Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: fKpW62IAwOqBfk7hqGY1+XHBRxkh8vWQK9H5W0lJkhE=
Subject key identifier: 71:31:01:03:3F:5E:68:2B:F5:63:9A:2B:A3:DF:86:05:5A:6E:8F:E2
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 019656136A79AEBBA8DE132CB4AC5BB34A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 04BF
Signing time: Mon 21 Apr 2025 02:00:35 +0000
Manifest this update: Mon 21 Apr 2025 02:00:35 +0000
Manifest next update: Tue 22 Apr 2025 02:00:35 +0000
Files and hashes: 1: TbP72HU__x5-xpUX6PI_i9iyDaM.roa (hash: FLkmCrV+1GGkGMAjoDFB0RSF/lM4teoeIsYHwGZQivI=)
2: U5LzRtt7TqgwcmDyAykCjfC_tyg.roa (hash: MnSBkpXKCh2/fnPZQ+yyW+as55btZcpHuSExX+Fr9KQ=)
3: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: cr32lcldiYdE9P1VcZ19+rDafCXbntwiQNxIHStsM28=)
4: XsQzypEDi3dbORi7Sjru6BV7874.roa (hash: kUYaLmJEoY+QPfzf/QKKUFqO5UN/o9EcoVpI3bOIxPI=)
5: ihdmZnPFfRQouiDEX9hoP7FnJXY.roa (hash: vMOPJDVg/5XoKEVMMHXuz77Sx41YI4RzrWjRsAiZbwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:6a:79:ae:bb:a8:de:13:2c:b4:ac:5b:b3:4a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Apr 21 02:00:35 2025 GMT
Not After : Apr 22 02:00:35 2025 GMT
Subject: CN=713101033f5e682bf5639a2ba3df86055a6e8fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:75:97:c0:5e:79:fd:5f:5a:cd:0d:e3:8e:fc:
4a:b5:05:15:88:e1:3c:d9:9f:b4:5c:86:28:55:38:
63:61:14:ae:27:e4:cc:9a:bd:38:6b:d8:20:41:fd:
38:3b:8e:e5:54:7d:bd:90:8e:5d:42:9c:1b:81:90:
b0:cf:36:a1:b9:34:db:d1:0d:2a:a0:d0:67:a7:b3:
f9:40:c1:66:89:f5:0d:d7:1a:b1:17:70:90:52:f6:
df:f7:3e:af:62:aa:ca:bb:d6:d4:95:c0:c9:7f:93:
f6:80:9e:ff:9c:82:b8:17:4e:0b:7d:33:5f:d9:9b:
39:b8:fb:63:f4:ee:da:db:18:68:c8:a5:85:6c:70:
c8:c6:82:4e:c8:ec:29:3e:d6:35:8b:ea:ac:8c:09:
c1:fb:d1:49:7e:1b:79:0e:37:2a:22:d0:7c:1e:93:
b5:d9:c6:64:41:bb:91:da:ec:ae:a2:12:f4:7e:6e:
4f:d3:86:62:82:c2:1a:e3:47:0a:55:e1:b9:74:26:
92:90:5b:93:64:df:68:55:4c:96:e6:2c:39:f3:21:
79:5f:b7:60:ed:40:61:2b:23:db:e4:fa:47:a2:95:
c6:02:f8:e7:19:a4:77:88:f5:60:ae:fc:46:66:1e:
70:b1:40:7e:44:97:06:d7:6e:64:bf:84:77:c5:72:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:31:01:03:3F:5E:68:2B:F5:63:9A:2B:A3:DF:86:05:5A:6E:8F:E2
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ba:ad:29:e9:c5:02:3a:a3:9a:6d:21:83:19:6b:ec:2d:44:
64:d1:68:85:5d:86:8e:3b:4b:46:1e:be:81:d0:94:78:dc:d5:
9b:a1:55:81:e4:d8:0d:9f:1f:bf:48:a6:fa:e0:47:c3:59:69:
74:e3:00:37:8e:60:e8:bf:1f:3c:36:9f:01:ea:27:67:47:9a:
30:b9:dc:af:78:19:79:3e:11:62:b5:eb:15:0e:14:de:2d:1b:
a3:6b:99:46:ec:ef:be:68:00:fd:9d:51:9a:6f:25:21:e6:18:
72:bd:bc:28:04:e9:15:be:4d:49:e5:75:16:f3:46:13:b4:e4:
5b:11:4d:f7:9c:57:b2:a4:a4:8a:06:1e:63:34:e5:72:79:7a:
40:be:9f:59:05:9f:be:95:61:81:1c:7a:ef:43:97:02:4d:46:
7e:5e:a6:28:2d:fa:6f:21:8d:b4:6b:94:1a:e1:e9:07:8b:0f:
c6:e6:b0:2c:02:b4:79:5c:e9:b8:eb:c8:50:ca:b2:9b:d3:47:
36:a6:b1:94:28:b9:de:81:6d:53:45:83:8f:0e:36:d0:5b:3b:
f9:38:a4:c6:08:3d:a1:6a:f2:3b:bf:40:c2:f3:76:92:3b:68:
e6:30:59:c0:7a:6e:78:fe:3f:09:e5:87:81:e6:b5:5a:e5:2b:
f0:45:8d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:39:51 2025 by rpki-client