Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
File: XoEWTOOIJZGG-6AVrMSw60i-tVI.mft (raw, json)
Hash identifier: mlUV+S2U366YaLBBJJXeFWhhW3+KCb8IMOPRsLdJGao=
Subject key identifier: 3E:04:6F:FF:D2:27:B6:93:59:5B:62:00:26:38:36:73:4F:4C:CF:7C
Authority key identifier: 5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
Certificate issuer: /CN=5e81164ce388259186fba015acc4b0eb48beb552
Certificate serial: 0196B77E71B07F60EFA7AD835E6FC60F40E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
Manifest number: 152E
Signing time: Sat 10 May 2025 00:00:39 +0000
Manifest this update: Sat 10 May 2025 00:00:39 +0000
Manifest next update: Sun 11 May 2025 00:00:39 +0000
Files and hashes: 1: XoEWTOOIJZGG-6AVrMSw60i-tVI.crl (hash: QdmkheJp8paswdXsSw8ebYWjVq9WBFQoa+UAb6Zop3U=)
2: ewmzu1c5hlX5WEsUAJJ_EBHHe8c.roa (hash: LqYC06a3Uz9AaZO7Y0iTGjC5jKrTveBVSDvC1hJ3I8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:71:b0:7f:60:ef:a7:ad:83:5e:6f:c6:0f:40:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e81164ce388259186fba015acc4b0eb48beb552
Validity
Not Before: May 10 00:00:39 2025 GMT
Not After : May 11 00:00:39 2025 GMT
Subject: CN=3e046fffd227b693595b6200263836734f4ccf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ba:d8:3a:af:5a:31:75:3a:5a:84:2d:b3:d1:
a7:be:4a:54:aa:e1:98:4f:84:a3:78:fe:ae:c8:e5:
89:14:bc:ff:1b:82:5d:75:77:40:31:29:e2:58:a9:
cd:7f:3a:52:f5:5e:9c:7a:85:a7:ee:70:05:26:31:
64:d8:70:fc:be:5b:71:86:5a:a0:43:49:5d:2d:f1:
0f:29:85:a4:16:94:b6:4c:a3:c9:19:fe:dd:69:d1:
6f:12:70:33:1b:cf:09:d5:f8:61:e3:fc:bb:46:83:
7b:51:50:8d:3d:cf:d1:85:40:ee:8c:8a:94:3f:33:
95:cb:91:e6:d2:32:fa:b3:f3:f4:c3:e0:6f:52:2e:
a5:f1:88:cb:ee:ee:24:f1:83:0c:c8:1a:f4:a2:d0:
e2:9d:65:99:d6:e8:e0:d0:be:b7:70:56:c6:7a:17:
f0:c2:ef:35:65:16:7d:95:d1:e8:9f:84:4a:4a:64:
41:29:1d:09:54:1b:54:b6:ff:37:2c:e1:e1:6f:80:
f8:f3:67:41:9c:6e:db:4c:42:4f:0d:d5:fc:14:83:
26:04:e3:43:af:05:3c:ad:40:ce:c5:8e:ef:4f:c6:
72:c1:ad:24:16:01:cc:88:15:b9:f4:e5:54:ae:6b:
7d:33:3a:9d:3e:31:75:00:5c:db:e4:fd:fb:c9:a4:
8a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:04:6F:FF:D2:27:B6:93:59:5B:62:00:26:38:36:73:4F:4C:CF:7C
X509v3 Authority Key Identifier:
keyid:5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:61:f6:4a:e6:9e:e9:da:69:d6:80:63:39:84:e7:dd:1f:f0:
8d:6c:53:83:d2:94:77:14:be:24:8b:a7:94:c1:98:66:4b:ba:
e8:33:79:f6:5a:93:6f:c8:02:34:8a:17:6f:54:3a:2a:e3:37:
d7:57:d7:0c:c1:66:d8:d3:60:22:c5:11:50:bd:98:db:96:88:
51:f5:76:8b:f6:ee:5f:b6:56:05:3b:8e:66:17:b2:ee:86:a4:
1a:a5:c4:c1:bb:17:14:8e:f5:5c:58:3a:7a:11:1e:1a:14:4b:
7e:ee:9a:ab:4c:b4:00:48:b5:d2:8c:56:42:20:e5:37:74:82:
23:fd:8d:2d:ff:d2:e4:d7:24:b7:d7:a6:34:c3:97:72:41:f5:
a4:90:81:cb:71:b1:43:3b:e6:3c:67:48:77:cc:e1:8b:60:36:
1b:07:fe:5c:cb:ba:54:65:90:3e:52:6c:76:8e:ea:1c:de:11:
b1:66:38:fc:2b:4d:c5:93:22:01:84:fe:fb:ab:3f:44:35:c6:
0c:b4:35:d2:02:75:30:79:63:d8:81:d2:eb:93:15:01:e1:57:
d4:52:53:99:d5:52:9b:c0:9c:71:46:b5:7d:47:4b:fd:16:8b:
51:89:80:6f:62:be:21:42:43:d6:ef:d2:f9:e2:cd:89:a4:29:
ac:07:dd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:32:48 2025 by rpki-client