Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: k/t2tFe4k5VcLl7w/j50PS9lC+zuJ0KB4tM4mZra6LE=
Subject key identifier: 52:A4:B7:DE:13:62:15:B5:35:D6:63:75:2C:00:25:F8:01:7B:C4:F0
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 019609E8125183F159ED55D631AD01B4C08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 13E9
Signing time: Sun 06 Apr 2025 07:02:06 +0000
Manifest this update: Sun 06 Apr 2025 07:02:06 +0000
Manifest next update: Mon 07 Apr 2025 07:02:06 +0000
Files and hashes: 1: 6BSNFyDmxjJKuKKXuAvPxKEuvHY.roa (hash: c6KHneV5lWrYB0vjR6eF0or+/RE98WhZucc1FLSvOaw=)
2: WVzv9IPs18jpEk9vxuxZJ9DgM6E.roa (hash: B0rUdnUd104guvU3/ZQlq+5h7/GgTzLKvxjoBYXsJx8=)
3: WdMCPBRF3SYVyusOAvLG3Px1q0o.roa (hash: 0pYw3BfMJddkmV2iZ0Sn1GwTLycumrvuPn+XFayO/cA=)
4: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: RaIi6rjczz4icMJrBf0pVUsXQB0vdjjcEsp83s3Cdbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:e8:12:51:83:f1:59:ed:55:d6:31:ad:01:b4:c0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Apr 6 07:02:06 2025 GMT
Not After : Apr 7 07:02:06 2025 GMT
Subject: CN=52a4b7de136215b535d663752c0025f8017bc4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2a:2a:75:20:02:2a:47:d5:51:6a:6b:27:6f:
c6:fc:73:f5:5a:e3:3b:e6:6f:d0:46:cd:e6:1d:8d:
c1:88:da:a0:89:f3:67:ef:c4:34:9d:ff:36:05:e0:
f9:88:59:63:af:d3:fe:21:61:65:56:fd:60:82:55:
27:30:a4:9f:3c:53:41:e6:9f:9f:1f:f9:83:66:43:
4b:54:9f:62:98:16:09:ea:cf:b0:f0:c3:9f:2c:42:
23:6b:93:0b:d0:4d:85:4d:bf:41:c8:fe:ec:24:7d:
3d:88:92:f4:8e:9a:23:20:e7:dc:de:86:43:b1:28:
ed:43:46:a1:15:5d:f4:c3:d2:cb:7b:64:31:bb:1a:
ce:cc:05:5a:25:65:b5:59:7f:fd:eb:34:1f:9b:ac:
5c:7e:3a:93:9f:72:bc:66:da:7c:d7:e9:93:36:09:
28:14:e2:50:63:07:6c:27:51:0b:d1:d8:5b:45:88:
3b:88:53:8a:5d:5c:5d:67:1e:05:d0:9d:8c:b5:79:
84:b1:6f:bc:7f:30:86:ab:68:bb:51:29:a7:5a:ac:
08:57:83:99:6d:70:71:48:59:8b:b3:c6:10:cb:7c:
52:46:7f:5c:ab:7c:61:67:64:44:96:1d:7d:3b:8f:
12:2f:37:d4:91:29:3e:dc:0d:bb:8b:47:75:1b:cb:
af:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A4:B7:DE:13:62:15:B5:35:D6:63:75:2C:00:25:F8:01:7B:C4:F0
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:40:f4:7d:0c:5d:1b:67:bd:85:6c:c0:ad:81:da:bd:7d:d2:
ba:79:a4:67:3f:59:74:24:58:fb:90:2d:ad:b4:59:ce:a4:c3:
3a:bf:97:6f:26:8f:f5:5c:62:c3:1c:aa:c9:53:c1:4c:a1:10:
72:c2:92:a0:9a:27:8c:c8:be:4c:d9:51:e0:77:4a:64:23:cd:
b3:d1:c4:dd:9a:96:5a:17:65:86:fd:81:74:81:bf:bb:ac:7c:
45:f0:87:1a:ad:14:59:3f:39:49:c9:35:03:a0:ed:74:75:10:
4d:54:fd:a7:d3:ad:c1:a0:6d:25:ed:cf:37:62:38:b5:e5:81:
3f:83:57:a3:64:9f:0e:1e:a1:e0:b2:1a:1c:75:a3:17:7c:7d:
4d:6b:90:01:ca:97:65:af:5b:70:79:47:9d:57:14:42:67:6e:
52:ce:2a:a8:70:82:58:88:da:0f:75:65:f8:95:a9:09:f7:96:
3d:5b:9f:da:18:6e:b9:db:05:35:01:5d:7f:e2:f9:f6:d0:73:
38:d1:11:33:73:03:0e:35:b6:9c:44:f4:c4:25:07:0c:b3:72:
82:72:e8:18:fe:98:7a:a3:d3:1f:3d:ae:40:47:13:66:62:2b:
5e:38:4c:8b:48:83:52:93:3d:cb:aa:bd:fb:37:1e:15:3f:d4:
f7:be:49:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:22:08 2025 by rpki-client