Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: pe5lszWY3jzL5yT7peLCJIVRzFrnHukiArTbrBEd0gw=
Subject key identifier: 0B:9B:C0:D0:19:D3:87:D1:51:0F:BE:B2:24:BB:FE:8A:F9:93:D8:24
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 0196C3F0985B396FB5D5FDAD5E92EB3DD440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 10:00:46 +0000
Manifest this update: Mon 12 May 2025 10:00:46 +0000
Manifest next update: Tue 13 May 2025 10:00:46 +0000
Files and hashes: 1: LllBFDs2gYBZI_Py2Vbfk71EYWc.roa (hash: jTm21xMBscMU1inWn9X97hwUinpmwWspFNpJiHwAkIk=)
2: wreINdEXrzvFl4TS78nixyXhWT4.roa (hash: BY0i1f9j/EXwIFUv/m6UVc3+37fV7YdiWDXciFmQ0+g=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: AUhxZ9/3piN6u55u7EMWfV//hd0iJhyo1AaioO/fkc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:98:5b:39:6f:b5:d5:fd:ad:5e:92:eb:3d:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: May 12 10:00:46 2025 GMT
Not After : May 13 10:00:46 2025 GMT
Subject: CN=0b9bc0d019d387d1510fbeb224bbfe8af993d824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:33:00:ed:6c:8a:ca:e0:92:ed:80:62:e2:40:
e7:37:fb:a4:d0:28:2a:de:2e:15:a4:59:b3:0f:0d:
17:10:e9:48:14:4f:7e:6b:bc:a5:24:f4:24:55:47:
91:75:00:4c:fb:01:ec:43:75:e7:d1:bb:1a:37:3d:
ef:11:a1:23:a6:88:72:81:b1:9d:0b:eb:90:ae:a5:
ae:ef:23:ca:53:f0:ad:78:10:3d:ad:40:5a:a2:65:
5d:f8:a6:e9:8d:d3:dc:94:46:de:59:77:23:5f:8c:
6f:09:c3:ec:74:56:5e:8f:0b:8a:f7:36:60:0b:f2:
0a:ef:a3:3a:55:11:f3:ff:ac:57:9f:14:7c:f2:6b:
cb:d7:24:1d:ef:57:88:40:21:52:31:3c:4e:02:76:
23:02:41:b8:f6:96:06:9e:bc:63:05:d0:54:e3:50:
ba:48:14:3e:9f:8a:5c:9b:12:f4:5b:05:65:f9:86:
a9:c0:4d:99:ad:d9:c5:9c:7a:2b:43:bb:ef:7c:42:
0c:47:eb:4f:a1:5e:8f:fa:6f:30:0a:0d:d3:b5:70:
20:2d:1f:c8:09:a3:f0:69:d9:10:53:df:a4:bd:0a:
ec:75:1a:29:9e:d8:b6:76:59:6c:57:d1:78:81:eb:
6f:17:f7:9c:ae:d8:c7:ef:4e:e4:77:40:7a:f2:f0:
d8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9B:C0:D0:19:D3:87:D1:51:0F:BE:B2:24:BB:FE:8A:F9:93:D8:24
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5f:5e:7c:a5:a6:6b:af:e7:dc:d1:98:9f:c4:9a:e7:2d:d0:
27:d5:00:a2:8e:e7:71:b9:09:32:7b:3f:2f:2f:53:11:df:03:
5e:1f:54:b6:5a:92:b3:00:01:fb:ae:8f:33:2a:bb:41:89:e1:
a3:73:9f:a9:6b:b3:87:2a:21:e0:59:0b:bc:f2:af:2d:91:4b:
b6:f7:37:3b:8d:98:e0:33:9d:03:2e:df:e5:3d:9e:f4:75:cf:
ca:2c:99:03:5b:bb:f9:80:16:81:f8:b7:3a:72:ca:cc:2c:70:
dd:a0:c9:6e:a6:55:b1:ba:65:a4:8b:0e:c0:1b:60:ab:73:91:
23:6b:1e:87:d8:58:ff:34:11:e5:6e:0a:a9:a1:60:9e:db:f8:
a7:3e:d6:32:4c:c3:bf:47:f3:7d:3a:a0:0b:65:28:53:a5:45:
d2:82:f4:3b:dc:1e:b8:77:47:26:72:14:d2:3f:59:68:76:8d:
7d:9f:9f:b0:a5:ad:42:c9:ed:3e:59:6e:88:9c:77:de:a7:fa:
89:8a:7d:6d:4b:10:3d:02:64:ff:ba:54:83:af:73:c3:12:e1:
6d:1b:30:80:97:e2:14:00:7a:84:93:26:b9:46:7f:2e:1e:6c:
3d:1a:a6:1d:96:f2:56:d2:ae:9c:3b:73:b0:2f:8a:65:c4:5f:
d4:58:e5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:40:50 2025 by rpki-client