Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
File: Xjy32YLH-e28k9TLQrlPoCnDgt8.mft (raw, json)
Hash identifier: TwJ42EBcaF3v+VqtxHtd0L+7zYDn5Ns18lBMfqnsVYE=
Subject key identifier: 4D:F3:ED:CE:E2:6F:76:7B:D4:25:BF:91:32:33:14:64:EA:F7:AA:C5
Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Certificate serial: 0196B8910A9E6A47059D4DCA2889B998FE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
Manifest number: 0C91
Signing time: Sat 10 May 2025 05:00:35 +0000
Manifest this update: Sat 10 May 2025 05:00:35 +0000
Manifest next update: Sun 11 May 2025 05:00:35 +0000
Files and hashes: 1: Q4-WTo5cCXeD-w1sheBv_gjD51g.roa (hash: YXa3b/p8YeGWH77UlVMEIh9uzLUPpaYfJzmKNDjEbns=)
2: Xjy32YLH-e28k9TLQrlPoCnDgt8.crl (hash: vUXxSmZGg4ZdIK01XUMtwERMDlawdfapPcbJKMysk+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:0a:9e:6a:47:05:9d:4d:ca:28:89:b9:98:fe:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Validity
Not Before: May 10 05:00:35 2025 GMT
Not After : May 11 05:00:35 2025 GMT
Subject: CN=4df3edcee26f767bd425bf9132331464eaf7aac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:a0:e3:69:05:b7:35:58:e5:e9:e8:76:79:
49:22:26:e1:58:39:2e:c5:f2:2c:4c:3a:a7:09:c9:
18:4f:ea:f6:a8:70:08:56:19:e8:c7:e4:ff:58:73:
18:cf:bf:c1:67:26:64:da:59:34:d5:32:d4:46:8f:
ad:12:55:a2:30:cb:d6:70:15:f9:c0:b3:9f:0c:c2:
e1:57:cc:39:36:79:b1:b2:42:d6:ec:a2:69:31:b9:
bc:d7:24:81:6b:8b:b8:c0:e2:0d:39:50:6f:b7:85:
36:77:7e:d5:3b:a6:b6:57:c3:2e:c8:31:9e:a1:11:
b0:e1:90:df:69:e6:9e:a0:63:01:d2:3d:e2:60:48:
18:68:27:b4:3f:5f:89:fd:84:07:17:f5:6e:d5:5f:
43:58:f6:11:03:84:51:62:b5:55:56:c2:04:ec:2b:
75:d1:24:e2:9b:95:11:31:d1:63:41:66:dc:e1:3f:
a1:7e:de:41:79:6e:74:58:f9:a0:06:4b:f4:71:11:
b2:4e:31:06:05:e0:aa:8a:3f:d9:7e:a7:94:59:cd:
c9:4c:b3:12:f6:32:30:0b:6e:c4:46:09:2d:13:ac:
c2:ac:9c:17:09:c7:bd:83:72:dc:d7:1f:77:7b:78:
51:ed:e2:17:cf:0a:db:23:90:0b:70:5f:47:92:44:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F3:ED:CE:E2:6F:76:7B:D4:25:BF:91:32:33:14:64:EA:F7:AA:C5
X509v3 Authority Key Identifier:
keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d5:eb:02:7c:f1:9a:77:20:af:01:b3:01:d8:4e:72:5d:f0:
4c:37:a4:98:49:99:b1:ff:19:f0:88:77:2c:cf:8f:dd:6e:6b:
87:9a:6d:4e:55:85:9f:39:a5:a3:27:0e:50:d4:71:2c:f9:fe:
8a:bc:34:9f:fb:4d:12:df:01:86:81:1c:84:b4:dc:0a:7f:83:
1c:42:8e:3d:8c:01:6b:3d:40:f2:2c:49:af:e2:c3:b1:ff:70:
c1:95:69:06:f5:33:30:40:2c:c4:75:d5:4b:b2:9a:0d:3c:cb:
62:1a:15:49:dc:fc:8b:63:0b:0e:fa:64:bf:d6:c1:d7:22:05:
5e:8c:85:bd:71:59:a2:fe:ce:10:84:c4:04:64:24:d1:da:ea:
77:38:52:bf:0f:15:75:5e:2c:13:1b:d2:38:77:77:3b:c1:98:
e2:7e:56:a5:72:e1:10:70:ed:3f:ff:f7:bf:a4:29:a0:2d:95:
5d:d9:8a:83:7d:2c:0d:7e:1c:97:ef:f1:7c:73:c2:e1:81:53:
2c:1e:02:13:eb:ac:af:fb:9c:bd:db:1b:94:52:61:83:ce:94:
b2:fc:b6:ac:98:19:04:c6:ee:9f:6c:84:18:bc:5e:2d:9b:06:
be:06:ff:9f:d8:c2:e0:3d:bc:7b:95:7c:b1:83:b8:27:53:c6:
f0:a1:30:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:36:21 2025 by rpki-client