Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json)
Hash identifier: R0/bpcnisnZ8re8v8AHC3ydrfiTBioTWWFM7CHxecUk=
Subject key identifier: 62:B9:CF:6B:F7:EB:7E:11:9B:3E:D1:89:10:F8:8C:88:0C:89:93:B6
Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03
Certificate serial: 0196C8A926020A92392FAEBE66DFD76DCDA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
Manifest number: 0108
Signing time: Tue 13 May 2025 08:00:50 +0000
Manifest this update: Tue 13 May 2025 08:00:50 +0000
Manifest next update: Wed 14 May 2025 08:00:50 +0000
Files and hashes: 1: TCQdEf5OkmR_hyFaSJHAcpQiWBg.roa (hash: ui4nGeDk3vmrgHUT1uzBGDl50T1i4iyiNWD1GcPY30k=)
2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: ny+byb90N195whLybiH2wCIeeLhXZbzTcL9Oeg+d+P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:a9:26:02:0a:92:39:2f:ae:be:66:df:d7:6d:cd:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03
Validity
Not Before: May 13 08:00:50 2025 GMT
Not After : May 14 08:00:50 2025 GMT
Subject: CN=62b9cf6bf7eb7e119b3ed18910f88c880c8993b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:48:b2:d1:a5:88:3b:f6:6b:e1:62:53:55:
1b:48:ab:97:d6:70:82:2d:9f:b1:a2:90:c6:04:8f:
5b:82:c1:49:fe:27:8c:a0:15:a2:c6:aa:3e:87:7b:
0c:d2:4a:a2:0f:23:ea:c5:a4:21:01:eb:a9:1b:c1:
89:73:f8:2d:de:43:d3:51:f7:fd:43:7b:0f:11:f0:
7c:19:f2:7f:f1:bb:88:5b:17:c3:2d:1d:3c:7e:70:
87:fa:68:68:6d:bc:ed:aa:14:9c:84:6b:c5:62:a6:
88:61:91:ec:0e:83:81:b7:bf:a8:87:4e:f7:6c:00:
64:f5:50:66:d3:55:fd:ba:bf:dd:b3:5c:c4:0b:64:
02:9a:88:a1:fc:a2:94:a3:0a:ef:74:0c:59:8e:93:
ae:0f:82:f6:62:72:8c:b4:83:60:87:b8:c6:99:86:
a4:ba:f8:08:65:7d:de:ba:d4:94:13:75:a7:d8:61:
3b:bd:ca:3d:8f:67:a6:2c:54:8d:46:5d:8b:7c:89:
08:60:9e:e2:01:ac:0d:e8:99:b1:79:30:b1:01:5a:
63:4a:2d:84:fb:44:3f:20:af:4c:14:3a:39:c8:2a:
fc:e7:d7:43:87:38:ab:24:ca:69:a1:21:e1:bf:dc:
02:75:17:7f:76:f7:da:a1:b3:76:09:6d:ab:03:34:
d8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B9:CF:6B:F7:EB:7E:11:9B:3E:D1:89:10:F8:8C:88:0C:89:93:B6
X509v3 Authority Key Identifier:
keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9e:9a:26:67:6e:43:9d:e4:1e:55:04:42:af:54:32:09:e2:
07:2c:7b:47:15:49:27:bd:ed:36:5b:01:cd:d9:dd:ec:82:a5:
bf:f4:e4:d1:bc:2c:35:b6:a8:49:13:8f:ad:84:d7:db:66:4c:
19:d1:db:90:d9:87:ca:f0:58:70:8d:d6:a3:98:4e:24:db:9a:
c8:c5:36:1d:9e:2d:2a:c4:fe:97:f0:4c:cd:70:a6:64:f5:46:
02:d2:d2:c7:20:be:88:5a:96:63:cf:2c:81:f2:4d:cd:ed:ec:
7c:90:a4:0e:6e:2d:dd:71:b4:81:1a:a1:b9:6d:21:2f:b7:6e:
74:06:e2:2a:48:a5:c1:d7:fa:f5:75:35:36:87:31:25:ac:b7:
a2:3c:44:5d:68:33:a7:1d:a7:0d:de:3d:54:2e:d8:1d:32:c4:
81:d7:b6:15:4b:0d:19:5a:95:67:53:ae:7f:1e:da:90:c3:79:
3e:64:5a:fe:80:56:38:49:5a:2e:86:90:5f:eb:5b:13:e9:9b:
6c:6e:a4:c7:65:1c:27:14:c7:c4:ac:5c:2d:e1:44:62:07:40:
46:ea:c6:03:1e:3f:47:4c:fb:e6:29:7a:60:6e:8f:a2:5a:08:
07:b9:40:d1:8b:76:9f:06:8d:db:3e:a6:9e:43:5c:43:8b:de:
08:55:b3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:50:44 2025 by rpki-client