Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: 3JDmUdvk+OS16kF9AewRf1PrS167NjOyrqB5wRSljuU=
Subject key identifier: E9:3D:FE:A3:5B:65:F4:19:FA:BF:30:E6:11:58:3B:D6:0E:92:AA:C1
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 01964858094AEEED651762A1D390BEBB6686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 02F2
Signing time: Fri 18 Apr 2025 10:00:51 +0000
Manifest this update: Fri 18 Apr 2025 10:00:51 +0000
Manifest next update: Sat 19 Apr 2025 10:00:51 +0000
Files and hashes: 1: dzKdTpxKq_7se5lgqFGO0igJYGY.roa (hash: u39TgSEQ2jGGZn4qmwG4cCJAONJvQaBYbbp+0NBr6L0=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: 06pFFp3XX2UqJiCkHsJBaV1YFM9VZgU2mubfbI3PfP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:58:09:4a:ee:ed:65:17:62:a1:d3:90:be:bb:66:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Apr 18 10:00:51 2025 GMT
Not After : Apr 19 10:00:51 2025 GMT
Subject: CN=e93dfea35b65f419fabf30e611583bd60e92aac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c6:b6:5b:02:cc:89:98:47:94:6d:7f:c4:58:
39:0e:23:2e:b0:6b:f4:16:d6:57:ac:ef:ae:3b:e0:
4a:42:b3:b4:70:62:83:a6:22:9d:c9:fd:27:fa:28:
99:90:39:62:52:7f:a9:9e:d0:be:9f:91:34:83:55:
88:ea:c8:95:6a:de:47:b2:2c:a3:9d:8d:be:d2:8c:
fc:b5:8c:89:82:58:f6:ae:b0:6e:f5:fb:cd:dc:0d:
88:55:06:65:eb:c7:fc:4b:3e:b2:e3:a6:d7:41:dd:
10:94:96:b1:14:4d:e3:ac:f0:80:e2:20:69:0b:b5:
34:a2:8b:22:8a:41:b2:f7:bb:ae:97:55:ef:8c:09:
0e:c8:65:be:04:ba:5a:2a:ba:ed:02:34:96:93:25:
ee:e0:ce:ee:a1:1b:09:bf:a7:fc:d4:32:d8:68:aa:
43:e4:a5:ed:e2:bc:46:d5:08:86:11:8b:ad:31:d4:
c1:14:0e:4b:4a:0a:c7:98:a5:3b:25:1f:50:c6:dc:
54:88:1a:d3:93:ed:66:17:18:19:30:58:f9:7b:d2:
02:25:83:80:bb:41:41:17:58:84:66:8b:f6:c0:12:
40:04:cb:23:9f:9a:5c:a0:8a:c2:6a:b8:eb:6c:b8:
c3:8e:ec:2a:32:c4:f5:bb:c3:d8:0c:7d:31:d1:3a:
f9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3D:FE:A3:5B:65:F4:19:FA:BF:30:E6:11:58:3B:D6:0E:92:AA:C1
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a4:3e:10:62:c1:51:75:27:e6:1e:24:b8:e5:af:9d:d1:01:
20:2a:fb:f8:2e:c4:ef:f1:5e:00:6f:55:88:8f:43:8a:46:da:
21:14:e5:42:27:a2:e8:d7:6d:c6:3b:78:a0:f2:8e:cf:e1:73:
4c:27:d4:65:5f:22:5d:77:c9:b7:2c:b7:c3:52:a3:8f:c0:36:
5a:b2:45:a6:8f:97:c0:37:bc:4f:3a:ae:c7:96:09:53:77:80:
27:46:93:b7:21:c2:f5:af:8e:fa:a5:4d:1c:22:84:2f:70:00:
3e:d8:b2:75:72:0f:8a:29:71:2c:14:0a:57:df:10:8a:42:0c:
e7:be:02:2f:84:1d:7a:c4:bc:1f:39:ef:d5:3c:6b:d2:e6:5a:
44:c2:20:bb:bf:78:42:20:8f:e9:fe:7c:3e:d5:24:9d:ec:eb:
1f:44:a6:fd:10:d3:b5:74:2d:fb:88:66:a8:c4:a6:bf:11:4e:
6e:2f:b3:ba:02:72:67:be:95:ae:22:88:a8:40:b7:01:b2:38:
9e:0d:91:0f:94:f5:48:c1:d4:2c:f9:ad:35:04:b4:9f:5e:e5:
0f:9e:b4:ac:75:dc:d0:3d:8a:96:1c:9e:25:15:23:2f:08:5a:
e2:2f:c3:78:6a:75:fb:86:c2:36:de:60:30:0d:9a:f4:a6:bc:
ef:3f:ec:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:05:09 2025 by rpki-client