Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
File: XlgQVXywZwvJwJM-An6b2CqxVt8.mft (raw, json)
Hash identifier: 0k+LBxlDJ64e1HirBNE8H6tSY77r1tqnD7xI4RVL+Kg=
Subject key identifier: 09:E5:52:45:0B:36:8F:31:57:C5:83:E6:6F:09:DE:1E:5B:C4:1A:50
Authority key identifier: 5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
Certificate issuer: /CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Certificate serial: 0196DF678CFE0E40C3998F4C0FF93AD56E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
Manifest number: 14D6
Signing time: Sat 17 May 2025 18:00:27 +0000
Manifest this update: Sat 17 May 2025 18:00:27 +0000
Manifest next update: Sun 18 May 2025 18:00:27 +0000
Files and hashes: 1: X3STT9uNWvgpUT8B2LTGrxoI9k0.roa (hash: LPxXWYECEhYhqhJFZtgmdAjXs7SoH+TOKVHj7gJZDp0=)
2: XlgQVXywZwvJwJM-An6b2CqxVt8.crl (hash: LCWRpDWTv31eOgt/E7zWuSe4tAdbtmYdSBdg7wNSdaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:df:67:8c:fe:0e:40:c3:99:8f:4c:0f:f9:3a:d5:6e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Validity
Not Before: May 17 18:00:27 2025 GMT
Not After : May 18 18:00:27 2025 GMT
Subject: CN=09e552450b368f3157c583e66f09de1e5bc41a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:23:e5:c2:b6:8c:04:c5:3a:64:f1:8a:0e:
2e:4f:e8:c2:97:f4:f3:1a:d3:04:aa:d0:f0:ce:05:
3d:c5:b9:b9:a8:29:19:c5:f1:3e:a2:e3:24:24:29:
f1:3f:80:09:60:07:fd:c8:3e:c3:62:56:3d:9b:50:
a0:db:6d:f6:e6:be:a0:58:4a:5d:c2:c9:67:a3:18:
fd:cd:66:91:31:35:51:00:76:36:10:e0:b3:35:34:
ba:8a:5c:91:28:8a:f0:2a:cc:aa:0e:9c:3c:65:b1:
c1:50:b3:6a:b3:4f:f5:06:cd:a3:ce:4c:9c:c9:1a:
c7:63:ae:08:bc:6c:17:d9:d6:cb:d0:d2:55:d7:1e:
3f:b8:1b:86:da:9e:71:a2:80:ae:80:e3:e9:f7:89:
d4:42:8e:4e:a5:7d:8f:72:de:a1:27:0f:9f:b5:c4:
ca:36:f2:20:3d:01:6d:1b:be:b9:a8:b2:10:67:98:
52:48:74:63:9e:35:8d:7e:20:49:15:f1:21:4d:cf:
04:8e:38:35:8b:31:17:de:25:a7:49:5f:2c:18:38:
bd:de:32:23:9f:a4:52:e2:c5:e0:1d:ee:be:2a:be:
a2:61:75:38:47:cc:b0:c3:a2:4c:a8:a4:b3:67:85:
34:6d:8a:0a:b3:d8:f0:f2:ac:d4:ab:d4:e3:ac:01:
84:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E5:52:45:0B:36:8F:31:57:C5:83:E6:6F:09:DE:1E:5B:C4:1A:50
X509v3 Authority Key Identifier:
keyid:5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:78:29:9c:a3:77:75:f6:6d:4f:96:08:4b:e6:31:51:1f:86:
73:aa:c6:91:1b:d8:b0:ab:fa:36:62:eb:3a:a0:bc:53:30:82:
a4:61:f1:e7:c0:b6:20:b0:71:1f:51:ea:73:e4:2f:45:2a:58:
02:2f:42:d8:e6:96:e4:1b:b2:d2:64:b9:66:98:04:6f:bb:a7:
2f:ba:c1:8e:a7:90:b5:94:44:a7:d8:9e:a1:fa:e7:da:96:79:
66:85:29:3a:20:a3:05:f7:16:4f:a4:70:93:d5:2a:45:49:23:
8d:95:7f:e1:5b:61:39:53:7a:63:cc:12:17:ea:fa:84:0d:40:
3e:45:ec:25:b1:ae:84:16:4e:13:75:65:3d:64:5e:7a:47:b2:
34:e9:fa:fa:ab:ed:1e:a3:85:fc:f1:09:8e:9a:23:0b:a7:0b:
b1:5c:87:cd:2d:33:4f:dd:08:21:cc:bd:c3:ad:b7:28:5e:c6:
a4:f8:2f:0d:c5:96:0a:a2:d6:ba:35:6d:67:e3:32:45:c4:98:
bd:be:44:49:1b:47:bc:ee:82:4c:ad:ca:6f:7d:70:4e:55:8d:
d4:6a:5f:4f:54:fc:ab:6f:1a:91:67:64:6d:40:51:a3:ef:88:
72:b0:d1:cf:a9:55:24:24:66:bb:b7:c4:ef:86:04:54:97:92:
6f:d2:20:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:43:31 2025 by rpki-client