Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: tOVV/HBmlzYxVOvaBj3LaoSl/GpTcgNPrSTPBvEh5b4=
Subject key identifier: BE:2F:84:1F:42:1D:28:D5:50:20:DC:6E:58:33:48:C8:02:AF:BA:8F
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 0196361A865838F0D57CD5ABEFBDEFC8136B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 14EE
Signing time: Mon 14 Apr 2025 21:00:30 +0000
Manifest this update: Mon 14 Apr 2025 21:00:30 +0000
Manifest next update: Tue 15 Apr 2025 21:00:30 +0000
Files and hashes: 1: Q0ZblCsN6JQUnX3udQDuap6c2-I.roa (hash: I2xlD4uVVWvOFoGpUCm96IHEkG1bjZkLPW0exqxVsw0=)
2: TlDCQOh10UlQ796GS1cAAc1JE1M.roa (hash: pcd2lbTTd2y5ARZY73OsqPA+0niqtCAf82HtT92KDWw=)
3: UvT-ik743JDt1vdojO7D5Hy8riI.roa (hash: w83cJePf0jK45fQwHEKQOjcAlugYhfHD/eFh3NZpxgs=)
4: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: h5FhzKy1s8kfosB0oVC76hSlI+JufuHZXcA5jqG+YH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:1a:86:58:38:f0:d5:7c:d5:ab:ef:bd:ef:c8:13:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Apr 14 21:00:30 2025 GMT
Not After : Apr 15 21:00:30 2025 GMT
Subject: CN=be2f841f421d28d55020dc6e583348c802afba8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:0f:12:02:26:e8:10:ee:00:9f:3e:c7:e6:
ec:dc:4a:d3:c6:ec:d3:14:36:64:82:9d:91:77:42:
35:14:24:c0:f8:37:9a:4b:55:03:74:7f:4e:b1:92:
63:bd:de:43:78:c8:30:83:41:6c:4e:9e:8b:d2:34:
30:b7:d5:f1:fc:39:dc:aa:82:c3:d8:77:b5:84:34:
45:88:eb:eb:a8:bd:91:ca:7b:e6:0b:4f:24:dc:e3:
f8:08:7d:ee:9a:60:f5:9c:81:d1:c3:4a:79:5f:5c:
84:d2:e6:cc:7c:3f:41:96:94:0b:a5:59:50:b8:e5:
a5:f3:02:14:c1:56:bb:39:00:af:e2:59:7d:eb:40:
a6:60:72:e0:4e:06:db:77:39:5c:08:bc:61:b0:41:
e1:24:41:70:16:b4:b1:5a:42:78:ac:ff:4f:aa:10:
57:95:28:cf:f2:bd:15:6b:64:05:22:f0:71:2f:8d:
dd:5e:35:2e:60:ff:0e:48:cd:75:4c:52:08:8d:22:
b8:e2:5a:a4:0b:8d:70:7a:65:96:dc:f6:1b:a9:4d:
c6:27:1e:83:21:80:d6:08:9b:0a:43:07:d1:2d:ec:
27:a6:fa:e7:11:3e:2c:fb:56:3f:f2:be:cd:be:7a:
18:64:26:5e:a5:82:b7:77:60:4c:1c:c2:0c:4a:08:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2F:84:1F:42:1D:28:D5:50:20:DC:6E:58:33:48:C8:02:AF:BA:8F
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cf:a4:08:f5:91:19:b8:ff:eb:fb:72:a4:be:91:c3:68:4d:
25:07:c3:27:07:6d:58:54:55:84:1a:1e:ff:b6:40:d1:bb:b4:
61:83:43:3b:37:32:de:04:0b:17:80:f3:4e:7e:42:89:85:38:
cb:fa:78:81:9a:f9:14:12:7d:84:8e:4d:4e:fc:07:d5:bd:7a:
96:cb:87:97:13:60:19:c3:f8:89:70:b9:60:54:80:0d:5d:c1:
70:30:86:55:06:f6:c8:a1:e4:2a:e5:52:51:33:71:74:f3:d9:
0f:06:d7:86:cb:ad:fa:7b:dc:7a:7c:50:16:be:5e:f7:d7:bb:
bf:19:72:0a:78:ba:da:df:99:52:65:64:b0:81:8e:01:f1:54:
2d:53:37:aa:4d:6c:04:2c:fd:20:73:50:c9:cf:7d:7e:75:94:
ef:74:3a:f3:f8:c0:67:1f:91:6a:44:1e:06:30:f3:cb:8a:97:
73:d3:83:fd:fe:b8:a9:ed:70:c6:64:cd:05:84:ff:e6:7a:66:
41:28:1a:e7:33:84:f6:a5:6a:27:e0:20:b9:b4:47:ef:31:1a:
c3:1e:01:cc:c6:bc:f1:33:3b:c1:f7:07:5d:5c:ca:d3:a1:f5:
e9:31:49:76:85:16:2d:08:5a:bc:57:eb:45:8d:96:53:d1:2f:
bd:e8:b3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 03:51:01 2025 by rpki-client