Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
File: xpWUB18xxROhM36RdZKQA35me_k.mft (raw, json)
Hash identifier: s6T4VYJXr8nK8OZYbsdoq1wRQ5YOoMVbAJ5Tf2Fl5EY=
Subject key identifier: 5F:06:7F:63:DB:8A:9D:6E:36:62:EC:79:E9:2D:53:6E:51:D5:4E:DA
Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9
Certificate serial: 01963B409FB6C0D17DED4DF1138E689D8F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
Manifest number: 0156
Signing time: Tue 15 Apr 2025 21:00:12 +0000
Manifest this update: Tue 15 Apr 2025 21:00:12 +0000
Manifest next update: Wed 16 Apr 2025 21:00:12 +0000
Files and hashes: 1: INmTHMZsE_SqbdFkgIPWEnnNnuA.roa (hash: gXbWH54C+drRJZnXbEzI0DFd2J+yU0HljjT/VTaNTPc=)
2: xpWUB18xxROhM36RdZKQA35me_k.crl (hash: Zqts0qWeUnhfrNFhKIi29jnlwwCseD7ggR0DQ0LU57U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:40:9f:b6:c0:d1:7d:ed:4d:f1:13:8e:68:9d:8f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69594075f31c513a1337e91759290037e667bf9
Validity
Not Before: Apr 15 21:00:12 2025 GMT
Not After : Apr 16 21:00:12 2025 GMT
Subject: CN=5f067f63db8a9d6e3662ec79e92d536e51d54eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:28:7d:d6:26:e4:e5:c9:c8:1f:8f:40:1b:
7b:fe:da:4a:24:4e:51:f3:ab:a2:be:5b:41:b2:79:
d8:47:5d:e3:aa:38:c0:6f:03:a4:70:f4:19:62:6f:
ea:44:cb:74:6f:64:c7:3b:b5:e1:3b:8e:79:ff:86:
d2:2b:17:7e:36:70:f3:52:90:26:52:df:ca:c8:0b:
a0:f3:6d:bf:ef:42:b6:5b:b2:db:db:98:ca:6b:0d:
13:10:9e:8d:40:b7:09:ea:5b:17:59:d8:92:fa:e8:
04:d0:7c:43:7a:88:51:4b:3c:64:60:70:2f:c1:b1:
cd:5b:39:3b:5c:c0:6d:7f:63:9d:4f:90:90:d6:a4:
e8:98:65:bc:88:94:ff:89:ce:4e:f0:fa:07:59:a7:
12:88:b7:0f:78:b9:32:63:5d:ae:f5:da:78:84:ba:
1d:5c:90:3f:5c:2b:57:15:ea:31:b3:74:01:de:ee:
03:5f:43:5f:7a:3e:96:9f:8f:c4:f3:51:fa:db:4f:
73:14:3e:30:2f:6a:be:01:16:61:29:33:83:ea:b2:
42:76:6e:92:26:8b:65:44:72:4f:79:4b:8c:6a:36:
28:aa:74:b8:31:c1:c0:35:4e:28:7d:2f:cd:b4:7b:
34:06:cd:46:52:76:82:80:b4:b3:60:54:e0:b8:ff:
e0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:06:7F:63:DB:8A:9D:6E:36:62:EC:79:E9:2D:53:6E:51:D5:4E:DA
X509v3 Authority Key Identifier:
keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:2d:13:a9:3a:70:4f:78:6a:fa:c8:a3:91:fe:ba:fd:34:76:
a0:cc:e6:b9:cd:c6:81:83:06:2f:26:92:1d:d3:34:72:e9:10:
93:e6:83:86:72:47:cc:70:f7:cf:d8:e2:45:8b:2a:38:df:ed:
12:2e:a6:3f:1e:71:ac:6b:aa:aa:6e:be:c4:01:56:f5:0d:63:
bb:db:63:8d:44:56:01:a0:36:b0:11:fd:17:36:34:0e:27:2e:
b6:4e:e0:5c:eb:4e:33:a3:97:13:07:89:f8:f0:5c:8a:d1:4d:
f2:b3:20:0d:ff:85:8a:2b:fe:92:6e:0c:15:04:5d:34:0b:8f:
2e:2b:0a:66:e8:1e:95:56:55:a5:63:42:87:98:25:fa:19:84:
b5:d0:67:5e:40:82:f8:0d:cc:db:29:69:ba:f1:a9:7a:d7:b8:
8b:7e:14:c1:7a:c2:54:ca:2e:83:b4:48:e3:36:77:ce:18:fc:
89:0f:f4:18:e6:54:65:b7:47:d5:7f:1c:18:f3:3b:43:1d:b1:
5f:cc:d1:f8:ec:f5:af:30:36:9e:10:16:a3:09:59:63:d4:aa:
a7:67:8e:22:24:c2:b4:f0:18:b4:90:fe:21:5d:d0:8f:98:13:
74:e7:d4:01:5f:36:88:38:dc:76:1f:ae:0b:62:2c:bf:cd:d5:
e6:93:84:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:59:00 2025 by rpki-client