Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json)
Hash identifier: jcfbfMITimsT+zMQQkoHnO3nQlGOn7GGZ1rDIHvqo1I=
Subject key identifier: 47:77:F7:B8:99:90:52:41:F9:96:11:F1:4E:B8:FF:DA:E5:82:DB:FB
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 019606E6C4142A9A5753E12A8188BEB9349E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
Manifest number: 0F39
Signing time: Sat 05 Apr 2025 17:01:48 +0000
Manifest this update: Sat 05 Apr 2025 17:01:48 +0000
Manifest next update: Sun 06 Apr 2025 17:01:48 +0000
Files and hashes: 1: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (hash: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=)
2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: S9BJqVo9/ZuAROvfsWMkehTDwDgMDQOKn73D90OHjKw=)
3: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (hash: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 17:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:e6:c4:14:2a:9a:57:53:e1:2a:81:88:be:b9:34:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: Apr 5 17:01:48 2025 GMT
Not After : Apr 6 17:01:48 2025 GMT
Subject: CN=4777f7b899905241f99611f14eb8ffdae582dbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:95:92:d7:4b:96:e7:35:a7:08:70:f2:39:
27:90:64:9a:64:31:19:44:1a:99:27:4b:e8:2d:c9:
a6:d1:a2:98:2d:19:48:0d:11:3f:24:26:5a:6a:01:
1b:d1:51:1b:9f:2a:b2:a5:23:ce:e3:66:41:5a:d0:
a6:ec:0c:5a:67:fa:50:88:09:eb:16:48:ea:bb:2e:
a8:87:6f:32:be:6c:dd:63:aa:2c:33:6a:52:6b:52:
8f:ba:aa:a2:8b:5e:65:a1:fb:3c:86:05:ed:8e:07:
99:15:30:0a:7d:e2:31:10:53:5c:e8:cb:92:c7:9d:
4c:b8:e0:0f:d7:c2:20:bc:f2:fe:db:7c:60:93:20:
90:55:99:6b:6b:c5:0e:38:4b:c1:20:b7:da:f3:03:
5d:03:11:13:b7:ad:22:72:51:5d:d8:05:04:db:43:
cb:98:50:e8:90:0f:52:92:4b:17:bf:b9:44:c6:55:
8c:1f:a2:9d:bb:bf:70:57:7f:61:9e:6e:9f:82:43:
f5:03:ff:df:e1:95:47:97:8b:31:85:4d:d8:f2:2c:
af:ee:c0:6f:0e:d2:34:d3:da:95:36:2e:08:57:9f:
c9:e9:d1:6c:88:22:ea:74:d0:99:b3:34:5c:2a:41:
98:37:90:16:32:6b:01:96:e4:c8:e5:4d:fe:3e:86:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:F7:B8:99:90:52:41:F9:96:11:F1:4E:B8:FF:DA:E5:82:DB:FB
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fd:f6:82:27:57:9b:28:05:69:8d:34:ca:2b:b4:ba:22:ce:
ea:51:e0:81:02:1e:37:46:ec:58:49:b7:a2:a1:e2:24:ab:1f:
83:ee:0b:b0:78:f8:60:2e:f4:3f:9f:8a:76:e4:2c:c2:ec:55:
82:02:74:bf:30:37:4d:99:be:2a:7e:0d:0e:a4:28:5e:2d:02:
1e:20:35:14:81:8d:8b:90:8b:00:87:6f:95:13:87:09:2b:6a:
ea:52:2a:8c:05:34:e2:b1:c9:76:e0:56:5f:32:69:2d:a5:ea:
66:bd:62:d3:7f:b2:01:f2:e7:60:12:cc:eb:d7:c6:d5:91:bd:
06:f0:40:b1:58:11:83:ea:6a:1b:2c:93:82:24:10:eb:65:29:
01:52:a9:df:5b:76:ed:44:49:14:65:21:f7:a7:ad:03:cc:49:
f5:80:66:6b:d2:c6:38:40:25:ee:07:41:87:f9:d7:1b:4e:e9:
dc:52:3a:7b:fb:0c:a2:66:28:bb:bb:41:fa:a1:14:67:da:40:
06:a7:12:29:45:ac:d1:b0:54:14:1a:2b:c2:bb:ad:62:79:b2:
fd:fe:82:cb:41:05:0f:c3:06:61:62:a2:21:1c:ad:23:94:55:
0b:65:92:e3:c4:00:57:a1:85:d2:09:9b:87:21:b5:1d:cc:84:
d8:e2:9c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:08 2025 by rpki-client