Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
File: XICE2xnxE9gbZEg5P60cEyxYT80.mft (raw, json)
Hash identifier: 2/N4eBpA8g32McjNFlmjGt5nlc/YtwCCsZi+6Jmg9M4=
Subject key identifier: 55:F5:46:4B:24:7E:CD:72:D0:18:F8:29:84:30:3D:0C:ED:00:3D:03
Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd
Certificate serial: 0196372CF6F664F9A38F013D1803F654CCC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
Manifest number: 0DF1
Signing time: Tue 15 Apr 2025 02:00:15 +0000
Manifest this update: Tue 15 Apr 2025 02:00:15 +0000
Manifest next update: Wed 16 Apr 2025 02:00:15 +0000
Files and hashes: 1: RopsaNkgpHpRL2oKJRAlnWazjYk.roa (hash: hePdDKhYq7jZJBW0X9xyUlZ0MuRDMypI160xH9eb0s0=)
2: XICE2xnxE9gbZEg5P60cEyxYT80.crl (hash: APXb/yZ2SzDD9vwJX4tvdKfgiNOavN2OyEZqrcDcYSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:2c:f6:f6:64:f9:a3:8f:01:3d:18:03:f6:54:cc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd
Validity
Not Before: Apr 15 02:00:15 2025 GMT
Not After : Apr 16 02:00:15 2025 GMT
Subject: CN=55f5464b247ecd72d018f82984303d0ced003d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5b:fa:a4:b2:09:a0:d4:6c:ef:05:4c:68:03:
fe:69:ad:fa:ba:98:84:84:f4:a6:a3:bc:ff:72:ae:
27:84:5d:f7:4a:c7:fc:72:45:3a:7f:d5:f3:46:c9:
32:f2:eb:71:fa:52:3c:64:54:db:e6:4d:6a:51:67:
92:9e:a2:9c:7d:f1:08:9e:03:8d:ab:79:0e:83:3a:
7f:17:44:fd:af:b7:29:d5:36:43:a5:28:60:63:5b:
f8:29:d8:5b:14:fa:52:2b:3d:c6:a0:88:51:b4:bb:
78:a8:95:71:2a:b4:c4:ff:85:2f:e7:c2:e6:84:b3:
f9:b8:98:e3:9b:09:cb:9f:c2:17:ef:66:11:a8:2d:
ea:3b:86:a3:6b:93:8d:d5:d2:85:69:74:ee:b7:47:
0e:b3:66:11:95:40:34:7c:5a:1e:01:02:e7:2a:e9:
07:21:c1:db:3e:52:24:e4:66:da:36:de:7c:00:32:
01:0a:bb:a1:0b:f7:92:54:8d:94:80:9a:ad:c5:52:
9e:1b:1a:5a:93:4d:0c:bf:89:e0:ef:5e:2e:42:85:
79:ac:a4:b3:33:fb:fc:50:34:52:30:4f:81:b2:63:
a0:22:3d:50:c7:5e:ee:ff:5b:4b:6d:e9:7d:55:e7:
d5:a8:48:c6:0a:e3:51:2d:67:9c:c3:b3:72:14:be:
f1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F5:46:4B:24:7E:CD:72:D0:18:F8:29:84:30:3D:0C:ED:00:3D:03
X509v3 Authority Key Identifier:
keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4f:16:0c:f4:c3:ee:e0:18:02:5b:53:8b:62:95:df:f5:57:
6c:16:5c:bf:e3:39:d7:70:58:59:c5:07:e2:ec:6e:cd:b0:0d:
ce:7a:23:b9:1f:e4:4f:f6:ef:47:08:a3:2a:16:6a:37:a5:4e:
26:6e:7d:52:dc:d6:8b:2c:e8:1f:13:23:43:2f:51:7a:67:96:
65:32:33:4d:16:3e:ca:0c:6c:79:95:23:5c:13:74:95:ef:7e:
f1:b5:8e:85:a9:e4:b6:22:a2:28:0b:01:d1:74:60:f3:d0:7d:
86:2e:65:36:b0:fc:54:76:57:da:b2:4e:2b:1b:ed:bf:22:7d:
43:96:35:d6:af:d2:da:5e:0c:46:d1:87:bf:1f:d3:89:53:fa:
ed:31:ca:2b:40:53:c0:9a:69:32:1f:d0:8b:26:f8:92:f6:1a:
57:f3:d0:d0:72:f2:d6:cb:0d:31:b3:de:1d:ba:da:b9:3d:56:
b5:2d:db:57:2c:23:f7:d0:f9:59:da:ba:fe:c7:cc:36:d9:05:
1d:ba:fe:0f:31:a7:d0:61:84:6f:31:c6:0d:0b:fd:42:a9:a0:
16:0a:b1:66:9c:d1:16:9c:7e:df:4c:22:f4:61:7e:04:61:66:
84:92:04:b7:80:8d:12:ca:30:3c:07:f7:5e:83:79:45:eb:04:
38:b7:eb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 04:28:31 2025 by rpki-client