Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
File: xb14VKoFD9blUPx80CtVhzC_u3o.mft (raw, json)
Hash identifier: ObSJaRHzCh87EAJiID1g0YilNUtk+aJp3RCXq7JtPoI=
Subject key identifier: B5:36:31:BC:30:8F:77:C2:66:1A:33:D7:A2:12:8C:25:FD:F1:A4:A8
Authority key identifier: C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
Certificate issuer: /CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Certificate serial: 0196B96C69F6BB17D192F595192A1A363A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
Manifest number: 0480
Signing time: Sat 10 May 2025 09:00:11 +0000
Manifest this update: Sat 10 May 2025 09:00:11 +0000
Manifest next update: Sun 11 May 2025 09:00:11 +0000
Files and hashes: 1: 5uFqMN3aXlbPQyR_zV-aShdoN_Y.roa (hash: jy9SGKilmmhulS0SQ8USL/F90L5q42BS/yYoLYQj470=)
2: xb14VKoFD9blUPx80CtVhzC_u3o.crl (hash: tWyS/wKB/4ebtM+mZUUH/jJkPwOibGE2vseoNxchG9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 09:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:69:f6:bb:17:d1:92:f5:95:19:2a:1a:36:3a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Validity
Not Before: May 10 09:00:11 2025 GMT
Not After : May 11 09:00:11 2025 GMT
Subject: CN=b53631bc308f77c2661a33d7a2128c25fdf1a4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3c:00:55:1a:bd:d5:33:42:ed:4b:a1:88:32:
c0:2a:3b:48:e2:24:88:b5:56:bb:6b:79:85:3c:da:
d8:dc:db:88:28:c4:ef:ff:20:f3:df:ab:e9:b3:3d:
3b:8a:f4:ac:d8:eb:7b:35:7a:73:c0:34:91:77:a2:
f2:48:2a:6f:4b:f2:94:81:b6:8a:49:4f:4b:93:a9:
e1:77:d1:7e:8e:37:d0:dd:b9:ba:c2:38:f6:65:08:
02:5c:e6:72:f4:38:6b:d7:11:e6:d0:3e:cd:17:d9:
59:61:cd:57:6d:cb:8a:cd:a5:91:c9:09:8c:eb:d8:
11:07:a6:8d:06:2f:e3:d8:d8:86:66:83:ec:0e:a2:
8f:41:d2:d5:dd:ff:25:53:16:56:a9:e8:4e:8b:51:
ce:46:fd:fd:c4:bf:52:df:2c:0c:15:e2:23:2b:d8:
51:c8:e3:66:61:43:c6:5a:2f:32:9a:4a:5a:73:44:
20:03:c5:df:9c:f6:ee:e3:5a:8b:e4:8f:f1:a4:38:
63:46:04:19:56:db:f6:6a:79:8f:e6:1a:b8:cc:2f:
4f:52:5b:e3:6a:20:2c:37:11:ce:3d:41:00:ff:6d:
26:7b:21:d1:69:39:bd:cb:57:6e:a1:00:de:3c:27:
6e:ed:b5:df:19:db:3c:b5:7a:b0:19:c3:c0:3e:8b:
57:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:36:31:BC:30:8F:77:C2:66:1A:33:D7:A2:12:8C:25:FD:F1:A4:A8
X509v3 Authority Key Identifier:
keyid:C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5a:a8:a6:92:48:65:7a:66:0b:c0:03:ea:ff:e5:79:4d:94:
fa:4f:68:34:30:28:62:ed:30:a6:82:35:a9:a2:c5:da:dc:ed:
2d:d6:20:fe:06:ac:9a:b0:c8:76:9d:d6:f3:3b:0d:1f:c3:53:
c6:da:21:05:02:ee:37:58:45:93:39:f2:23:5b:ef:0d:7e:b9:
27:52:ca:fc:e3:06:2c:f5:ac:c6:51:07:69:3f:6e:f5:68:eb:
94:77:d7:8d:5f:c7:22:6f:a8:26:ef:9d:da:2d:09:a8:e7:52:
e0:f2:bc:0d:bd:cd:83:4f:96:91:36:e3:7a:14:43:db:50:54:
58:8c:14:01:8e:e5:f7:39:0f:e6:37:0e:19:66:80:eb:06:c3:
34:d8:1e:c3:96:50:00:4c:9f:f7:ec:03:69:cf:b4:40:18:84:
9f:6a:5d:74:f3:e7:45:16:89:70:cf:db:e1:36:9c:6d:21:88:
e8:f3:e9:52:fa:d9:83:ae:89:38:3c:36:93:59:54:77:11:e7:
f5:cd:b4:b7:e5:e6:a7:29:96:a3:65:39:7c:5f:f6:70:18:15:
4e:25:f9:16:34:f6:11:0c:57:aa:41:56:78:08:aa:90:52:d9:
75:34:20:62:5a:67:49:ff:6b:8e:f0:e4:4c:f2:b7:46:4b:63:
10:a5:4d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:02:07 2025 by rpki-client