Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.mft
File: XbomMhShFwVRmA7pFxn42Ixia14.mft (raw, json)
Hash identifier: HmxgntxTEkHmRD/m2W4gZiD2rsEzySeBX1uCe1getaA=
Subject key identifier: 5A:00:74:8D:7F:54:98:48:66:55:1F:72:31:68:7A:AC:70:74:AC:11
Authority key identifier: 5D:BA:26:32:14:A1:17:05:51:98:0E:E9:17:19:F8:D8:8C:62:6B:5E
Certificate issuer: /CN=5dba263214a1170551980ee91719f8d88c626b5e
Certificate serial: 01969F7659D2DA12296AB8D60E0F83855E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbomMhShFwVRmA7pFxn42Ixia14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.mft
Manifest number: 108F
Signing time: Mon 05 May 2025 08:00:55 +0000
Manifest this update: Mon 05 May 2025 08:00:55 +0000
Manifest next update: Tue 06 May 2025 08:00:55 +0000
Files and hashes: 1: XbomMhShFwVRmA7pFxn42Ixia14.crl (hash: 7TBiHs+kpopLjx44Q/zmnu2FxVEoEeUWirRikz6pW08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbomMhShFwVRmA7pFxn42Ixia14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:59:d2:da:12:29:6a:b8:d6:0e:0f:83:85:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dba263214a1170551980ee91719f8d88c626b5e
Validity
Not Before: May 5 08:00:55 2025 GMT
Not After : May 6 08:00:55 2025 GMT
Subject: CN=5a00748d7f54984866551f7231687aac7074ac11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:0d:82:64:ed:ac:ef:99:7c:08:7a:32:ba:
c9:2a:c4:6a:3f:80:9e:23:a0:e7:a8:b5:83:05:70:
e1:9b:6e:4c:c2:8e:17:8b:fc:62:6a:f8:61:64:14:
fc:80:12:0f:2b:84:a9:d5:96:07:6d:33:5d:76:04:
93:c5:88:c1:40:b3:4f:32:ca:c4:a6:c9:f7:5a:b8:
3f:35:e6:b0:9b:45:3d:22:9d:d7:bd:c0:50:a1:d2:
a9:ff:32:6d:6f:bd:00:db:31:71:de:fc:49:d8:36:
b5:18:a0:08:1a:05:52:52:30:b6:4a:8a:4b:61:0b:
6d:80:4b:02:2e:f5:31:15:e5:4d:08:d5:52:66:e6:
7d:cb:9b:9c:0c:cf:b6:cd:44:64:30:2a:a6:39:b5:
54:c3:1f:75:88:60:60:ae:dd:40:32:e3:8b:1e:59:
ac:63:44:ea:f9:0e:10:7b:d1:c6:10:30:84:9f:73:
2f:c6:e1:46:06:b0:1c:09:55:e1:bb:a8:3b:8e:59:
d0:b5:39:97:2f:81:0d:92:7a:04:f6:a7:e7:e7:5a:
ab:f3:ca:0e:6d:f0:80:9e:8d:11:38:2b:3d:cb:f0:
b3:96:be:d9:f1:5b:0c:1f:b5:84:f6:8e:c1:32:66:
b2:71:06:94:43:7f:8d:d0:9f:dd:57:8b:f2:1b:cb:
f5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:00:74:8D:7F:54:98:48:66:55:1F:72:31:68:7A:AC:70:74:AC:11
X509v3 Authority Key Identifier:
keyid:5D:BA:26:32:14:A1:17:05:51:98:0E:E9:17:19:F8:D8:8C:62:6B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbomMhShFwVRmA7pFxn42Ixia14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6b:5c:8b:5c:02:7f:e1:ef:ad:a4:cd:3a:c1:c0:14:ee:ef:
df:c4:3f:80:cd:f6:6c:47:ff:91:ac:24:00:aa:21:77:7c:d0:
c3:13:c0:e1:ad:6f:e2:0f:4e:1c:20:04:2b:20:c1:c6:b7:47:
03:d9:79:49:40:19:d3:39:6e:b1:19:ee:6b:e2:44:7d:5d:2a:
66:29:72:53:99:7d:25:55:93:42:26:aa:44:b6:75:98:2c:d4:
0e:ac:b8:70:db:ad:55:98:eb:95:4c:fe:8e:3b:07:96:02:34:
90:e9:86:d6:ee:e8:0c:f8:b4:9e:e9:e0:65:44:a9:2d:45:bb:
2f:0e:1f:e8:b6:98:82:ea:65:9c:9e:86:55:eb:77:a4:5d:0b:
91:b4:cb:f8:82:22:85:f6:3d:d8:d5:a9:36:60:0f:29:24:16:
55:cc:78:6e:17:3c:3a:f4:3f:09:5c:d2:4a:41:bb:a4:6c:44:
e8:fe:d7:45:76:23:92:22:4b:8a:a3:14:de:82:28:d5:cc:78:
c5:a1:65:14:17:a1:a4:66:d8:ae:59:6a:85:5b:8d:e3:ee:5c:
e6:3a:ae:0f:82:e2:66:49:7f:7e:8a:26:57:f2:28:1e:4a:65:
88:71:e1:78:46:ae:82:3f:a8:c6:86:64:7f:d1:3f:62:8e:62:
fb:9c:95:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:27:08 2025 by rpki-client