Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: 34bVW+TDPR4j5SgineABYdXG4ckCdR6yrcgFbrHLELc=
Subject key identifier: ED:71:5F:F0:22:24:E4:B1:B8:68:2C:EA:5E:0D:F9:C9:72:71:88:51
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 019653B6E4E70542ACF697D9113052F114A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 15:00:17 +0000
Manifest this update: Sun 20 Apr 2025 15:00:17 +0000
Manifest next update: Mon 21 Apr 2025 15:00:17 +0000
Files and hashes: 1: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: YjqhaJ9v70ht22//1OrQP7NdF1tT05Nx0ijXnibsTiM=)
2: wl9SNv70naNlxlbGYA9UwaRdUUM.roa (hash: cBLc9nicdCyrqpLVSvLzNsHxSpcCPqY4HcbtkzPI2zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:e4:e7:05:42:ac:f6:97:d9:11:30:52:f1:14:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Apr 20 15:00:17 2025 GMT
Not After : Apr 21 15:00:17 2025 GMT
Subject: CN=ed715ff02224e4b1b8682cea5e0df9c972718851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4f:54:4a:03:28:0f:4d:8c:10:db:ee:ab:53:
cb:22:c5:38:78:7a:ce:18:f4:00:75:71:52:f1:63:
ab:56:71:f6:c3:64:b7:76:1c:9a:d1:a9:d3:c7:10:
84:be:c1:a5:d7:cc:62:a7:63:28:ee:30:89:e3:63:
35:8c:55:6f:97:c7:e1:b7:a7:e3:cc:1b:c8:67:5a:
60:bf:2f:3e:dd:d8:ee:d4:2a:87:c2:82:0f:5d:8d:
59:4d:24:c4:35:33:98:ba:38:1a:33:24:83:16:e3:
5a:9e:29:c4:b3:22:57:33:17:b8:f9:1f:97:6c:0c:
6d:b0:f1:83:40:92:02:8d:9a:32:a2:c3:ec:e4:54:
da:ed:b6:15:19:d6:9c:13:e0:1b:f7:5b:fa:33:02:
15:50:1a:30:01:db:2f:8a:ef:15:81:49:7c:c6:8a:
45:c6:85:e1:d1:48:16:76:66:19:dc:2c:37:d5:ba:
e3:cc:57:a2:e7:89:66:d7:0f:6a:e7:f8:90:90:d3:
1f:72:92:f5:3f:5b:ae:9f:38:48:13:6c:0b:ec:86:
2d:b8:33:b2:25:d3:81:26:86:09:be:df:c9:15:45:
98:2e:f6:cc:26:75:b1:b4:37:07:f7:8e:f1:ae:eb:
ef:79:33:0a:b8:22:b7:86:28:3c:7f:3f:ce:0c:3c:
f5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:71:5F:F0:22:24:E4:B1:B8:68:2C:EA:5E:0D:F9:C9:72:71:88:51
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d4:16:e2:a7:15:f9:42:38:76:b5:15:44:36:b5:56:84:b9:
e3:7e:8c:35:30:0f:65:68:cb:9b:97:dc:a1:7a:96:96:60:cd:
64:55:5d:08:94:47:b0:82:71:78:0d:ef:6c:76:8b:56:e8:fc:
ec:34:d3:62:6e:cc:f5:25:e6:ce:c5:df:0b:86:1d:17:12:fc:
f4:f7:a1:0c:90:6f:97:34:9c:a7:0d:15:b7:74:7a:4f:76:d4:
f4:b3:93:f1:3e:f4:66:71:f7:de:c5:2a:28:70:d0:40:a4:e1:
a2:f1:d3:58:b2:25:c8:34:86:74:02:44:9f:46:21:26:16:6b:
ed:d8:19:75:52:98:dc:b1:34:8d:63:51:29:cd:d3:01:55:e9:
4e:88:af:57:2d:96:ab:aa:7b:68:d2:93:a0:a2:87:b5:4b:d0:
ce:b2:19:5c:56:74:96:14:25:18:67:55:f0:15:55:e1:48:8c:
79:98:68:9a:a8:2c:e0:d0:fd:c3:32:2e:63:a2:9f:dd:d8:53:
ff:0c:42:9d:45:06:26:ff:1d:d1:d2:51:88:fa:ba:6c:f0:36:
cd:5e:42:28:94:0f:c4:1a:59:ba:32:2f:77:cf:3e:ab:8e:aa:
bd:ff:12:6b:68:27:cb:4b:cd:b2:30:d0:19:de:e5:e4:ee:d9:
b3:ee:39:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:02 2025 by rpki-client