Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
File: xYe5zadWA-sNnjdxZ79-DI5EBAM.mft (raw, json)
Hash identifier: 6z/seCavUhFug+qnfpoQKrVtvWcJopYYaVdhcLX1mjg=
Subject key identifier: 09:58:5E:2E:CE:6A:CB:DD:39:47:95:F8:38:B3:F7:86:BF:78:57:0A
Authority key identifier: C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
Certificate issuer: /CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Certificate serial: 0196B4B424D6792097E4EC93A58AC48B9F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
Manifest number: 0E5C
Signing time: Fri 09 May 2025 11:00:26 +0000
Manifest this update: Fri 09 May 2025 11:00:26 +0000
Manifest next update: Sat 10 May 2025 11:00:26 +0000
Files and hashes: 1: 2bRBlMS8mkEOsT7iLZp1HMc84Xo.roa (hash: CRan8iZGqQIXvLKVDuE31EVqd8lIF+Eg5+VWJIeFz/I=)
2: xYe5zadWA-sNnjdxZ79-DI5EBAM.crl (hash: FRSeILuxsTNecU3WT4lOumWL5VVHjC3IsJl6MDGAq7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:b4:24:d6:79:20:97:e4:ec:93:a5:8a:c4:8b:9f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Validity
Not Before: May 9 11:00:26 2025 GMT
Not After : May 10 11:00:26 2025 GMT
Subject: CN=09585e2ece6acbdd394795f838b3f786bf78570a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:bd:68:5b:0a:04:2f:b7:8c:cb:af:8d:b2:
78:c1:f1:1b:c3:77:b6:fd:bc:d3:ea:45:83:0a:78:
ca:33:a9:47:b7:9d:7d:99:ce:c7:b4:d7:f4:15:67:
74:21:11:ea:4c:41:f7:a0:b8:39:af:09:72:61:df:
66:0f:c2:5a:43:4f:f9:f2:c5:4b:56:ab:dd:c3:c1:
53:83:10:43:02:04:ea:22:27:ff:d0:2a:f3:ed:d1:
a6:c8:0a:4b:26:14:69:2c:3d:f9:39:04:48:d5:a4:
08:72:31:b9:2c:c3:96:7e:cf:e0:94:67:a0:a2:b0:
fd:c2:87:b8:e5:3f:a0:8e:95:2d:ab:35:95:fc:a7:
8b:b0:75:38:35:86:85:b5:d0:e1:25:78:58:e0:51:
5f:08:de:96:4f:aa:53:02:9c:75:47:c3:fb:7b:81:
cf:a7:c9:eb:52:ac:7a:fb:98:35:00:82:32:b1:87:
92:d2:fe:35:fe:0f:95:13:ae:61:89:cd:ad:dc:70:
d4:6c:26:3e:72:6e:11:ac:aa:4b:1e:98:3d:dc:fe:
5f:ac:9f:3a:fa:11:65:d3:90:15:9f:aa:a1:35:72:
95:25:ff:a6:f6:bc:e1:08:f5:3b:d5:58:3d:6f:cf:
7f:ca:86:0a:73:44:01:29:e3:02:51:e2:3e:fd:d0:
33:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:58:5E:2E:CE:6A:CB:DD:39:47:95:F8:38:B3:F7:86:BF:78:57:0A
X509v3 Authority Key Identifier:
keyid:C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:dc:e9:98:de:75:eb:16:62:7f:31:71:7a:35:b0:72:24:a9:
42:48:cb:07:cd:fc:d8:d6:9b:94:c6:4c:8e:c7:b4:e4:68:5b:
7c:f3:3b:75:5c:ca:fd:da:80:9a:6b:ba:e1:3f:0a:8c:e8:7f:
d7:88:73:33:48:23:db:a6:9f:b5:bc:f7:1c:11:37:91:e9:e7:
2a:70:66:da:7e:c6:a4:79:ce:6a:64:4d:dd:a9:1e:c7:5a:67:
15:8d:05:86:2e:8b:cd:8c:9b:f9:54:5e:2c:1e:71:3b:87:12:
71:88:96:f1:aa:a1:98:55:17:cc:3c:a9:ee:99:8a:6a:d9:ce:
33:03:a0:c0:9b:34:9e:ae:53:c1:69:cb:b5:a8:72:b2:87:38:
d3:d3:59:2c:b0:f1:01:e9:76:e8:e5:ab:2e:6d:bd:b7:f1:35:
32:9d:38:1e:e7:26:62:c7:1c:f3:4b:57:c8:10:fd:16:7e:bb:
22:ac:ac:18:55:da:b0:c1:a5:cf:7e:51:a4:a0:ff:41:f4:2f:
a6:3d:70:7b:eb:70:ee:18:26:33:0a:7b:1c:da:46:f3:18:dc:
27:ab:1a:39:a0:c4:7a:e3:75:31:42:80:24:c6:9a:55:d1:7c:
87:6e:9b:5c:3b:29:01:79:db:82:52:bf:fe:a3:50:f2:e0:00:
f7:c5:d4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:12:24 2025 by rpki-client