Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
File: XfQO50ielcV_EEJxkZ2iaLxRP5s.mft (raw, json)
Hash identifier: fBIadgghz6sfOzkxOicCeCjUo+1HdWOCmEIIzAUpcaY=
Subject key identifier: 7B:53:65:F6:A2:9E:06:CD:E7:2A:CE:A8:04:0F:E4:C9:EF:43:90:7F
Authority key identifier: 5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
Certificate issuer: /CN=5df40ee7489e95c57f104271919da268bc513f9b
Certificate serial: 0196C202465CD7E46484E579909111443143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
Manifest number: 0E0F
Signing time: Mon 12 May 2025 01:00:50 +0000
Manifest this update: Mon 12 May 2025 01:00:50 +0000
Manifest next update: Tue 13 May 2025 01:00:50 +0000
Files and hashes: 1: KK_qi4NMLcaN6VX_fs5Nnpo24oQ.roa (hash: o1mYnl0sun9DJGzd+XokmvL8uGfknZk5uv8J3esnry8=)
2: XfQO50ielcV_EEJxkZ2iaLxRP5s.crl (hash: eIHHHKY1I6sSrqb1E8KEgUm61Ni5YFv46NF4Ztwtt2M=)
3: nYXV0oeOr7H1U28AOUuilcsp0nU.roa (hash: le0as7/dQRPjlA2JPpfjCeLlBJxV/pSf9ynVav6lgxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:46:5c:d7:e4:64:84:e5:79:90:91:11:44:31:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df40ee7489e95c57f104271919da268bc513f9b
Validity
Not Before: May 12 01:00:50 2025 GMT
Not After : May 13 01:00:50 2025 GMT
Subject: CN=7b5365f6a29e06cde72acea8040fe4c9ef43907f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f3:d7:cc:05:36:1b:ba:d3:1e:70:4d:fa:ef:
9e:7c:d4:54:2b:df:d2:df:25:84:1a:df:1d:5c:10:
70:52:09:b6:c9:79:e1:49:43:fa:64:96:e1:ec:c0:
ac:c9:42:84:30:11:b9:c3:6b:e5:a1:85:00:ee:5e:
4c:2a:37:b4:4f:c1:33:82:51:44:03:39:e1:aa:2b:
09:e8:be:cf:1a:19:e2:3e:74:4e:5e:c1:e3:13:9b:
34:3b:37:0e:6e:d6:9e:7a:7a:10:0d:fa:0c:8d:40:
c2:9e:02:55:40:82:b8:33:79:14:68:3e:44:d2:02:
a0:92:2c:95:f1:fb:3e:a5:62:54:2f:98:c6:3e:72:
be:5e:22:f3:af:27:25:78:45:08:eb:51:5e:45:e7:
dc:dc:3e:32:b3:d2:17:31:a7:1c:69:ca:f7:b5:1a:
0a:58:32:47:f2:bf:57:6d:cd:c2:46:d0:bb:a6:db:
87:7c:88:de:59:de:b3:d7:c4:54:c6:da:e7:b5:d1:
fd:79:f2:d5:b9:da:9a:25:14:ae:35:24:c8:b6:40:
e6:1d:1b:68:fc:fb:dd:8e:01:50:ae:1f:2f:f8:1a:
6b:69:8b:54:4c:ef:22:5f:ae:92:d2:a5:8c:db:5a:
db:a4:ae:8a:72:8d:f7:8b:81:c2:12:3f:94:8d:55:
86:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:53:65:F6:A2:9E:06:CD:E7:2A:CE:A8:04:0F:E4:C9:EF:43:90:7F
X509v3 Authority Key Identifier:
keyid:5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e4:86:41:f1:d4:3e:64:e7:37:1f:f5:ce:28:24:81:ec:c0:
19:53:e8:93:c6:b6:58:63:cd:d1:60:6f:a0:ce:00:fd:1a:c9:
1d:47:7f:0a:61:eb:f8:94:fc:f1:3c:26:47:c6:cb:80:ff:e8:
bc:61:43:ff:43:c0:0e:99:42:fb:8f:9b:78:89:eb:cf:0e:dc:
85:a9:ae:33:47:37:82:90:aa:b7:ff:99:0b:ad:5c:e3:13:22:
03:9d:ec:ed:41:9a:eb:de:11:94:1c:c5:79:c9:69:ec:37:d7:
c7:1d:b0:35:02:00:c4:53:34:68:c7:23:db:f8:61:81:d7:e6:
6e:0f:94:16:67:df:6e:d6:80:7b:a0:24:72:3a:9e:19:3c:0f:
4f:06:14:78:dd:ea:b9:ef:aa:44:70:a6:7f:ac:51:62:66:ea:
06:6e:ec:1d:07:cd:a3:7a:3e:18:3f:d4:07:dd:6b:e1:45:33:
46:6a:d1:06:2a:3a:57:3f:0e:5a:7c:23:51:8f:53:47:f7:1c:
3b:b8:14:30:37:a1:61:e9:e2:a9:80:46:16:50:a5:bd:92:a4:
19:cb:f6:60:cb:18:9c:52:6c:20:70:ac:c3:dc:30:33:97:7a:
05:0c:ce:6d:42:b7:22:da:03:da:6c:c4:3f:56:8b:dc:e0:4b:
95:eb:ba:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:20:32 2025 by rpki-client