Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
File: Xjy32YLH-e28k9TLQrlPoCnDgt8.mft (raw, json)
Hash identifier: KOYbM00v5OJqdTYEXtyeDTMjrunQUL8Bk8g8V9uZ030=
Subject key identifier: C5:BC:3D:CF:FB:F8:EE:89:47:91:0A:FF:62:B5:B1:A8:C1:63:9A:79
Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Certificate serial: 01965613399EA7999AF035D178FDEF56A64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
Manifest number: 0C5E
Signing time: Mon 21 Apr 2025 02:00:22 +0000
Manifest this update: Mon 21 Apr 2025 02:00:22 +0000
Manifest next update: Tue 22 Apr 2025 02:00:22 +0000
Files and hashes: 1: Q4-WTo5cCXeD-w1sheBv_gjD51g.roa (hash: YXa3b/p8YeGWH77UlVMEIh9uzLUPpaYfJzmKNDjEbns=)
2: Xjy32YLH-e28k9TLQrlPoCnDgt8.crl (hash: kPTLTbRRNcz1AGcFcOpVP0HiFlkWy6iFcc0Itj5gTbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:39:9e:a7:99:9a:f0:35:d1:78:fd:ef:56:a6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Validity
Not Before: Apr 21 02:00:22 2025 GMT
Not After : Apr 22 02:00:22 2025 GMT
Subject: CN=c5bc3dcffbf8ee8947910aff62b5b1a8c1639a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:0c:c7:4e:cc:9d:40:73:e0:0f:6b:f4:88:
af:c5:f6:3e:23:98:4c:59:8d:0a:4d:25:e4:2e:f3:
12:8e:5c:ef:98:55:d3:0e:bb:f5:12:9d:6b:ab:a8:
a9:46:e4:8f:1a:f7:ef:91:4d:be:95:8e:5e:3a:bd:
1d:ca:23:29:67:7e:a7:93:62:74:0c:70:69:67:35:
54:5f:ac:20:c6:5e:2c:a8:a3:dc:79:b7:e7:01:1a:
4a:32:a1:68:4c:14:39:b3:64:47:81:2a:83:3d:3f:
b5:99:54:33:5e:5f:27:71:fb:71:81:95:49:da:c5:
79:ab:e6:c5:8e:c2:47:38:dc:12:bb:0c:91:15:be:
58:ad:d1:a6:6e:a9:c3:93:86:00:ce:bb:8f:ca:79:
2e:30:e7:ae:03:eb:30:02:af:13:02:3f:35:18:bc:
ec:d7:0d:2d:96:af:c1:6e:08:a2:76:a0:d0:8d:07:
a3:ac:e0:67:7d:a2:2a:a5:6e:d1:0e:59:30:8c:d4:
19:13:7e:cc:63:35:e3:b2:17:1d:e2:d9:87:20:c9:
7c:14:2d:0c:60:1d:ea:39:19:42:ba:c1:e0:68:68:
bb:4f:73:f2:63:50:2d:75:99:c9:7f:c8:a2:f2:dc:
78:7c:82:fc:b8:ad:e9:95:9f:e8:19:2b:61:a0:d4:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BC:3D:CF:FB:F8:EE:89:47:91:0A:FF:62:B5:B1:A8:C1:63:9A:79
X509v3 Authority Key Identifier:
keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:aa:27:4a:b9:bf:f3:a7:d1:4a:9d:d8:d0:c3:e1:c3:5e:d8:
95:43:74:d6:96:39:ab:74:3a:8e:cc:c9:2f:70:d2:eb:19:50:
2c:d4:19:b1:f6:eb:1f:b3:e2:45:38:a3:60:e5:78:10:be:6d:
cb:b6:98:d8:ad:d4:95:ec:88:78:45:17:31:e4:a4:51:20:b3:
99:c5:ec:54:8c:03:de:f0:89:aa:08:38:92:85:42:6e:2f:2a:
de:25:2a:48:31:c1:e6:8f:d6:70:5c:17:d4:ca:c0:b5:6b:bc:
7c:cc:4a:12:dd:69:1c:1d:c8:d2:34:1d:79:2d:d2:dc:a4:dd:
64:a9:d2:88:93:67:24:82:17:57:62:49:dc:71:d2:21:2d:fa:
bf:53:af:b7:c4:05:b9:09:c7:63:0c:68:7a:14:fc:53:bb:2d:
0e:20:69:cb:56:73:d8:d5:66:fc:86:43:14:f3:ef:47:ca:f1:
c1:a2:c5:20:ad:90:ae:e7:a9:45:cb:26:a0:b8:64:d3:41:03:
ed:f1:9f:7d:dc:78:4b:46:87:27:d3:43:f6:fe:78:5c:90:ea:
79:51:e9:a0:c4:a1:23:ce:a1:2f:fe:df:db:5e:d6:68:e4:c0:
4e:4e:0b:fb:c2:58:a8:17:46:cf:23:cd:b2:2d:13:a7:74:43:
4d:e7:1b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:38 2025 by rpki-client