Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: 0TA9SCYzDasRaNdn6QU+W28JurqFL056fQc38oE60eQ=
Subject key identifier: 5B:D1:0F:4D:35:4A:12:78:D5:7A:37:93:B2:C2:B2:AD:12:21:94:22
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 0196B069B04E0A8F89715BF530C592F485BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 152B
Signing time: Thu 08 May 2025 15:00:38 +0000
Manifest this update: Thu 08 May 2025 15:00:38 +0000
Manifest next update: Fri 09 May 2025 15:00:38 +0000
Files and hashes: 1: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: B4P5JSAXT1eugzDh2LVWva9FWJ1DnvNbcDirkI5bopw=)
2: wl9SNv70naNlxlbGYA9UwaRdUUM.roa (hash: cBLc9nicdCyrqpLVSvLzNsHxSpcCPqY4HcbtkzPI2zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:69:b0:4e:0a:8f:89:71:5b:f5:30:c5:92:f4:85:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: May 8 15:00:38 2025 GMT
Not After : May 9 15:00:38 2025 GMT
Subject: CN=5bd10f4d354a1278d57a3793b2c2b2ad12219422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:a6:25:f4:a3:5a:ac:55:99:eb:b9:0c:6b:
d0:29:c8:cb:b2:56:17:b4:93:8b:ed:85:cf:9c:d4:
ce:81:0a:88:69:c9:a4:8d:7c:e9:61:37:de:d1:7a:
cd:9f:47:79:b7:85:da:f3:3b:c3:a3:01:0e:1a:ac:
4c:ac:07:8b:77:eb:ad:a7:2f:49:00:5d:29:10:6a:
23:8b:86:81:c6:ab:d5:4a:9a:e8:6f:67:aa:da:8d:
05:44:55:db:b2:cb:a2:d9:8b:4e:4b:b4:b7:24:69:
f2:26:bc:6a:5c:aa:09:97:c0:0d:36:3c:20:d9:89:
7b:ac:fc:f7:93:88:b5:18:cf:f9:a1:e7:ab:5f:2a:
de:a2:9c:b5:be:af:47:97:38:f9:2d:0f:53:c8:78:
e3:03:54:b1:40:d0:8b:5f:e8:f9:07:74:de:c2:51:
7d:ff:4e:c1:3d:54:07:bf:49:93:93:02:b6:1e:76:
cf:ce:31:67:be:ad:69:27:e0:ea:b5:da:71:d2:1e:
ad:14:4d:35:42:a8:65:97:66:3c:99:3d:27:49:5c:
c4:ce:95:a0:de:55:c1:89:04:46:20:d4:75:ce:5e:
78:7a:2a:4b:c2:8f:32:37:1d:60:95:a8:0d:54:81:
7b:4e:8e:e5:a0:19:c1:53:46:fb:c1:26:67:aa:43:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D1:0F:4D:35:4A:12:78:D5:7A:37:93:B2:C2:B2:AD:12:21:94:22
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ff:8d:94:8d:af:ca:8c:af:c4:b4:99:b3:84:69:f9:30:e9:
f3:2a:ff:ab:40:e9:9e:27:f0:1b:d6:b2:d7:a6:22:f1:1d:58:
69:5b:9b:f9:0a:5f:2e:ca:d1:18:be:d9:d0:c6:5e:5a:da:af:
e7:c9:6a:1d:7b:4f:32:3e:da:d7:82:c0:fe:f6:6e:b1:6e:d8:
dd:27:70:5b:0a:81:15:09:c4:e8:b6:85:b3:9b:c9:33:e8:06:
39:f3:52:77:99:6f:1c:8b:43:91:1c:08:c8:cc:98:92:67:3f:
1b:20:c6:52:39:52:74:91:ab:f6:c6:4a:08:b8:bb:a6:67:01:
1c:40:81:d9:15:2f:b7:3d:f9:6a:0a:df:c7:0b:2d:2f:8d:5c:
aa:52:02:54:3a:2f:a7:56:6c:5c:ae:57:c7:3f:9b:df:32:34:
d1:4c:19:cb:37:21:df:ae:d5:9b:5c:34:3f:a2:20:12:a1:0b:
58:fa:7b:79:b3:70:6c:0f:93:67:6c:ee:f0:8c:b5:61:82:2e:
4b:ca:0a:f7:12:4e:ef:31:45:fa:46:d0:28:8a:95:86:2c:d5:
74:ea:3e:4e:00:dc:b8:ae:51:9b:fb:ee:9f:4e:4f:37:90:8f:
42:00:62:ea:d6:fe:79:17:4f:fa:9e:b2:f0:59:b3:3c:3c:82:
48:c6:45:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:40:01 2025 by rpki-client