Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
File: XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft (raw, json)
Hash identifier: 5yMyQFfyjdUHMQ+EdI0r8L5VJ4SoWYfUrCQxQcHTTAc=
Subject key identifier: 71:09:FC:7B:EA:0E:65:AC:E2:BF:C2:1D:C4:7D:E3:CC:B8:53:0C:59
Authority key identifier: 5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
Certificate issuer: /CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Certificate serial: 019653B72F6C8646531FA42F8B8DD575CBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
Manifest number: 13C6
Signing time: Sun 20 Apr 2025 15:00:36 +0000
Manifest this update: Sun 20 Apr 2025 15:00:36 +0000
Manifest next update: Mon 21 Apr 2025 15:00:36 +0000
Files and hashes: 1: FMf3Dlx3xe3o0oQ5H7VvQF4482M.roa (hash: Ky+yUEaNAFCmWfk3pIxAZYoORhQc8JCWg+sBVNOj1UU=)
2: W6TXRuSHj7Av0ycVagFuBFyueug.roa (hash: zzCpwhscwcrboKFL/7dxhPDQ5vjcVhPtCOUJlM4/l38=)
3: XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl (hash: iomOezToguXQRWgVjTTfPRTC9/a/lwKh7ZfMBC3b/3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:2f:6c:86:46:53:1f:a4:2f:8b:8d:d5:75:cb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Validity
Not Before: Apr 20 15:00:36 2025 GMT
Not After : Apr 21 15:00:36 2025 GMT
Subject: CN=7109fc7bea0e65ace2bfc21dc47de3ccb8530c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ea:77:96:6c:a5:6c:3d:41:d0:ac:75:0e:5e:
db:20:ef:35:99:9a:1d:52:47:cc:ea:17:e0:dd:33:
bb:b9:80:38:6f:a7:19:08:58:ff:06:1b:16:39:f4:
1c:4a:6b:29:b3:48:c0:66:0d:3b:9d:5c:2c:0d:a3:
08:55:c7:33:53:94:6c:b2:40:c4:ae:59:63:f9:23:
b4:14:68:38:18:52:7e:bb:df:07:81:f9:12:e2:d7:
5d:67:4b:e2:5f:54:51:b0:b7:ef:7a:03:e4:16:bd:
e1:c7:5c:52:7e:ee:c4:9b:b6:cc:db:d3:31:49:a1:
49:b1:7c:ea:62:18:ce:85:e8:aa:81:99:b4:ca:58:
c1:1a:f4:0b:f2:59:73:5c:47:c9:8a:33:40:e8:fe:
0b:f3:20:8a:fa:3d:47:a3:f9:1a:1c:fd:4b:f9:b7:
c4:34:df:0d:d8:f6:54:39:e0:ad:fc:89:89:a3:ff:
e1:59:b4:db:31:71:6b:27:23:7d:22:dc:7e:d8:b7:
a2:8e:ad:1a:a7:a4:6b:b4:16:88:84:2f:27:b5:5e:
da:88:f1:e2:76:bf:30:78:2e:1b:5f:60:72:0d:cd:
e8:7d:e7:f0:45:f6:c9:d9:5a:8f:7d:96:b5:57:88:
93:c3:77:12:e6:e0:94:9e:37:e8:e2:23:17:19:0e:
dd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:09:FC:7B:EA:0E:65:AC:E2:BF:C2:1D:C4:7D:E3:CC:B8:53:0C:59
X509v3 Authority Key Identifier:
keyid:5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8a:0a:83:81:ec:30:da:bc:08:d8:43:7f:45:36:70:7f:f4:
56:de:f2:e0:ed:dc:21:f5:a2:32:44:3e:ab:54:95:35:7f:e1:
36:76:00:71:92:5f:5a:94:58:a2:0d:96:76:b1:b4:a5:e8:e9:
f3:81:9f:3b:8b:51:25:1d:97:11:b9:da:55:cd:4f:f0:de:65:
e5:e9:fe:55:e6:f9:c3:0c:53:dc:d9:da:37:e8:0a:2d:28:8a:
97:07:8b:44:72:c0:28:b6:46:d9:39:92:9f:9d:b9:bb:e4:7e:
b7:4a:23:b4:5f:a7:fe:4d:c2:1b:b6:92:95:2b:16:86:a5:e7:
db:6b:2a:09:b3:1a:38:7c:28:14:c8:d7:1d:ee:03:b6:bb:af:
35:b3:06:70:b8:77:1b:17:b8:be:10:af:93:34:a5:8e:70:50:
e6:93:85:71:0c:17:2e:d3:24:03:8b:92:3c:ed:97:78:65:2f:
dc:d8:41:bd:87:43:09:b2:f3:73:2a:ac:97:1d:1d:a5:54:e3:
d2:56:f9:a0:87:51:63:96:a4:2e:3d:2e:ac:de:62:46:7d:52:
f2:9d:79:d4:a8:ed:1c:5c:cd:77:1d:2d:12:fc:fc:87:68:9b:
c0:4a:20:7a:1e:bc:ed:c8:9f:76:d2:2f:8f:63:18:17:e2:e4:
e7:88:90:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:50 2025 by rpki-client