Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
File: xg_8qdjKCPIT5goASMF_uwv2Dnw.mft (raw, json)
Hash identifier: HrH1R3bUOWDZH96Z/YBT3aiaRhMiERUfwNS8TkIAvQE=
Subject key identifier: 14:F8:38:F8:C3:E1:89:B9:47:7D:0D:84:92:FD:20:F4:BF:4B:28:0B
Authority key identifier: C6:0F:FC:A9:D8:CA:08:F2:13:E6:0A:00:48:C1:7F:BB:0B:F6:0E:7C
Certificate issuer: /CN=c60ffca9d8ca08f213e60a0048c17fbb0bf60e7c
Certificate serial: 0196BCA500437C7640992428146432E19EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 00:00:52 +0000
Manifest this update: Sun 11 May 2025 00:00:52 +0000
Manifest next update: Mon 12 May 2025 00:00:52 +0000
Files and hashes: 1: 11lEAhEOetLxn95SvRSXh-Lluqw.roa (hash: ReOSLE0b85HJRKU+RZhB6Hf7GgBYtQi4K1hsRO89zys=)
2: xg_8qdjKCPIT5goASMF_uwv2Dnw.crl (hash: XLmsYQhcx2SWdxV5L3HbsgW6EIYJ/WUsOhwjGonD0GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a5:00:43:7c:76:40:99:24:28:14:64:32:e1:9e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60ffca9d8ca08f213e60a0048c17fbb0bf60e7c
Validity
Not Before: May 11 00:00:52 2025 GMT
Not After : May 12 00:00:52 2025 GMT
Subject: CN=14f838f8c3e189b9477d0d8492fd20f4bf4b280b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d5:41:e1:d5:a7:31:fd:a5:00:7a:01:b2:1e:
ad:c6:69:a3:85:c1:d8:d6:6f:f1:12:94:89:66:b1:
bd:19:22:d3:b9:72:24:44:47:0a:81:23:c4:2e:7d:
8e:7a:02:1e:f9:7c:fd:ed:81:f1:18:f5:88:9a:0f:
b4:24:95:fc:13:38:da:02:d1:cc:a4:f9:dd:3f:7e:
2a:c8:e1:c2:07:ec:2d:22:42:5b:f3:1a:b8:7d:76:
77:66:43:9f:a5:bb:c3:2c:86:8e:8e:39:20:7d:3f:
69:9c:df:13:fd:85:ca:0b:92:45:6f:f1:09:5c:29:
23:90:31:45:82:2d:79:31:bc:8c:5a:b9:44:e9:df:
65:4f:83:1b:17:4f:ec:7c:cc:3e:12:42:65:73:ff:
3d:6e:0d:f6:67:f6:b9:ae:7a:73:75:a8:db:7c:25:
e0:7d:ac:97:e5:4c:d2:70:b8:d6:87:dc:5f:fa:70:
af:25:6b:47:d5:cc:ac:cb:df:3e:fb:66:2a:17:e8:
e0:f9:2a:3a:5a:ef:f4:5c:e2:b9:e5:5c:a0:70:d0:
73:ee:a2:03:c9:73:5d:f8:78:c7:14:d8:44:36:25:
a2:62:6e:a6:d2:a4:86:56:92:db:1e:ac:36:05:5a:
40:1a:01:ce:3a:20:cc:5c:1f:30:ed:c7:76:c3:02:
06:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F8:38:F8:C3:E1:89:B9:47:7D:0D:84:92:FD:20:F4:BF:4B:28:0B
X509v3 Authority Key Identifier:
keyid:C6:0F:FC:A9:D8:CA:08:F2:13:E6:0A:00:48:C1:7F:BB:0B:F6:0E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a8:09:e4:9b:39:39:09:68:c2:fd:bb:37:5e:8b:7a:c1:be:
ad:cf:aa:14:9e:bb:53:a0:7d:f3:54:4e:67:1e:6a:42:cf:bc:
ca:d9:59:b2:fe:04:d5:b2:11:93:a8:d0:b1:60:80:9b:ea:31:
8b:b3:60:a0:dd:71:aa:17:4c:f5:74:bf:ad:4c:e5:2f:8b:dc:
aa:bb:41:b5:f0:7f:80:b0:00:eb:87:e9:e2:85:60:9a:6e:d3:
c2:e1:2f:8d:55:0b:33:1a:31:1e:5e:e7:5e:4f:fd:09:b8:4f:
42:15:20:8c:03:ee:f2:7d:40:42:56:11:1d:10:32:21:c8:94:
4a:19:50:b4:2d:95:fd:4d:cf:6d:1b:a4:f5:c2:95:b8:c1:2e:
e4:35:12:6c:b6:1d:09:8b:fb:f6:48:3a:ee:8a:1d:57:b6:42:
fa:9e:9e:3c:e1:3c:ac:7f:2f:ca:23:e0:cf:b3:61:ec:59:39:
ea:f2:b0:42:1b:65:5e:00:d5:e7:b5:36:1d:ca:10:c2:fa:5e:
1e:01:63:f2:a5:fe:62:cf:2b:00:98:79:58:a6:8c:37:d5:ea:
23:1f:a0:ee:d6:39:0c:64:26:eb:36:c5:f0:87:96:6c:6f:c8:
56:68:12:da:dc:8a:5e:90:02:74:ec:b1:8f:41:d6:4c:0d:a8:
c9:3a:36:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:15:05 2025 by rpki-client