Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
File: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json)
Hash identifier: jm+KAQv0WfaNVbvpkZQTsr3bc01gF2TvskGCeK/q38E=
Subject key identifier: 60:E7:B8:3E:0E:45:28:03:D9:8D:D0:1E:19:C2:D0:9F:30:B6:63:52
Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
Certificate issuer: /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Certificate serial: 019659B984B76C073807A4FEE565AF2551F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
Manifest number: 01C4
Signing time: Mon 21 Apr 2025 19:00:52 +0000
Manifest this update: Mon 21 Apr 2025 19:00:52 +0000
Manifest next update: Tue 22 Apr 2025 19:00:52 +0000
Files and hashes: 1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: 0i8caCPzH7cbrg5GfIpfwaMMcaDns/7JffPuuF5v61A=)
2: psFfy-RTu56maJeiy5fjnXb37D8.roa (hash: 3U2SBcmftDHrB6XiY4p/PlT03VqxC3zPorxDZ3WPMsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:84:b7:6c:07:38:07:a4:fe:e5:65:af:25:51:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Validity
Not Before: Apr 21 19:00:52 2025 GMT
Not After : Apr 22 19:00:52 2025 GMT
Subject: CN=60e7b83e0e452803d98dd01e19c2d09f30b66352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:36:fd:cf:e2:99:4a:7c:f1:44:b4:9e:5d:
10:f7:8d:9f:e2:cc:a6:8f:f4:09:b2:87:1a:fd:d9:
ff:33:f6:2e:6c:9c:58:f6:dc:52:24:79:0e:84:45:
c4:32:29:14:d0:93:fe:8f:6d:b2:b2:63:60:ba:03:
d5:52:d1:85:59:bf:79:31:e0:2c:a1:42:6a:ee:ae:
a7:89:a6:28:37:4c:de:5f:8f:bc:81:e2:24:e3:de:
f5:b6:bb:84:70:3e:ec:06:d3:7e:4e:65:33:f8:12:
32:74:7d:2d:8f:a9:15:20:84:af:cb:25:56:a1:8b:
32:47:9f:6a:bc:0b:6d:7b:59:1d:bc:c8:77:26:e6:
8d:4f:95:6b:44:18:b9:a6:6a:64:8c:cb:1d:af:95:
a4:a9:f4:b9:f2:6a:bf:5a:aa:41:12:84:2b:c4:ed:
46:35:dc:32:75:b7:ac:4b:fc:fc:86:7d:e3:49:05:
ea:1c:38:5e:27:af:b4:b9:6f:79:3a:f1:4c:a2:99:
c6:ff:4c:ba:c1:d0:63:a7:29:ff:b9:9e:9b:13:e1:
bf:72:d5:b8:50:b5:05:0a:1c:11:44:c7:67:4b:7b:
3b:9b:90:9e:11:16:42:ad:f6:b8:ca:77:3d:2d:07:
57:ee:73:0f:12:53:1d:d2:43:c8:98:d0:70:f3:26:
58:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E7:B8:3E:0E:45:28:03:D9:8D:D0:1E:19:C2:D0:9F:30:B6:63:52
X509v3 Authority Key Identifier:
keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:43:a3:2f:77:05:84:a1:85:c5:64:de:af:94:2b:28:31:2e:
b8:99:25:37:60:86:41:ce:e1:07:0c:82:c0:a1:19:70:7b:95:
84:a9:61:09:f6:14:e7:65:ba:99:89:4a:40:99:e6:5a:9e:2c:
83:bf:b4:f2:5f:36:e3:2a:8f:a5:91:8c:93:62:49:95:57:2f:
fe:1b:cc:bc:29:fc:5e:3a:b2:c3:8b:72:bd:d2:1f:3f:dc:e8:
36:a7:31:1d:ac:6b:06:52:d9:05:18:9b:46:9b:3d:c6:e6:87:
fa:c1:31:ab:b4:96:6e:e1:9a:9a:af:41:a3:a6:fc:d0:35:e1:
d2:5d:b2:8a:71:f6:ee:6d:6c:5b:69:55:49:22:bc:88:90:78:
bd:3b:a2:c8:e6:a0:46:20:2f:7f:6b:28:eb:3f:7d:8d:1e:2b:
e6:7f:76:81:7b:ce:62:db:c2:10:b1:bb:41:48:31:fb:f3:e1:
ff:62:80:b5:26:4d:7b:99:16:9f:30:b5:ad:51:fc:73:c8:d5:
0f:22:59:d5:1e:94:ef:e3:49:63:7c:82:f9:1d:fe:44:50:5d:
92:14:a8:95:d3:38:75:6b:16:60:c0:4b:81:db:5c:87:73:9e:
69:4e:cd:4e:30:df:8e:27:c2:2c:a2:42:4f:a7:1c:de:20:99:
44:a9:04:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:22:35 2025 by rpki-client