Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier: h99bU8D3vZbM+4j5rRKKUjDIqh/snOyvoegMUpkVPz4=
Subject key identifier: 10:33:FA:D9:4A:E8:B2:8D:D1:DA:8D:33:9D:6C:2A:6B:F2:0A:99:66
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial: 01969F766375F46257723B8CF77D632A5F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 08:00:58 +0000
Manifest this update: Mon 05 May 2025 08:00:58 +0000
Manifest next update: Tue 06 May 2025 08:00:58 +0000
Files and hashes: 1: 5XDYqOGZ0RBBKO0tNQVtQfCS9Wg.roa (hash: 8v0kYzcJWu+TAkPVdBOzyNTyiBLW9zT8UuMidU5kl/I=)
2: g9JYtF8ph5GLoyu-Nq2vbYm-D1I.roa (hash: Cvh5BPuE+knEynT2OCQwuxH59fgMDl8/lGUoeYUQxFY=)
3: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: Uy76dseK3NI4jFuvXXIxSht60OtKcqlod40mPuFHm9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:63:75:f4:62:57:72:3b:8c:f7:7d:63:2a:5f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Validity
Not Before: May 5 08:00:58 2025 GMT
Not After : May 6 08:00:58 2025 GMT
Subject: CN=1033fad94ae8b28dd1da8d339d6c2a6bf20a9966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:13:4c:86:94:5f:80:6c:f7:13:ec:fc:4c:
2b:78:c1:4b:ac:fd:f3:1d:af:5c:67:2b:ba:6b:6d:
d0:bc:c4:65:43:05:ae:5b:98:e1:d4:75:3e:3c:40:
e2:d9:17:62:83:6f:16:b9:e7:a1:d0:e4:a9:77:40:
c2:e7:ca:2f:1e:ab:1e:54:1b:2e:93:a4:eb:93:5a:
76:31:bf:46:f4:65:8b:5d:33:fe:55:30:bf:5c:50:
4d:69:f5:8d:55:b8:90:dc:41:3a:e5:cc:05:30:e1:
79:a4:ce:95:d8:4e:e5:c6:b5:b4:26:ac:4e:80:23:
02:82:00:29:f6:32:2d:00:3d:25:8e:dd:2b:e2:3a:
1e:80:f6:9f:c6:3f:7d:bf:1b:15:d1:52:49:1a:cc:
16:21:4c:89:b0:a7:9b:96:16:4a:f0:c0:6d:1c:ad:
8e:95:e3:58:14:e4:9d:e1:d9:bb:36:27:87:54:1d:
64:0d:2f:d5:2a:2e:a9:38:fb:9f:70:56:f7:ab:a8:
4c:6b:62:79:e6:82:5a:e7:52:a3:46:a3:50:50:57:
14:ad:a2:50:44:88:fd:3f:f9:43:68:a3:f1:2e:78:
82:8d:ef:64:2f:0e:3f:1c:ac:a6:c4:1f:62:ff:03:
5f:b0:b3:28:3f:b7:94:24:c7:26:b6:0d:fe:04:34:
32:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:33:FA:D9:4A:E8:B2:8D:D1:DA:8D:33:9D:6C:2A:6B:F2:0A:99:66
X509v3 Authority Key Identifier:
keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:68:8b:30:ba:ca:e1:4a:dc:2b:f1:a0:01:aa:57:8f:5b:eb:
b0:e2:f8:3f:58:0b:38:3b:8f:f7:82:f9:9d:a7:0a:0d:4b:10:
53:b7:c5:7d:39:d0:1a:1f:90:5c:87:4e:47:7a:af:64:a9:6f:
08:dc:fe:51:55:55:ab:28:04:63:16:6f:31:72:d9:de:81:e1:
fe:22:cd:1f:cf:6f:3d:e4:6c:ea:88:68:80:8d:f5:2c:52:5a:
b5:d8:6d:0c:31:3e:7a:0c:dd:82:f3:cb:11:b5:88:7e:03:78:
41:e7:22:36:eb:d8:03:f2:c9:db:79:8d:66:ea:dc:93:b8:eb:
8d:29:e6:b9:45:a0:0c:13:47:23:c5:88:eb:8e:c4:b1:4d:8d:
5c:19:53:01:15:35:a0:90:da:62:1c:89:cb:25:2b:8f:ff:3e:
89:81:98:b6:0e:bf:37:b5:ed:ba:d4:8c:9f:5e:f1:e8:3f:2d:
9a:f0:13:9b:c5:42:e0:4f:f2:de:c0:79:7a:56:6f:5a:ac:b7:
5f:4e:b7:78:ec:cc:78:16:b0:e4:0e:5c:d9:90:06:5a:b8:91:
20:eb:c2:ce:06:ab:0e:20:25:e4:6c:f4:9b:72:b9:ca:28:45:
b2:67:1b:80:cd:5c:a0:cf:9b:0c:4d:e6:03:a0:1c:e7:5e:94:
ef:63:9c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:47:52 2025 by rpki-client