Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
File: Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft (raw, json)
Hash identifier: 5FS3cvyCpORWCOmtMauXXdK+NGPbZ+J6ghqOH9RYDm8=
Subject key identifier: C3:81:93:AA:CE:B9:51:9F:9C:69:EC:FE:25:19:7B:50:2F:62:4B:D2
Authority key identifier: 5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
Certificate issuer: /CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Certificate serial: 0196BCA4F5090860D1A731AC075BA84B0E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 00:00:49 +0000
Manifest this update: Sun 11 May 2025 00:00:49 +0000
Manifest next update: Mon 12 May 2025 00:00:49 +0000
Files and hashes: 1: Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl (hash: Mu3vD22wJoMLMUzOTO9yx9dybNLhLU87LxyM1CatShI=)
2: vK5h-o0ZiTjYgr7TtTUx7l9N3_U.roa (hash: GzoVl428O56Z6DSR6RbFH+KhA2k4PkQR1ShOytMGxs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:f5:09:08:60:d1:a7:31:ac:07:5b:a8:4b:0e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Validity
Not Before: May 11 00:00:49 2025 GMT
Not After : May 12 00:00:49 2025 GMT
Subject: CN=c38193aaceb9519f9c69ecfe25197b502f624bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:68:ad:ec:ac:e2:84:62:aa:8f:72:43:55:
9d:f0:35:6f:37:8a:4b:4f:68:77:87:6b:de:8c:4f:
30:68:7a:c5:6c:cc:ee:0d:d2:97:0e:de:a3:91:4c:
b1:d2:13:b9:39:28:e0:04:e5:69:f1:1e:1c:4e:3e:
c9:d0:b9:f8:88:42:fe:e3:c5:3e:26:64:1f:96:7e:
c3:66:50:74:5e:1b:52:1a:0a:c0:e1:23:35:55:7d:
1e:29:82:d0:92:bc:7b:67:15:e2:1f:ba:4b:c3:b0:
36:cd:5e:ae:7e:b8:79:cd:9f:4b:e3:0f:1c:45:16:
44:bd:05:61:19:b2:7e:c7:1a:01:57:c5:35:df:16:
29:ed:7a:fe:56:7b:05:75:4e:7a:90:cf:2b:ee:ff:
1a:aa:09:57:2f:9c:e7:39:3b:b8:73:c0:4e:f8:7c:
90:09:08:53:52:7f:9d:4b:b3:f0:7e:5a:6b:49:e1:
9f:5f:23:05:4c:b7:0f:7f:51:dd:77:6a:b7:54:ca:
e1:97:c7:0f:46:45:a9:67:1a:62:57:58:76:9c:dd:
b5:bb:ee:df:9f:2d:5b:a2:b0:65:8f:dd:be:6a:71:
ba:10:06:91:d6:00:5c:96:ef:34:75:9e:55:03:08:
42:c5:47:1e:fc:ca:77:c1:15:d6:ec:62:0c:b9:72:
0b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:81:93:AA:CE:B9:51:9F:9C:69:EC:FE:25:19:7B:50:2F:62:4B:D2
X509v3 Authority Key Identifier:
keyid:5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:58:02:13:72:05:88:e7:26:19:ad:21:b4:49:ff:c4:0f:f0:
de:7e:5d:38:b5:c0:0c:ca:d3:c0:bb:ea:e1:41:b5:23:13:46:
59:35:20:a8:ac:5f:a4:86:61:20:07:73:50:25:45:d8:52:47:
74:b9:43:ef:35:18:6c:a3:0a:67:dc:d3:99:03:8b:f8:19:5b:
63:19:6c:a9:0f:00:fd:0a:a6:f3:df:5b:26:7e:af:7c:97:04:
bf:0f:00:05:4f:f4:46:fe:88:1b:b8:64:12:88:b2:f7:75:c8:
a3:fe:bc:59:ce:f7:d7:8a:4e:61:d9:14:7a:c7:ea:f5:18:9d:
37:17:3f:e1:73:36:64:03:c1:0a:db:e2:b2:0f:d9:a0:de:c3:
d6:0b:41:f1:07:c2:b5:b8:79:61:14:50:d7:df:3a:23:9d:07:
fd:3a:1c:cc:54:0b:63:07:22:f9:da:79:68:e0:42:af:45:95:
3c:10:a7:ac:25:5f:67:fd:e5:56:b7:be:53:f4:f3:8e:a9:43:
4b:83:cf:02:03:25:86:41:b5:cf:1f:11:c5:a5:1f:cd:63:34:
38:1e:2b:22:a3:61:ec:6a:f9:19:21:20:75:51:a4:91:d0:62:
ab:d4:39:62:86:33:18:4c:dc:bf:2a:cd:02:25:ee:4b:85:1f:
38:74:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:05:29 2025 by rpki-client