Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
File: xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft (raw, json)
Hash identifier: sC9uhU6oae8Krxb0bei2AeaweJRvT0sAUZlPnaobTA4=
Subject key identifier: 7C:5A:E8:52:BA:41:A3:B5:7B:4E:51:2C:B8:97:FA:38:65:AD:5E:44
Authority key identifier: C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
Certificate issuer: /CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
Certificate serial: 0196BE93166CE19A9462D7849EB82091CA3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
Manifest number: 0609
Signing time: Sun 11 May 2025 09:00:32 +0000
Manifest this update: Sun 11 May 2025 09:00:32 +0000
Manifest next update: Mon 12 May 2025 09:00:32 +0000
Files and hashes: 1: Ej1aJMtEaUsf31r33a8meVTKaMM.roa (hash: Gz1wbyymYY+RBy8aeMOwOe+QM7WHCcn8raUIMs60hhM=)
2: xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl (hash: TAndUpMU86oVUf2gHR3VzLeY56uJ8sSn2ViHZTtR5HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:16:6c:e1:9a:94:62:d7:84:9e:b8:20:91:ca:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
Validity
Not Before: May 11 09:00:32 2025 GMT
Not After : May 12 09:00:32 2025 GMT
Subject: CN=7c5ae852ba41a3b57b4e512cb897fa3865ad5e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:01:83:b4:1a:e9:1a:61:1a:a0:28:c7:5e:
7a:44:86:8d:be:6b:aa:4a:ca:b6:48:d8:92:4d:b7:
28:71:bb:c0:9a:13:01:a2:9b:8c:a9:c0:1a:6f:32:
77:b6:2d:fd:c1:4b:96:d0:4d:96:36:a3:a5:2a:c8:
13:0f:f3:7e:ab:07:45:32:c7:9a:a0:31:54:2b:03:
f3:c7:97:d6:be:af:41:b4:a7:b4:c2:07:4f:ac:56:
54:ea:28:23:69:1e:22:92:d9:cd:12:da:90:b6:25:
0c:f2:ac:db:f4:91:76:a5:55:23:e8:dd:35:1b:25:
2f:a1:37:d8:3f:bf:7a:71:bd:15:c4:61:ac:49:a8:
d9:12:52:d5:74:ac:fe:38:3a:d9:50:02:51:b2:7e:
fb:aa:4d:d5:e4:42:a1:1b:06:56:84:af:99:ae:20:
f3:79:f0:6d:a0:47:f5:db:d2:ac:92:b8:0a:a2:b8:
06:5c:43:71:1f:0c:73:ba:89:3e:d6:92:d1:e4:9b:
8a:b6:71:99:6c:14:25:5c:08:ab:7d:d8:dc:ba:46:
db:63:9f:a9:6b:c5:8d:b4:a6:62:ea:75:b4:84:30:
1e:9f:41:61:94:c6:dc:9b:ea:9d:cc:e2:c5:99:12:
f3:67:23:29:fe:94:8b:57:a3:6d:72:4c:fa:91:f9:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5A:E8:52:BA:41:A3:B5:7B:4E:51:2C:B8:97:FA:38:65:AD:5E:44
X509v3 Authority Key Identifier:
keyid:C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a9:b2:fb:de:ee:97:8d:7d:34:ce:fd:e2:e4:c1:83:fd:69:
ae:6c:f3:c5:34:d1:d5:2f:bc:38:ba:e2:70:89:ea:b2:1c:e8:
43:c7:8d:23:59:2c:ad:7f:0d:9d:19:6e:6f:7b:a9:b2:cb:ba:
f3:29:62:80:95:d8:c1:73:14:42:69:42:b6:34:58:15:76:c9:
96:fc:55:6e:25:ef:a9:ad:aa:69:d7:02:05:ca:01:9a:77:d0:
f1:b4:f3:fb:04:91:2c:b5:21:ac:59:e5:1c:8c:f2:20:c6:0e:
52:c6:31:02:e2:e0:4d:e2:4e:82:2c:2e:78:ae:f4:46:9b:74:
7d:7c:fc:d5:e1:f9:a4:73:8d:d7:19:04:de:29:7f:90:85:b7:
e7:6a:63:79:66:b5:43:81:26:ab:fa:2c:90:88:69:71:8f:79:
63:e8:21:f2:0f:f5:8a:32:95:6a:a4:0b:bf:75:f5:e0:38:4c:
96:4e:ba:d8:fa:35:53:56:6d:46:78:bc:e7:0e:80:d9:ad:23:
79:d8:0c:c1:2f:ac:5b:e7:33:bd:f9:09:26:9b:16:2f:68:dd:
5b:03:ba:dc:46:4c:cd:11:e1:7c:46:a2:a9:11:fe:cf:9b:0a:
ee:65:0a:d4:7b:c2:f6:fe:c5:32:f1:43:56:75:b4:70:09:c6:
59:7f:e2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:56:56 2025 by rpki-client