Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: z1kB6a74AwE18oPkXnWA7aIlTQJLHgPIdGe5pSl6olQ=
Subject key identifier: AE:7A:37:BB:7C:ED:6F:03:83:C2:72:87:3D:76:15:45:9C:4F:1A:39
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 01962ABC1C2FBE1B4BE0C310057575F79286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 14E6
Signing time: Sat 12 Apr 2025 16:01:33 +0000
Manifest this update: Sat 12 Apr 2025 16:01:33 +0000
Manifest next update: Sun 13 Apr 2025 16:01:33 +0000
Files and hashes: 1: OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa (hash: zWY5clqa55gDcmN1fPxGPLkXmjUJa6OG2BTGiJ7PAMw=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: ieEcXm81kCLa9gqbhkVlZrOsyQYyEYTv0Qp9/Ose/NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:1c:2f:be:1b:4b:e0:c3:10:05:75:75:f7:92:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Apr 12 16:01:33 2025 GMT
Not After : Apr 13 16:01:33 2025 GMT
Subject: CN=ae7a37bb7ced6f0383c272873d7615459c4f1a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:e4:d6:8f:b8:39:e7:50:28:6e:9c:b4:70:
da:db:08:16:e6:53:e1:61:49:61:af:6b:aa:38:7c:
27:8e:63:bb:3a:53:55:21:56:3c:c1:dc:a1:91:99:
e4:29:03:4e:fa:18:9a:4c:f7:e2:7c:e8:f6:41:0c:
ce:ec:45:c1:6d:34:9d:cd:bb:3a:c8:c2:5c:19:01:
fa:7b:f5:be:71:d0:2e:e2:3f:90:36:8b:68:07:05:
3f:35:97:ee:26:75:ec:ee:6e:cb:4c:f6:9d:39:87:
84:21:e0:81:f8:28:1f:42:2d:e1:f4:01:f0:f5:ec:
09:75:a9:74:56:06:05:c2:26:f5:7d:b4:b1:ce:4e:
d7:0e:71:53:75:72:9f:9f:f2:af:7f:f2:8e:9f:b1:
0b:e2:e6:21:f8:d4:fa:0d:db:c8:cc:d5:cb:e1:f8:
42:55:cd:21:1e:05:e5:0d:e7:9c:7e:e9:dc:47:e4:
ee:89:53:a3:fb:fb:29:c8:75:dd:a4:3e:9b:5c:71:
0c:cf:63:c3:74:6c:d8:3a:f3:83:88:a8:86:ab:2d:
c8:a4:65:ee:cc:7f:ce:fb:55:f5:60:d7:0e:99:1e:
b8:7c:d9:d8:5f:63:66:39:83:b7:73:ee:28:f3:67:
7a:0b:ce:4e:2b:5b:e1:de:36:de:db:de:c7:87:ab:
d9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7A:37:BB:7C:ED:6F:03:83:C2:72:87:3D:76:15:45:9C:4F:1A:39
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:45:ce:9e:24:14:60:a1:f3:56:24:99:d3:87:51:72:1f:d5:
75:1b:fd:b4:1f:16:4e:08:2c:e5:74:07:96:03:2d:bd:de:05:
2d:54:4c:17:d8:4a:05:3d:28:dc:0b:49:c2:1d:ca:6c:33:53:
60:8d:4c:5d:dd:f5:ca:ab:4d:30:58:49:59:23:cf:07:93:d1:
6c:1a:ea:a4:88:08:8c:50:42:02:fd:5f:6d:04:54:9a:94:33:
91:8d:5e:0c:4c:f0:10:88:ef:2f:47:77:30:63:3f:e4:45:a7:
66:79:6b:8c:45:ed:59:55:e0:ce:f7:5f:54:b4:a4:5a:04:56:
51:64:ee:62:0c:ac:b3:5e:bb:8b:09:aa:23:c3:d4:a8:58:cf:
ed:c5:88:b5:72:8d:74:6c:30:4a:fb:f1:de:4e:7b:4e:10:40:
83:0f:90:cf:fe:02:d2:66:58:c1:8c:9f:d5:f6:a5:f8:41:b9:
fa:d6:c9:f6:2d:e6:e8:13:fe:96:29:e3:63:84:6b:44:e8:7c:
e1:ba:ba:10:de:2a:3a:e7:89:25:b8:31:08:50:b6:d2:7b:7a:
f3:74:d2:a9:28:f9:90:e6:8d:ca:ac:a8:2e:1b:d6:de:c3:bd:
58:d0:6e:bc:5f:11:56:f6:b3:9d:37:11:f4:66:e2:37:25:b2:
4a:88:96:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:14:48 2025 by rpki-client