Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
File: xb14VKoFD9blUPx80CtVhzC_u3o.mft (raw, json)
Hash identifier: PTweXdkJJtb71coC69BFsNpuU3ntf1rSwwFelbaalJk=
Subject key identifier: 0E:98:29:9C:3C:29:5D:0A:EE:43:D8:6C:96:5C:59:F8:6B:C4:52:26
Authority key identifier: C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
Certificate issuer: /CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Certificate serial: 019746671ABB2BFA54D5981922C7537D4C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
Manifest number: 04C9
Signing time: Fri 06 Jun 2025 18:00:51 +0000
Manifest this update: Fri 06 Jun 2025 18:00:51 +0000
Manifest next update: Sat 07 Jun 2025 18:00:51 +0000
Files and hashes: 1: 5uFqMN3aXlbPQyR_zV-aShdoN_Y.roa (hash: jy9SGKilmmhulS0SQ8USL/F90L5q42BS/yYoLYQj470=)
2: xb14VKoFD9blUPx80CtVhzC_u3o.crl (hash: NFgMgd0jjh7ACLNSLTqDaqNB8iqhabTCloC7s87L1uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:1a:bb:2b:fa:54:d5:98:19:22:c7:53:7d:4c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Validity
Not Before: Jun 6 18:00:51 2025 GMT
Not After : Jun 7 18:00:51 2025 GMT
Subject: CN=0e98299c3c295d0aee43d86c965c59f86bc45226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:00:83:a7:cc:c5:66:9a:69:65:10:ba:e5:24:
99:9a:40:ed:03:f5:2b:fd:26:dc:06:09:56:be:17:
fd:56:c2:4c:56:ff:44:2a:e5:3c:30:e9:30:cd:0c:
b3:b4:b6:57:ee:08:91:99:8c:b5:f8:7b:e2:f9:aa:
72:65:9d:9b:0d:98:20:19:30:da:4c:30:40:f5:76:
b5:ec:b9:17:f1:05:98:15:23:a8:f1:c5:63:d1:cb:
e3:d8:2b:8b:52:2b:44:9d:63:16:fd:ff:23:79:40:
59:33:2d:75:e2:42:28:19:d4:f3:a0:32:54:f1:7e:
d3:ed:38:49:a7:60:94:b6:e0:e4:65:a1:0d:9d:95:
f4:72:8a:39:8b:70:60:97:0c:0d:5b:4f:b4:4b:9f:
80:a0:39:e3:46:14:80:a3:e1:a5:09:16:4a:20:b2:
b1:91:34:15:13:0f:da:4a:78:2c:d0:26:a3:ac:aa:
b8:af:e6:eb:a0:33:07:13:8a:57:76:4f:61:3e:1b:
2b:4f:90:a3:05:fa:45:62:70:9c:cd:aa:cc:44:6b:
48:59:f3:8e:dc:ec:62:96:6a:c4:be:e4:b7:14:3d:
90:50:03:00:63:5b:d0:f8:07:0f:07:75:77:d5:32:
2e:c5:d8:be:11:de:6d:08:05:7e:d2:82:01:ad:e3:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:98:29:9C:3C:29:5D:0A:EE:43:D8:6C:96:5C:59:F8:6B:C4:52:26
X509v3 Authority Key Identifier:
keyid:C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:17:9a:8a:c3:6f:79:0a:f0:02:0a:aa:91:85:19:1e:36:d0:
84:95:78:ea:d5:fb:b8:d2:43:a5:fe:82:82:c6:3c:75:fa:54:
03:95:e4:fc:e5:ec:da:bb:04:2e:53:27:7a:2e:83:fb:3e:d4:
58:b4:8d:81:28:96:97:59:ec:e1:05:af:50:b8:e3:7d:cf:f2:
3d:44:4c:21:1b:ee:48:24:8a:aa:f4:b7:63:5f:62:ec:15:2e:
99:ae:71:a1:c8:95:ad:31:94:32:71:6c:05:75:ca:0d:85:80:
c4:ea:4c:e4:bd:c7:17:2f:eb:cb:51:65:1d:57:11:b6:53:a1:
91:e9:ed:05:ed:96:5d:4d:ae:90:ea:44:35:38:a3:c7:eb:60:
69:bd:5e:fa:2b:86:1c:ac:d5:fc:28:e0:36:77:3c:0b:91:a1:
4e:7c:ba:3d:f3:03:41:f8:da:81:31:c9:28:90:af:4a:ae:93:
c5:10:9f:4a:e1:03:e3:c2:94:87:6a:d3:eb:f5:6b:fc:d4:e0:
1d:aa:b3:ae:08:69:e9:43:1e:7f:d8:b6:8f:5c:52:5e:cb:d8:
ff:49:d0:6a:fe:f1:5d:55:ed:f8:6e:5b:be:ad:5b:7b:1e:2b:
fe:a8:4c:d6:52:6e:ea:48:0a:18:ab:07:24:fd:2b:a6:5a:29:
52:dd:e3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:55 2025 by rpki-client