Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
File: xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft (raw, json)
Hash identifier: E5zSs595Q7W/wtNn4ymWOQyjGI0s1KAauB7+uYg+E0I=
Subject key identifier: EB:27:89:1F:27:00:23:0F:51:F9:BF:26:09:E2:AE:E3:A6:26:F5:BD
Authority key identifier: C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
Certificate issuer: /CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
Certificate serial: 0196564A0DFF0CFDEFA6C386DFCCCADD9E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
Manifest number: 05D3
Signing time: Mon 21 Apr 2025 03:00:15 +0000
Manifest this update: Mon 21 Apr 2025 03:00:15 +0000
Manifest next update: Tue 22 Apr 2025 03:00:15 +0000
Files and hashes: 1: Ej1aJMtEaUsf31r33a8meVTKaMM.roa (hash: Gz1wbyymYY+RBy8aeMOwOe+QM7WHCcn8raUIMs60hhM=)
2: xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl (hash: XX9jxoGbRlXJtCjMH5MBq+sqN0awmuhEp5cfjv/Rqf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:0d:ff:0c:fd:ef:a6:c3:86:df:cc:ca:dd:9e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
Validity
Not Before: Apr 21 03:00:15 2025 GMT
Not After : Apr 22 03:00:15 2025 GMT
Subject: CN=eb27891f2700230f51f9bf2609e2aee3a626f5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:27:72:06:41:7d:86:53:ba:d3:39:42:dd:24:
f6:6a:6a:30:8f:fe:f1:d7:e3:7c:a3:8f:22:84:13:
a2:66:b1:29:d5:96:4b:34:46:66:e5:42:05:ac:8a:
2e:6f:11:41:20:28:f1:6c:f8:4a:ec:71:2d:31:25:
71:ae:f9:dc:df:4f:9a:35:14:ea:86:dd:d5:09:ba:
e9:4c:50:9d:09:f7:aa:bb:a2:4e:dc:e2:f1:29:ee:
4e:ee:98:22:4a:cf:3d:59:68:c4:18:49:ea:7d:b7:
c4:03:3a:e5:7a:5e:de:52:6b:b9:61:2b:55:2b:05:
9a:45:d3:d3:40:3a:1c:c9:28:c2:b6:7c:4d:92:6e:
29:d3:53:0a:fa:57:2e:c5:d2:d7:71:54:ce:3e:ea:
32:96:81:b9:94:2f:34:b7:5c:c1:87:c5:eb:8b:8d:
eb:73:f7:9a:e8:30:08:7d:8d:2e:f0:d2:63:85:5c:
22:40:26:39:ef:4d:4f:58:3d:80:39:8b:89:db:0b:
fb:bb:d3:f3:ec:e8:a2:ee:62:dd:74:90:a1:aa:af:
fc:78:a7:05:78:16:b6:86:c9:a0:32:58:51:d0:da:
9e:a0:b2:d5:97:7e:3c:7a:07:50:ae:0e:a3:53:2b:
6b:7f:25:41:91:9f:3a:68:bd:d5:2e:4a:a0:54:48:
b1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:27:89:1F:27:00:23:0F:51:F9:BF:26:09:E2:AE:E3:A6:26:F5:BD
X509v3 Authority Key Identifier:
keyid:C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:98:1b:a9:00:6d:67:63:84:9b:da:58:92:95:81:de:be:26:
0f:21:a6:ca:d5:46:8d:f5:3a:e2:60:28:e4:cf:3e:cb:ad:d0:
74:e8:2a:a6:c4:49:e3:03:2f:7f:ce:04:35:11:a6:cf:39:27:
19:5b:0c:c5:4f:83:0e:6c:2d:fc:a8:1e:e5:55:47:2e:4f:f4:
e9:c7:40:40:f2:82:d2:60:cf:f1:e9:9b:31:33:3a:e0:ed:78:
68:e3:2b:78:95:26:d8:78:fb:ec:ab:1e:fe:e7:b5:fd:25:d4:
3d:4c:2f:16:9d:72:64:e9:41:7a:55:83:f5:5a:73:ab:e3:25:
fc:86:46:64:f7:ec:29:72:ab:90:d1:b6:9c:af:e4:7e:f8:d2:
a9:c3:b6:2c:e5:4b:66:ef:28:6d:29:5c:0e:e2:c2:07:31:52:
d0:25:8e:0f:e6:54:0c:49:28:c1:b7:8c:ab:8f:80:38:55:a7:
ec:14:14:58:b4:24:8d:ff:c2:a2:79:62:b6:03:a7:a1:ff:9d:
d1:5f:a1:ae:7a:41:54:95:68:88:84:f4:37:56:20:1d:94:4b:
9e:72:32:68:cf:c7:08:e7:aa:19:b1:44:14:6f:c8:38:88:78:
44:05:08:48:2f:a8:7c:a6:5d:50:ce:7b:88:fc:dc:71:80:db:
65:ff:84:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:33 2025 by rpki-client