Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
File: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json)
Hash identifier: ZrE7ByBz1/4/rNFYkegh2fdbfzjQw6aaWqCQGlJy2lU=
Subject key identifier: B1:BD:15:6B:5D:00:40:6C:59:FE:02:52:36:36:96:4F:3A:DB:A9:0C
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Certificate issuer: /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial: 01965CF215D7FDA44E6656CE1E50FC954D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
Manifest number: 1495
Signing time: Tue 22 Apr 2025 10:01:31 +0000
Manifest this update: Tue 22 Apr 2025 10:01:31 +0000
Manifest next update: Wed 23 Apr 2025 10:01:31 +0000
Files and hashes: 1: kFAWzJxAiMhkm4NOvHOiD5PY66g.roa (hash: QJZEuzHLkJsVvRtJ8dcL8i0clH/1NRZmPUpPgEFazCw=)
2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: kYa9siQtK9x7VYTVFpklkFiXIZy3R6cwkaRIG6PNGuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f2:15:d7:fd:a4:4e:66:56:ce:1e:50:fc:95:4d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Validity
Not Before: Apr 22 10:01:31 2025 GMT
Not After : Apr 23 10:01:31 2025 GMT
Subject: CN=b1bd156b5d00406c59fe02523636964f3adba90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:10:e6:7a:99:35:66:83:c9:5b:75:c8:b7:
5a:fe:d0:25:b4:59:fa:19:0a:5b:16:13:b4:60:53:
8b:a3:12:6e:1e:d8:22:1e:ae:02:19:6a:1c:0b:4e:
f7:b0:10:25:3f:b8:6c:56:11:5d:40:0c:c2:f3:d6:
b2:49:5e:05:9f:0e:69:8d:fc:c2:c4:5d:86:26:8a:
df:3f:b8:a0:9e:5a:82:1f:42:5b:cd:65:65:b6:c7:
6c:14:ad:08:a5:90:bc:54:44:3c:42:66:1d:0e:8c:
1f:b8:9e:0d:f3:0e:e3:78:2b:97:31:2a:0b:2e:8d:
91:52:96:bc:80:25:a5:74:8f:e3:51:b9:74:bc:d4:
c9:d7:0d:c5:80:b2:74:a9:ba:32:cd:32:4d:8d:74:
88:99:cb:c9:bd:f5:db:13:7f:f6:12:d1:29:d5:0a:
11:ec:a2:1a:72:eb:de:3d:44:4f:c2:05:9f:9f:f5:
db:72:2b:89:d9:34:9f:6f:b7:59:9d:47:65:d9:c0:
a3:f6:bc:79:7b:9a:ae:a6:09:15:53:a5:a5:17:c1:
45:58:56:03:49:e8:dd:d3:d0:0d:3c:37:7d:0c:cb:
16:19:45:70:f4:67:50:4b:42:8f:e2:09:66:7f:f3:
22:f1:d3:22:d2:f5:dd:28:00:44:46:ae:81:a0:8c:
5d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BD:15:6B:5D:00:40:6C:59:FE:02:52:36:36:96:4F:3A:DB:A9:0C
X509v3 Authority Key Identifier:
keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3e:6b:9d:83:bc:d9:30:97:7a:05:e0:63:4a:60:3c:d3:fa:
d6:41:27:2c:16:3d:6c:45:98:47:aa:7d:67:b5:50:c6:e6:96:
75:58:53:fd:a7:cc:2b:fd:93:0b:f6:a5:1f:47:95:64:27:f4:
6f:db:40:54:bb:95:78:b9:23:79:0c:22:49:40:f8:5b:7a:28:
1d:30:80:80:a6:00:18:a3:0b:3b:d7:e1:96:ed:f1:0e:48:60:
62:b3:cc:04:fc:3f:fc:a3:e7:e9:c8:cb:f6:6c:40:6b:da:38:
d6:0d:8b:78:33:02:f6:cf:24:2e:fa:23:3e:fe:c3:f6:de:8e:
18:c4:91:a7:d1:61:16:97:6b:e3:db:33:fb:4c:2d:be:31:11:
a1:de:f5:c0:74:64:02:5c:d1:8c:1b:e1:fc:33:d7:1f:79:a1:
5f:5f:83:ac:b4:ed:8a:01:3b:fd:a5:44:05:45:27:d3:b4:4e:
29:45:59:b4:40:ea:ff:bc:e2:24:cd:e5:35:f5:71:db:6f:d5:
d9:43:be:dc:3d:ff:c7:74:55:14:60:a8:cf:38:2c:c3:80:55:
01:cf:e3:1b:7c:93:66:ae:c4:6a:3f:14:0b:bb:77:3b:ee:1b:
0c:80:bd:47:7d:58:74:65:89:0f:f8:e2:1d:60:10:ce:46:3a:
4a:4e:5c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:50:30 2025 by rpki-client