Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
File: XLOiFF-bTUZgWCrca3NUlp4InKk.mft (raw, json)
Hash identifier: K0ZPd+wB/PmbDCUFRVpi2ZTmQ3xgC04lKZFJuKfS+zQ=
Subject key identifier: 2D:A4:AC:AC:A4:02:CF:ED:47:BF:32:5A:13:D4:EB:2D:0F:9F:70:B6
Authority key identifier: 5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9
Certificate issuer: /CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9
Certificate serial: 019655DD3C51AB1CD0E7B3BA165BAD29C606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
Manifest number: 0CAE
Signing time: Mon 21 Apr 2025 01:01:24 +0000
Manifest this update: Mon 21 Apr 2025 01:01:24 +0000
Manifest next update: Tue 22 Apr 2025 01:01:24 +0000
Files and hashes: 1: 8rSm2TYmCggVgedhJYf2d5mO9bY.roa (hash: u5F6NWnwd9MOKoxteUtWCw1+tPwzMsMfG5qFtnCO6pk=)
2: XLOiFF-bTUZgWCrca3NUlp4InKk.crl (hash: 0P5f1BfOVyVVU67eKUTzzWvyEIQ/nd7Rh3BgCGnhs0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:3c:51:ab:1c:d0:e7:b3:ba:16:5b:ad:29:c6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9
Validity
Not Before: Apr 21 01:01:24 2025 GMT
Not After : Apr 22 01:01:24 2025 GMT
Subject: CN=2da4acaca402cfed47bf325a13d4eb2d0f9f70b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:14:f9:45:cf:c6:d0:8a:fd:e3:5c:c9:80:
ff:9a:10:a2:2c:64:b7:99:ed:0b:cb:72:04:59:10:
cf:b1:38:bf:e1:1d:97:3d:2b:19:e3:40:5e:60:07:
bb:17:c6:cf:5a:dd:46:b9:20:31:b0:d4:1a:26:80:
08:01:a4:a5:97:f1:e6:80:74:1e:db:c6:33:27:6e:
3d:6d:19:f7:d0:eb:13:98:f2:02:02:8f:2e:22:82:
1c:ce:cf:a3:d9:e0:32:0b:b6:83:b6:b8:ea:4c:75:
cf:65:38:4d:d5:30:15:4b:63:06:23:fc:e0:33:22:
bd:68:b3:cf:5f:c5:7e:4c:dc:b2:2b:84:96:27:e9:
f0:d4:28:86:89:f9:08:61:01:8d:93:fc:06:4c:8d:
27:ae:3f:91:86:6f:79:9d:2c:16:84:64:f2:7b:6e:
ad:f4:28:68:80:5d:7e:de:e3:cd:8c:b9:7c:01:6c:
d3:73:fc:42:60:4f:06:53:9f:63:ea:a0:5d:0f:43:
18:6d:a0:58:f1:09:93:d1:09:fd:06:b9:d9:b4:a5:
46:84:6b:30:56:bd:9b:c5:e9:b2:6f:83:29:61:c5:
bd:11:ab:0d:11:25:e3:06:d1:f6:19:6e:26:22:51:
ff:26:f3:78:90:6d:c4:ef:5b:d2:09:b4:b3:d0:da:
07:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A4:AC:AC:A4:02:CF:ED:47:BF:32:5A:13:D4:EB:2D:0F:9F:70:B6
X509v3 Authority Key Identifier:
keyid:5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:94:30:83:89:01:31:52:0b:51:52:03:c9:80:7a:41:01:0e:
ba:8b:2b:7c:6c:8c:2d:2f:b7:35:22:35:c0:7d:29:68:9f:a4:
3b:76:99:0d:67:b0:b8:c8:dc:a1:55:c1:10:9b:6e:ff:63:11:
ae:bb:6e:81:1e:9d:f1:22:98:29:9d:3f:2a:c8:00:bc:94:4a:
01:83:1e:f6:85:66:c7:f8:60:27:2e:5c:55:98:7a:58:74:5d:
1d:bb:4a:c3:9c:1a:94:22:cd:73:04:35:f0:88:ec:15:0d:4e:
85:02:88:1b:dd:f8:cc:8b:ad:8d:b2:9a:e1:55:29:ad:52:96:
e8:73:99:f3:bd:49:0e:c0:21:4f:7f:ae:e0:b8:11:76:a5:05:
84:5d:57:25:12:80:e9:a0:52:66:5d:de:05:05:41:b2:d2:59:
f9:65:50:e8:75:95:30:6e:d0:34:81:b9:c3:71:c3:49:a2:9b:
a8:71:8e:11:49:21:3c:67:a0:4f:ef:48:27:25:c9:a1:ac:1d:
a0:34:df:84:a3:30:b8:30:39:a4:7f:ff:47:08:72:0d:8d:32:
82:14:cc:00:87:83:de:df:8a:9b:17:32:e8:15:49:80:3e:b5:
04:12:75:86:d2:72:61:52:a2:58:7c:a7:bb:8b:d1:7e:89:d6:
da:80:eb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:13 2025 by rpki-client