Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier: 56gGnaub2lbKGoN/7Jfn0wG25gKsYuMK7xxzjgAiGKI=
Subject key identifier: 37:B2:5A:B9:31:56:A0:A8:81:FA:17:E1:29:64:0B:5E:8D:55:75:97
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 0196BECA03792CC6711EF57A569E5A5A12C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number: 091D
Signing time: Sun 11 May 2025 10:00:32 +0000
Manifest this update: Sun 11 May 2025 10:00:32 +0000
Manifest next update: Mon 12 May 2025 10:00:32 +0000
Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: SQYfOKabf3vPKujRomYe6GShm1gS0EWPTHaurtcv17w=)
2: gSiRx4os8QFHcIb_8HNB1oNvcB4.roa (hash: xKETz16WqJ7ei2SjBEUSJgDLxyYrlv9+GX/GJKUW2iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:03:79:2c:c6:71:1e:f5:7a:56:9e:5a:5a:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: May 11 10:00:32 2025 GMT
Not After : May 12 10:00:32 2025 GMT
Subject: CN=37b25ab93156a0a881fa17e129640b5e8d557597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:1c:87:24:8d:8a:29:a2:c9:1b:66:2b:2e:
fa:c8:9f:6f:fc:0c:b7:f7:27:04:9c:b1:1b:4c:e7:
12:b6:16:4c:f9:d0:a3:1c:eb:9d:f9:3e:75:52:e2:
1a:65:69:9d:0d:09:47:3b:cd:9d:7a:bc:ce:4f:a2:
c3:80:25:ee:b7:20:33:9b:c1:35:ae:7c:26:ed:a5:
b0:eb:ef:8e:5b:40:e6:6f:64:96:92:e6:ce:90:85:
61:a7:19:65:fc:f0:7c:69:71:28:9f:9c:1c:93:29:
b0:b0:0e:42:57:f0:75:e6:84:52:b4:8d:a0:0b:25:
d9:e1:a8:6b:03:07:b7:3d:97:ba:bc:0b:05:58:5d:
7e:81:19:4e:3a:09:aa:43:4e:16:5b:17:5d:94:98:
11:5c:c9:a9:59:b7:1e:dc:fc:1e:07:e0:77:30:f1:
5b:a6:53:e3:1c:b3:c5:70:8f:8c:d7:29:12:0d:4b:
12:6b:e7:70:aa:c6:71:a4:ae:67:dc:15:d3:09:dc:
6c:9c:5c:82:17:dd:c7:73:6f:86:52:2e:d5:3c:26:
82:ad:db:2c:2f:29:7c:3d:5d:e9:61:af:5d:a3:93:
51:1a:bf:ed:da:46:ef:fd:54:12:3d:aa:2a:e0:49:
bc:e8:07:9a:68:f8:c7:9c:9d:55:37:b0:7b:cc:63:
ca:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B2:5A:B9:31:56:A0:A8:81:FA:17:E1:29:64:0B:5E:8D:55:75:97
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:57:c6:f2:03:5d:6d:b0:18:d5:40:af:b9:c9:1d:89:78:21:
1d:75:eb:a0:27:f0:84:a0:97:43:b8:7e:b9:99:d1:83:6c:60:
b4:b0:05:2d:7d:67:6d:ac:94:e6:51:3d:95:42:f0:a4:1d:92:
12:20:1a:a3:f2:ea:19:14:9d:69:3e:2a:98:27:52:d5:38:cc:
64:23:d0:29:63:b0:96:90:79:85:7e:6a:ee:9e:0a:22:43:6c:
e9:5b:a2:32:28:8b:79:27:52:6e:61:ee:06:d8:96:ec:c8:22:
b1:30:03:d2:59:0a:12:54:de:d7:f5:c8:cd:f2:1a:29:f0:02:
c4:ed:5e:36:54:18:c4:9e:bb:5d:59:f9:45:49:ba:3f:3e:e1:
db:3b:4f:28:60:ea:9b:d3:51:95:36:45:65:5b:17:49:a4:a9:
62:11:90:df:b0:01:8a:3e:f1:16:81:20:87:da:81:bc:37:55:
4b:32:50:6b:82:1f:34:ca:d4:da:6b:cc:62:5e:95:57:d9:e0:
f8:d6:35:da:6d:77:82:37:a3:94:a4:2a:47:61:ec:ff:82:00:
81:5a:fd:e5:02:d9:b8:55:4e:a3:21:d1:62:15:d4:57:6a:06:
cd:39:21:78:79:4f:79:0a:f6:3f:30:71:c6:2c:37:1b:e8:36:
fa:26:41:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:09:51 2025 by rpki-client