8cjZs0dkqvHfkmrCWDn9Hrk+edALY=)
2: lvOtY--5ta_q9u7-uCq8vanMR-o.roa (hash: IsaauvQSGX/KNFnK0CxHU+He7cfzl6r9rUGogp/cJBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:af:ef:3e:32:84:8f:c3:65:dc:df:46:52:df:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Validity
Not Before: Apr 21 07:01:15 2025 GMT
Not After : Apr 22 07:01:15 2025 GMT
Subject: CN=28d4814098e10f86b8238f154193bb38223873e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:13:82:30:1c:d9:50:0e:5e:4a:24:4b:bc:16:
7e:c6:c6:e4:ee:37:36:06:a5:24:dd:10:aa:26:64:
0f:dc:29:5a:34:9c:18:87:d6:94:30:77:13:a5:a3:
c1:51:96:8a:d9:52:93:aa:31:a2:0f:54:a8:63:3a:
8b:e7:0e:06:45:fa:30:ae:b3:4d:91:e6:21:d2:a5:
0f:d0:a2:0a:fa:e3:a6:f7:15:60:9e:40:57:b6:e7:
76:4f:15:1b:20:5f:d4:5b:b0:7f:c1:a7:fb:91:e8:
86:e7:d5:b8:6d:d2:22:76:31:8e:a1:d5:ae:20:28:
40:8e:ed:80:aa:72:4e:53:2e:4e:0a:65:a2:2f:1a:
57:9b:57:1a:ca:0b:78:53:54:cf:dd:6f:7c:1c:54:
2b:76:61:ea:d2:c5:2f:30:35:4b:9c:12:53:28:db:
1f:62:44:ce:ff:9c:d3:47:80:22:a6:93:b2:b2:6b:
04:94:08:8c:58:36:0e:04:64:95:3f:f9:a9:3e:00:
3e:1b:46:bf:49:39:b5:2f:c7:c7:fe:0f:b3:24:18:
1c:b1:60:4d:04:0f:3c:e7:83:8c:89:0d:b1:60:71:
cb:bb:b5:b4:67:98:fb:9b:1d:35:6d:b1:66:b1:3e:
8e:87:aa:c3:50:9b:62:3f:b3:ce:00:69:7a:b9:b4:
93:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D4:81:40:98:E1:0F:86:B8:23:8F:15:41:93:BB:38:22:38:73:E0
X509v3 Authority Key Identifier:
keyid:5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:92:76:70:b9:fc:b6:aa:e0:06:57:65:c7:d4:58:8f:0a:a9:
1e:32:5e:ce:de:5e:65:f2:e7:34:b7:52:bf:ab:1c:9d:c9:2e:
28:e9:91:b5:e9:4c:49:c5:18:d0:b4:d2:b8:48:03:47:b6:7a:
80:16:4a:d6:8a:66:50:3e:60:8c:c4:bf:2c:d9:b7:fd:2f:d1:
a1:8a:46:68:32:70:55:f4:00:08:3e:2e:c4:4b:37:22:05:f2:
61:1a:ba:6f:2e:f8:86:c1:de:de:e7:56:74:96:ac:11:13:a6:
aa:81:26:9c:a8:03:88:ce:87:47:04:82:8e:2e:3d:75:a5:e9:
5c:6f:2f:2e:78:bd:80:84:3c:16:23:d5:9f:7e:55:5f:d4:b1:
a5:18:21:68:71:bf:c7:88:92:b5:fc:e3:a0:88:ec:48:ae:77:
0c:33:89:28:0d:a1:c6:12:81:7f:ff:e7:98:4a:4e:7e:7e:5f:
8d:40:a0:0e:cf:47:5a:04:12:7a:eb:9d:10:95:aa:55:f3:f0:
e6:64:89:a5:54:93:fa:98:cb:f3:1b:39:14:91:26:ca:ad:f8:
af:b2:fe:11:2d:23:19:a0:e1:e9:98:cd:fa:5d:6e:5f:87:a4:
ed:d1:17:d8:39:06:30:b7:0e:5f:14:74:ad:b3:d0:35:21:79:
f3:11:81:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:14 2025 by rpki-client