Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier: EswwY7/BT5X+jx7sMjq6Rj28V6Q2YjcoxAmH+ooxsPM=
Subject key identifier: 81:5F:F9:44:25:17:14:1D:A5:9E:FD:AE:92:F0:3F:46:5B:93:1C:87
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 0196409E543D8D13C31B0BFF00584932EEF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number: 1204
Signing time: Wed 16 Apr 2025 22:00:40 +0000
Manifest this update: Wed 16 Apr 2025 22:00:40 +0000
Manifest next update: Thu 17 Apr 2025 22:00:40 +0000
Files and hashes: 1: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: OZYXKW71v0qyh2puOdGl0uPC16TduUJmxvOKtzcNnvM=)
2: dwg63BIs70UrJw-Aax3sA8BXybY.roa (hash: 5QGHb3BFkyoA0+FZCtvQU8D70IR4N2YKdw4R2aOSeJQ=)
3: kpF9qPJxNFMnxwBLEMVnxkLPTlM.roa (hash: sP+YzMpu1yvXIExVMF+qz5VNW7hPHjzYBXRJgWww/jU=)
4: ooSUZeRWEgEQnBmOBZBl50kW0Ss.roa (hash: XaXFTIC5WACeTPiGq5647vf0R9FxLAGRvbwFyBodmmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:9e:54:3d:8d:13:c3:1b:0b:ff:00:58:49:32:ee:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Apr 16 22:00:40 2025 GMT
Not After : Apr 17 22:00:40 2025 GMT
Subject: CN=815ff9442517141da59efdae92f03f465b931c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:23:1e:a3:b8:67:91:f6:46:aa:30:d3:ab:
da:8a:f8:2d:63:95:13:1a:28:89:36:60:25:40:df:
02:3d:f3:c7:65:90:1e:1a:85:c7:67:18:22:ab:21:
82:32:68:4c:f8:ba:97:76:47:d6:d9:88:9f:b7:b3:
e8:19:57:ba:d9:70:1d:26:97:b9:54:bd:14:65:04:
23:23:1a:58:5e:d2:da:b7:d3:ff:01:bd:70:0f:97:
b6:26:68:51:11:29:e1:06:d1:51:8f:f6:1c:b6:9c:
da:ef:fd:16:56:c4:fc:f8:45:ae:84:d1:c5:fd:58:
a7:d1:40:16:ca:63:29:6f:16:86:95:f6:15:4d:62:
21:07:46:d9:23:4f:5c:0e:7a:9b:b8:0c:ae:55:d3:
a8:1d:36:40:8b:78:42:d3:27:64:bb:62:aa:e8:13:
c9:36:c6:21:b0:db:c0:02:4d:59:4d:32:51:11:7d:
b1:77:60:21:ba:b2:d1:b7:b4:fc:3b:99:50:f7:b9:
9e:fa:f0:37:97:16:a4:37:68:0f:56:42:b2:40:8f:
d7:74:22:c5:c9:b4:02:99:4e:6a:7d:93:f3:59:e1:
5f:0f:4c:01:ee:05:0c:11:7c:a0:40:6d:6a:e3:14:
98:65:6b:4b:3f:b0:e2:30:f9:d2:4a:0b:6d:66:94:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5F:F9:44:25:17:14:1D:A5:9E:FD:AE:92:F0:3F:46:5B:93:1C:87
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:06:ce:d9:22:e9:93:05:ba:d7:2b:5b:82:01:d3:ab:50:4c:
f6:ba:d3:db:8e:67:7d:7e:77:48:f5:48:62:fd:5f:93:37:51:
af:3e:85:d8:48:95:07:48:87:df:67:d5:e0:29:0e:ad:57:c3:
43:6e:66:c5:cf:7a:45:22:1f:d4:d3:7f:74:0e:aa:e7:a1:b2:
3c:3d:99:24:e7:08:d6:b4:ed:f1:41:cf:60:49:43:d8:a1:31:
7a:ea:b5:c3:3e:df:2c:67:0c:86:79:2f:c3:89:c8:7a:f8:4c:
d1:56:f3:0a:8e:21:fa:ea:a3:23:63:39:f1:c4:16:fc:fe:f8:
4c:20:d9:ef:e0:87:00:5e:ef:05:89:07:8b:ff:6e:9b:12:a9:
c3:60:ec:0d:31:a3:ef:d6:c3:ab:c1:16:59:b6:20:9e:85:1e:
11:ae:22:35:35:db:63:47:d7:74:37:98:b7:0d:74:c3:75:c4:
08:25:ce:31:86:12:27:c8:63:ef:59:f0:60:82:89:4d:47:44:
34:73:5d:22:c4:90:1b:59:25:01:6d:57:98:7d:53:fd:57:21:
43:10:5f:56:3f:22:8b:07:f0:3f:ae:eb:ea:90:12:76:2b:d3:
55:77:69:c4:b3:4f:16:db:ce:d1:70:00:f3:f5:a5:fc:db:44:
3f:62:f2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:07:09 2025 by rpki-client