Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
File: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft (raw, json)
Hash identifier: nGlsdMfF10cujbpJpthb9Msc6wp+8Yr2kzoWhuS0Vxk=
Subject key identifier: 4B:48:6A:78:BE:8D:61:EE:78:92:DF:4E:50:34:58:54:62:EE:F5:E7
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Certificate issuer: /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial: 019652DB93B4156F13FB660A4FA5F3F67B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
Manifest number: 0FBA
Signing time: Sun 20 Apr 2025 11:00:43 +0000
Manifest this update: Sun 20 Apr 2025 11:00:43 +0000
Manifest next update: Mon 21 Apr 2025 11:00:43 +0000
Files and hashes: 1: 3Lwgv8G7H1M7aUpcEvNgmowlLx4.roa (hash: mpBdcgU7I+uQ5H1oVCfF7A1oXC3Ul6uCrit0pbGiORo=)
2: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl (hash: kPH6juzvCZI2raH6zrnk4JO2qQTrqVK3VDWaQhrvqpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:93:b4:15:6f:13:fb:66:0a:4f:a5:f3:f6:7b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Validity
Not Before: Apr 20 11:00:43 2025 GMT
Not After : Apr 21 11:00:43 2025 GMT
Subject: CN=4b486a78be8d61ee7892df4e5034585462eef5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:58:4c:05:02:82:b7:e6:fb:ae:ff:82:2b:
24:d6:43:a6:61:a8:62:3f:2d:5d:57:3d:07:be:51:
e8:34:25:80:56:63:39:b5:d9:5b:11:49:47:91:44:
52:85:0b:47:6c:e5:0d:ed:94:92:8f:16:59:68:01:
34:47:94:74:17:9a:96:a3:26:09:f5:8b:1c:5b:26:
05:43:ab:ac:65:78:b4:5c:b0:94:20:e8:19:82:a6:
ee:cf:1a:7f:56:9e:a1:0a:f2:00:29:93:23:9e:1b:
a7:e5:95:8f:a4:89:97:ee:73:45:cd:2f:f5:e2:49:
81:df:9d:b1:d4:d8:a5:8a:72:07:43:47:09:4b:12:
72:38:1a:88:36:8f:7d:6f:84:c8:ba:9d:12:eb:68:
ad:60:88:d4:57:72:b0:fb:bb:02:61:08:15:a3:b2:
7b:b0:3c:db:bf:bb:ef:e3:96:e5:34:fc:8e:5f:df:
99:16:0d:d3:79:a6:f2:87:90:78:61:dd:6a:92:11:
f9:d8:56:c6:a0:a4:81:91:56:54:8d:ba:11:48:df:
47:24:78:09:39:f1:e8:10:c3:00:46:c5:e9:39:1e:
12:65:2b:3c:af:e0:1a:b5:81:7c:ec:dc:fa:26:cd:
d7:e4:f4:21:94:94:b8:dd:e3:4b:16:fa:67:ab:06:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:48:6A:78:BE:8D:61:EE:78:92:DF:4E:50:34:58:54:62:EE:F5:E7
X509v3 Authority Key Identifier:
keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:a4:dc:c1:7f:91:3e:60:5b:4c:a3:c7:26:03:21:e8:b9:e0:
a6:a4:0d:99:d5:95:15:d1:b2:fd:a7:b1:c8:ea:2d:88:2c:0f:
a5:16:ac:2a:9c:fd:8e:b2:a5:c2:7b:f8:e7:6c:8b:0d:48:8e:
f5:0a:ee:00:ff:7c:7a:66:f1:3c:c4:0a:73:00:05:26:07:21:
93:1c:dc:85:16:91:32:fc:a8:4c:19:6d:1c:be:67:3b:16:1c:
50:16:47:f0:71:25:10:97:2f:a3:34:3b:f9:de:5b:70:cf:dd:
4c:24:2a:e3:08:ae:41:4a:30:59:c8:ac:93:ec:ad:81:af:b6:
fa:d2:41:0d:14:6d:9c:3b:f9:06:21:bb:b0:0f:cf:67:7a:dc:
de:34:6c:aa:cc:f0:7b:e7:cc:7f:a3:ef:db:05:14:76:3d:c1:
99:8d:50:46:90:f8:f4:f0:47:b2:44:6d:5a:ef:cf:f6:40:89:
51:63:a8:d3:46:a2:99:ce:a3:7d:99:c4:f2:c3:f5:30:e1:bc:
88:51:04:f9:95:e5:7f:69:06:5a:bc:b0:b3:41:92:f4:a3:23:
48:b1:57:f3:94:59:04:60:be:81:da:82:89:34:8e:d6:f2:83:
ab:70:7e:5d:97:81:80:08:60:60:b4:c5:b6:4f:7c:e2:47:27:
e1:5a:df:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:55 2025 by rpki-client