Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: aM3EB7R2pa1OIV2Bmbxz1hgzNogOydJOOXlw0AD4EKE=
Subject key identifier: CA:07:FF:50:55:30:53:1B:4A:B3:01:EA:DF:56:84:9F:91:57:97:0E
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 0196BC6E11EA955682CCD45A2093A6CCB451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 23:00:52 +0000
Manifest this update: Sat 10 May 2025 23:00:52 +0000
Manifest next update: Sun 11 May 2025 23:00:52 +0000
Files and hashes: 1: 60je5SoeoIIvExp08AfHAba81Gg.roa (hash: OYL+m6W/OD3kcGFXK2Ewor0X0LhaICB75RQGsXvyc9g=)
2: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: X2javSr9BCc7LcOUBka3wAAFqkDru7EZiVwel1IU42g=)
3: er13LyaEEpybrKtiNYKCEMG-QS8.roa (hash: aEnyWiHyU9gmwh/2jnL5BvTsMw/v/0bYu8DgEkcY+S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:11:ea:95:56:82:cc:d4:5a:20:93:a6:cc:b4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: May 10 23:00:52 2025 GMT
Not After : May 11 23:00:52 2025 GMT
Subject: CN=ca07ff505530531b4ab301eadf56849f9157970e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:6f:b9:6b:22:99:7b:85:95:8c:0c:89:e6:
00:6f:21:03:59:d5:00:bd:57:05:89:55:11:1a:ee:
3b:8f:e9:7e:80:4b:00:56:72:ea:b7:32:b3:71:47:
4d:54:70:2b:ad:2a:a8:69:52:5c:b7:31:7c:ad:3b:
8a:f5:06:f7:52:e0:89:ad:c8:06:91:d2:99:cb:77:
de:26:30:9b:63:c7:bf:39:a3:39:8d:9e:9c:a5:57:
1a:5d:36:15:1b:21:df:61:1f:ee:61:61:41:38:a5:
52:5c:e8:cb:d5:e9:af:1f:63:c9:ec:6f:57:67:34:
7b:b3:b8:d7:ab:52:e9:75:7f:1d:e7:a1:25:a9:18:
ee:58:59:c1:6a:de:d4:33:6b:8f:34:22:e5:df:e7:
33:6b:b9:73:94:da:13:07:aa:1f:46:9f:41:57:c4:
0b:54:bf:f8:03:f2:13:bb:6b:dc:65:29:b3:dd:4b:
7a:ba:4f:3d:ba:68:8e:44:74:57:55:cd:5d:57:ea:
3e:b3:4c:f5:98:8f:a1:d1:c4:e0:46:fa:ca:96:3a:
bb:c2:07:90:e0:fb:43:70:74:83:d4:4f:85:e1:a9:
9f:4d:2a:03:1b:1a:0e:41:fe:9f:25:ab:59:f4:59:
bd:59:2f:64:e6:10:f0:4c:4f:a4:8b:03:b1:25:fb:
a8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:07:FF:50:55:30:53:1B:4A:B3:01:EA:DF:56:84:9F:91:57:97:0E
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b9:5b:e6:d9:12:56:7c:21:de:da:69:af:d2:3b:c3:c7:c3:
51:9a:3b:f0:8e:21:a3:eb:ad:80:0b:14:1c:9e:78:e6:d7:63:
35:45:b6:2f:cd:c2:bc:df:03:cd:ad:fa:0c:e9:e1:f3:f3:90:
4f:71:35:c6:4b:55:db:55:65:be:af:40:eb:14:76:3f:c1:96:
c0:56:1c:74:be:c9:f0:c9:38:b5:a5:35:d4:c3:61:92:13:8a:
56:82:eb:03:22:d0:64:2a:db:86:fc:6a:0e:0e:31:7e:f6:24:
3b:7b:8f:4a:ad:64:6b:2f:a2:9a:43:4e:d5:ec:26:e3:7f:34:
1a:90:cd:18:e7:f8:07:8a:3f:42:5b:ed:74:90:b7:15:c2:a1:
44:cf:41:38:33:a8:4f:df:aa:c7:54:f0:99:23:e6:76:e9:1b:
3d:c4:6c:84:71:d6:29:28:35:d5:08:be:ef:45:97:fc:57:c4:
1f:de:52:a9:ff:eb:37:55:82:4f:10:90:38:cc:81:35:72:f6:
52:4a:db:3b:95:c1:75:3e:5a:77:e6:ff:63:2e:ca:e3:68:b0:
10:08:b5:32:d4:97:00:d4:0f:3d:7b:38:89:8c:58:88:77:ce:
88:60:0b:a7:80:1d:35:31:39:fc:bb:ab:d7:74:7d:9b:ae:fe:
0a:87:28:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:09:30 2025 by rpki-client