Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
File: XLeTntcMiuoxvkk-eOiPSGH1MSE.mft (raw, json)
Hash identifier: brKU1LCYHLADq/04HQNgkceOzLuKhrcEqa/8IcVTFIc=
Subject key identifier: 7E:C8:3D:96:C9:F3:19:BE:11:04:9B:EF:CA:02:4E:95:A1:C3:DF:12
Authority key identifier: 5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
Certificate issuer: /CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Certificate serial: 0196447B6DFDEE9082AF1BB56D37110C896E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
Manifest number: 0BDA
Signing time: Thu 17 Apr 2025 16:01:01 +0000
Manifest this update: Thu 17 Apr 2025 16:01:01 +0000
Manifest next update: Fri 18 Apr 2025 16:01:01 +0000
Files and hashes: 1: MNNUG7s-7ylAPjfRFELlWbvHxbM.roa (hash: kXXZW/oTF8aLgFWhuw6Ll3MRGWDGpMBRJDUoq94IuRQ=)
2: XLeTntcMiuoxvkk-eOiPSGH1MSE.crl (hash: e6JbDu7IH9u7BkDF6b5pEGdUCiGZjVoVy3XsMHcqOSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:6d:fd:ee:90:82:af:1b:b5:6d:37:11:0c:89:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Validity
Not Before: Apr 17 16:01:01 2025 GMT
Not After : Apr 18 16:01:01 2025 GMT
Subject: CN=7ec83d96c9f319be11049befca024e95a1c3df12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d7:f0:ca:2f:e6:f6:9a:1a:e4:ca:6c:54:b6:
e4:c2:b4:e2:00:ef:a9:a5:8d:93:2c:78:c8:10:a5:
dc:c4:ae:80:87:3a:05:15:77:77:48:91:a2:54:7b:
b2:c1:a0:03:a7:e6:21:b0:4e:97:62:3f:d9:f6:02:
4d:dd:0d:48:1b:4c:4e:24:0c:3c:88:d8:2b:9f:62:
a0:a8:02:f3:e7:c1:0a:79:c5:29:3f:71:1a:34:1a:
6c:2a:37:fb:fb:69:f6:7a:c7:34:ce:27:4f:63:a2:
eb:9e:66:56:3d:91:65:ed:a5:79:62:47:0a:1a:ae:
37:27:49:6f:14:4c:27:71:cd:1f:0a:3a:96:bc:32:
9c:0b:71:17:8c:f7:75:e1:6e:cf:3c:26:d3:9c:9d:
48:40:07:27:ed:2e:d1:c3:bb:10:fa:ce:72:7b:37:
e7:f3:f2:04:e9:7f:ff:95:b1:b9:4f:f0:af:36:24:
ad:7b:3b:2a:5d:0c:dd:c6:e6:0f:ea:62:19:04:aa:
ea:d7:1f:2f:f4:04:42:12:ba:df:b6:c1:a7:43:c0:
4d:2a:91:72:de:f1:e1:db:53:24:16:de:78:16:d9:
88:82:71:d1:f4:fe:08:27:90:72:1a:3b:d5:18:0d:
a5:a5:8f:2e:92:e7:27:98:6d:01:d1:b0:6f:ae:83:
d0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C8:3D:96:C9:F3:19:BE:11:04:9B:EF:CA:02:4E:95:A1:C3:DF:12
X509v3 Authority Key Identifier:
keyid:5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:39:ad:9e:49:2f:7d:87:56:6d:b3:02:f6:f3:d6:1e:61:68:
08:6f:17:75:cc:bb:d0:dc:95:30:b0:e8:a8:c9:02:35:6e:68:
6a:85:ef:3f:1e:0f:a8:d5:7f:1e:1d:59:d0:86:67:02:61:66:
84:b4:e6:e8:18:0b:73:fc:c8:76:bf:01:82:ff:78:13:4b:b6:
c0:ec:84:7e:a1:b7:24:8a:f9:9e:46:cb:d9:f4:64:1f:ed:5e:
b3:97:0b:af:6c:6b:f4:bf:0f:ee:7b:da:c9:32:a2:16:b2:ec:
b8:fa:5e:da:7c:eb:46:bb:16:ca:b2:01:7a:58:36:e3:76:d6:
a9:4e:86:12:d5:b5:02:9f:64:15:d5:85:73:5e:5e:4f:cb:f7:
b2:b0:14:dd:40:ea:bc:fa:46:5f:0f:95:ef:bf:dd:11:6a:32:
14:6d:40:8f:b8:89:23:a1:61:fa:7d:05:42:3a:7b:52:5a:3b:
6d:0d:df:34:aa:e1:42:d4:65:e2:88:3d:3f:77:94:af:fc:cb:
64:cd:0a:57:6d:9b:83:92:b4:66:e2:5e:65:d9:ec:6a:e2:a8:
17:83:9a:5f:0b:c2:d5:91:e9:2a:b0:7c:db:7e:d3:8b:66:19:
43:37:b6:84:f8:1f:b0:3e:1a:0b:ef:f9:c7:bf:4a:48:b8:ef:
3d:6a:14:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:21:21 2025 by rpki-client