Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier: P4H69OS+fs2gLqSiCkuZYAj+NiPNoechcJrUR0s3uzQ=
Subject key identifier: 2A:F0:CB:50:E3:A4:25:3B:50:7C:EB:BB:17:AA:31:91:80:8E:CC:33
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 0196BC371CD7598991E5F34683F5027BEEDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number: 0D00
Signing time: Sat 10 May 2025 22:00:50 +0000
Manifest this update: Sat 10 May 2025 22:00:50 +0000
Manifest next update: Sun 11 May 2025 22:00:50 +0000
Files and hashes: 1: SKLs3SUJ6QhNbVJrjYVyYf81aEc.roa (hash: R9s9J4TIgAF+/QEDyhuyAA67g5wViBKHguVZOslEIHs=)
2: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: KuDDw2J/Dlue3Nu2JTDz2xMua/pLsNyTxgDfZ8X4Hg8=)
3: rAM6r2SFYvSQGaseydRgOte_bds.roa (hash: RYGmm+YYhr7YTk+o6zMn3og3hxzFO1fF/P5WPNoHQX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:1c:d7:59:89:91:e5:f3:46:83:f5:02:7b:ee:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: May 10 22:00:50 2025 GMT
Not After : May 11 22:00:50 2025 GMT
Subject: CN=2af0cb50e3a4253b507cebbb17aa3191808ecc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6b:97:2e:99:6e:6e:d6:0a:1f:43:c4:fd:e6:
43:80:8c:f9:eb:99:5e:3b:41:e2:0a:10:be:d9:dc:
f1:1c:f1:35:c2:4e:4b:4d:b1:5a:1a:fa:89:9b:81:
a2:5f:7d:68:eb:25:a3:73:9f:35:94:8d:c6:b7:43:
59:c0:1a:41:8c:97:09:3f:1a:d4:bf:c1:b4:45:01:
24:2f:44:ac:34:97:48:fc:e5:8b:55:83:09:d2:21:
34:9c:39:90:bb:57:9d:2d:bc:f8:a5:00:9d:d5:3d:
db:f9:6f:11:58:62:34:15:9d:18:64:22:a1:ac:21:
73:c1:0c:be:a5:76:0a:02:35:50:7a:e7:8f:88:3b:
0d:97:e2:84:20:98:b6:d8:2a:01:13:1d:98:8b:98:
3b:d9:ab:3d:09:40:e3:a9:9f:4a:70:dc:ac:38:9f:
b9:0a:00:9b:12:d6:a1:47:28:e0:a9:12:02:87:ba:
0c:fa:7a:e0:82:7c:0c:81:eb:20:06:7d:e7:49:3a:
1d:ae:94:8c:66:08:be:8b:90:9a:34:f5:d5:b8:64:
ee:9b:9e:0a:4f:e1:c6:fd:25:ce:88:3f:09:0b:ef:
5f:78:2d:4b:ce:34:23:da:5a:ab:02:5b:3e:20:b3:
dd:72:ed:eb:4d:34:96:b6:81:9e:85:21:e2:b8:35:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F0:CB:50:E3:A4:25:3B:50:7C:EB:BB:17:AA:31:91:80:8E:CC:33
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4c:c9:c4:7e:90:ef:3d:15:18:bf:9b:24:71:f1:4f:ae:1b:
2d:6c:ec:d1:64:f1:b6:10:e4:a6:54:21:d3:33:8c:a3:ec:86:
60:a6:92:6a:9e:2a:23:ce:c7:33:e4:a2:e7:8d:8d:bc:51:42:
ca:c0:12:8c:9b:72:1e:a4:ab:8e:b9:0e:98:4a:ce:84:a1:bf:
ad:93:f4:5c:4e:88:79:aa:73:bc:e4:14:59:ef:64:fd:85:61:
86:fe:14:ed:e5:43:54:06:12:14:8b:30:20:18:14:dd:d0:df:
89:2d:34:5f:9d:4c:b4:ad:bc:78:5d:c2:1d:19:9c:56:0a:d1:
f7:a5:54:b6:0d:32:ec:69:14:c6:7d:b6:59:20:ab:61:a2:0c:
37:40:fe:b9:1a:8d:d7:ce:38:06:f2:53:6f:24:37:cf:3d:a4:
3f:fe:9e:ac:50:43:99:5b:6a:34:8f:68:71:73:b8:b0:32:a9:
61:da:c4:53:f4:d3:58:1f:73:2c:9d:a1:48:24:50:bc:88:ac:
79:bb:74:9c:2b:a4:90:77:87:27:f8:87:4b:4d:fb:b5:e6:f4:
5e:53:07:7b:55:48:bf:86:4a:07:82:aa:37:3c:18:c6:35:0e:
35:9d:60:05:6d:59:ec:60:03:75:c1:e9:cd:2f:e3:a2:0a:78:
e6:cd:d2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:19:30 2025 by rpki-client