Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
File: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft (raw, json)
Hash identifier: N5aCCu16tK0uKn90les0zL1fK0P7G0KJOF4+oCAKQMY=
Subject key identifier: B6:00:FF:18:49:C4:15:DC:CC:5E:43:EA:3D:43:56:B2:AE:C8:39:5A
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 01963D2F440FC48C7A346FDCDC5B5B09E06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
Manifest number: 14F1
Signing time: Wed 16 Apr 2025 06:00:29 +0000
Manifest this update: Wed 16 Apr 2025 06:00:29 +0000
Manifest next update: Thu 17 Apr 2025 06:00:29 +0000
Files and hashes: 1: 1-eNX-zOFtjFclCSH0mTJdCSae98.roa (hash: M30Jnhsr3n3FbZbY3hov7cmuQb2xUsoReMhqFsTONps=)
2: MsrjwPiofwRbqxLYk1Ga7WSIbIA.roa (hash: IMwhFKCuLtTRw4YQ2OqrJF8QQPbmc6DZSTTcYhHXS88=)
3: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl (hash: jk51b/S9+vu5RWTXPxeB55mz0QKlMYRfOLlBhLL3rt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:2f:44:0f:c4:8c:7a:34:6f:dc:dc:5b:5b:09:e0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: Apr 16 06:00:29 2025 GMT
Not After : Apr 17 06:00:29 2025 GMT
Subject: CN=b600ff1849c415dccc5e43ea3d4356b2aec8395a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:21:40:f6:a9:90:d5:12:b4:3d:fa:ac:7b:
5d:75:32:f5:39:5c:23:10:67:02:d6:fe:ec:83:45:
59:86:53:cb:53:fc:4f:c2:10:35:b4:2c:2e:ed:5d:
7f:ef:af:ba:46:55:fd:c8:77:23:df:0f:0a:e5:37:
8f:ee:84:ea:2e:c0:70:0b:c5:01:78:9b:96:9c:15:
b2:d0:54:e5:c4:c9:5e:e6:cc:f3:a7:e1:bc:f7:df:
12:ca:bd:5c:da:2b:9b:88:82:b0:52:b6:58:12:ba:
64:39:dc:b3:d9:c5:77:0b:57:83:bd:cc:a4:54:47:
cc:06:fb:6f:57:26:33:ea:7b:72:54:2e:24:60:84:
22:e7:62:33:54:11:5a:93:5d:7e:6d:bb:9c:26:0a:
83:c7:7c:4b:51:3d:10:f7:75:19:7a:0b:7b:0d:51:
3b:4b:1d:51:04:c3:67:2d:07:4d:b2:1d:fd:f1:bf:
36:7d:25:c8:e6:56:57:e3:f5:f5:30:0f:19:68:75:
50:16:eb:7a:24:24:cc:f7:07:f0:52:55:dc:8b:03:
ae:3c:43:ee:50:55:c8:01:91:d2:ed:a8:fe:01:93:
66:ca:32:73:b5:03:ef:0b:b8:3a:56:95:8e:8f:87:
9e:69:7b:4f:2e:28:fc:cf:86:c6:9e:2d:12:fe:14:
2c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:00:FF:18:49:C4:15:DC:CC:5E:43:EA:3D:43:56:B2:AE:C8:39:5A
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:52:7e:d6:f8:bc:a3:d6:30:e5:a9:83:e1:bf:3a:20:52:f7:
e9:6a:c2:6f:26:25:f4:bb:06:28:41:0b:99:f6:c6:b6:76:22:
22:7e:98:ea:12:b5:47:07:ac:a0:d6:ff:42:14:2d:c1:a6:94:
3b:45:95:69:9d:9c:e2:fa:67:61:da:00:98:b2:77:a3:2b:fd:
d2:9e:3a:99:41:aa:98:9a:df:cf:ad:b2:ee:2a:fe:f6:65:26:
2f:13:85:e2:f0:73:c0:f0:be:4d:56:78:6a:c3:32:d2:21:4f:
e0:08:2e:84:c6:fa:fd:b5:d2:41:13:9b:51:69:0f:0e:cc:85:
d9:f3:11:51:2b:be:f5:9f:a6:99:d5:cd:36:20:c3:1c:83:05:
08:58:8a:19:0a:13:e3:d3:8d:ef:6b:72:29:2f:02:93:9d:3b:
35:3a:80:43:04:6d:59:8b:9a:22:cd:64:00:a4:06:a5:7c:aa:
a2:d9:f1:58:98:87:28:3f:05:45:db:b6:f2:9c:95:d8:83:76:
2d:50:4f:0a:07:fb:97:c7:0a:d3:9c:68:0c:d7:51:9a:c0:10:
c9:9e:06:49:97:a9:05:68:b5:fa:41:6b:7a:4d:41:17:cb:d0:
b4:ec:a9:e8:9d:69:19:97:41:76:d6:c6:e9:e5:08:f7:43:b2:
a1:ba:05:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:20:34 2025 by rpki-client