Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier: 5oogWlG/92djX1GRzrVtTo2svLHO23Jl2O9x9sO6VKY=
Subject key identifier: 26:8F:72:61:8B:9B:38:47:BB:29:9B:4F:65:70:6E:99:3D:5F:52:26
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 01969E2C520259DDA0FFD894EACB404765B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 02:00:26 +0000
Manifest this update: Mon 05 May 2025 02:00:26 +0000
Manifest next update: Tue 06 May 2025 02:00:26 +0000
Files and hashes: 1: 0vJK_vyasIrWUmMeEUC9qBRt1hU.roa (hash: 8dnpR0wliwI6ds+bwuYSSa8p5H39NL3zBM5biG+2pNc=)
2: E7RpdyIBOL8QfbpWAMDvfKmfGvE.roa (hash: Jl5wvOsESTap4RI2Rb+pwF3WlOcK3fzc1tCnuSYRIgk=)
3: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: D7cSlV9PWGRkp6aQ9bsrspZuqI5zganqaA5fYbuYCFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:52:02:59:dd:a0:ff:d8:94:ea:cb:40:47:65:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: May 5 02:00:26 2025 GMT
Not After : May 6 02:00:26 2025 GMT
Subject: CN=268f72618b9b3847bb299b4f65706e993d5f5226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2f:6c:70:3a:f5:72:1a:4f:b4:72:1b:2f:5a:
27:87:73:2c:e5:d7:5e:78:1c:78:f1:b9:f6:c5:10:
96:db:e0:12:ec:00:42:6d:00:68:2b:49:e1:2c:fe:
b4:b5:40:81:01:c8:6b:21:30:da:d2:9f:86:12:3d:
ba:46:7e:24:3d:72:10:c7:81:f4:af:95:4e:79:3c:
47:ee:27:09:44:a6:2b:11:fb:b0:4e:55:45:c0:ba:
7d:08:27:49:4c:a2:c5:33:e5:ff:9e:84:a9:73:23:
51:bb:9c:4c:cc:02:31:33:db:25:4c:ea:ff:45:de:
d8:f7:8e:60:e1:8c:ab:78:73:f0:e5:db:87:f4:ad:
3f:db:73:46:17:6b:59:58:2f:c2:12:38:ba:b2:c2:
eb:f2:2e:5c:6e:c6:ee:8b:01:9b:19:a2:98:c8:27:
7e:dc:dc:c0:37:dc:48:44:65:3e:22:3b:27:e0:85:
00:fd:e4:21:04:ce:31:e2:7f:ab:9b:a1:67:d7:1e:
b7:30:aa:d7:ba:d6:27:83:c3:22:f4:34:b7:6b:b5:
c2:10:eb:9f:08:67:5e:87:2c:90:6c:80:cf:7a:27:
2d:0a:28:b0:61:d2:ec:d2:86:d3:55:9a:6c:ae:01:
c2:c7:71:bd:bc:7c:54:46:9d:b7:95:1c:3d:84:31:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8F:72:61:8B:9B:38:47:BB:29:9B:4F:65:70:6E:99:3D:5F:52:26
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7c:c8:ea:78:4a:ca:8e:78:f9:11:52:92:ce:64:67:fd:f9:
c4:83:f0:73:9c:b1:49:f5:13:e0:97:a3:ca:5e:a8:03:44:1f:
8b:df:4a:41:62:04:df:bb:be:68:e1:10:7c:4c:55:d5:05:06:
41:9f:11:5b:f7:e3:3e:fd:4c:63:00:f7:6a:a8:2c:73:34:22:
89:24:17:3f:0e:9b:76:61:44:6d:b5:45:70:0b:19:f8:8e:cb:
cb:21:69:e0:c8:c2:28:6a:bf:48:54:59:ce:b2:c4:20:f6:d5:
05:bb:7f:55:6c:57:cb:4b:d8:f8:b7:3c:5a:0c:c7:40:0d:8e:
11:e4:0b:1b:4e:30:3f:65:90:a5:3c:7c:2c:c8:11:9c:38:64:
b0:ab:56:95:c6:8c:cb:7f:d8:43:cf:b3:f8:ca:98:cc:f8:09:
f1:b5:5c:90:61:95:2c:72:32:08:42:40:66:6a:a2:cf:18:39:
7d:52:5b:9e:17:7c:e7:65:d7:6b:2b:b8:75:13:ec:30:a7:f3:
81:e1:ba:2f:26:e8:03:17:35:c3:7c:15:1a:8c:4e:70:68:80:
cd:c9:8f:6d:8f:d9:90:b7:25:80:22:4c:ee:d8:e6:3f:71:47:
0f:f1:d8:e7:3b:a2:97:18:b3:08:a9:49:18:14:d1:a7:e7:de:
4c:9d:e7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:03:39 2025 by rpki-client