Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
File: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft (raw, json)
Hash identifier: V5ppZnA7dZdJFg/5IkvB6aHSWt3BU5keCTGDQeGGKmU=
Subject key identifier: 61:D0:64:25:90:8D:D0:5D:1F:51:97:8D:95:38:AE:63:3C:E3:FC:18
Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
Certificate issuer: /CN=5ece10f13c46806926a67946cc6a1102aa09031a
Certificate serial: 0196B6349F4AB207EAF7901238FE1CCA3A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 18:00:24 +0000
Manifest this update: Fri 09 May 2025 18:00:24 +0000
Manifest next update: Sat 10 May 2025 18:00:24 +0000
Files and hashes: 1: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl (hash: FZnaGxh0cgncYn65jDn3Ozb/x1xu8ZGiwAeDYLihJyw=)
2: da7wWDdQpE5i6DJox7FoD-QEnrA.roa (hash: 93ok4fdBSnjw6qTtlazVRgZjQmCRM/yDSLFq6NFZNeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:34:9f:4a:b2:07:ea:f7:90:12:38:fe:1c:ca:3a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a
Validity
Not Before: May 9 18:00:24 2025 GMT
Not After : May 10 18:00:24 2025 GMT
Subject: CN=61d06425908dd05d1f51978d9538ae633ce3fc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:e1:21:01:83:10:2e:23:13:53:c8:e0:95:
ca:a7:ca:52:40:fa:5c:29:b3:39:6f:04:a3:b2:07:
f5:29:7c:30:bf:83:49:30:52:6f:56:9b:d3:92:0e:
dc:76:22:ba:f8:d7:f5:7d:d4:3d:65:13:8d:23:ed:
92:d5:6e:e7:40:aa:c8:10:eb:c1:c2:66:aa:e7:67:
81:0d:8e:b8:cb:0e:7c:3f:d0:79:6a:63:b8:b5:c2:
cc:24:0e:68:3b:12:0f:ee:26:1f:cd:3c:58:91:c5:
55:22:47:da:f8:60:7e:2d:af:96:40:40:0f:b1:7a:
62:f0:69:34:f4:7b:f3:c4:f3:dd:67:58:69:d4:87:
6b:2a:43:56:4f:ef:aa:5b:3f:bf:cf:5b:ba:81:cd:
4e:46:9f:dc:8e:c8:29:01:40:d0:6f:ca:c6:26:9b:
12:a4:65:b9:ec:18:b7:7e:e6:3a:01:4d:4d:75:c9:
91:f1:dc:ef:1b:50:3f:b8:3b:05:99:2c:44:61:0b:
f7:3e:f7:9a:ab:bf:7d:38:60:34:f2:f2:da:ca:2d:
57:e1:8c:76:37:ab:81:35:f0:8c:c2:b3:a2:d4:bc:
f7:8c:bf:dd:7c:38:cf:23:4d:7c:5b:3c:30:d7:e7:
17:f7:19:36:94:aa:39:fe:91:23:e4:33:bf:82:cd:
07:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D0:64:25:90:8D:D0:5D:1F:51:97:8D:95:38:AE:63:3C:E3:FC:18
X509v3 Authority Key Identifier:
keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:68:dd:bd:fb:25:fa:97:00:8a:4f:6d:da:06:6e:ef:9f:f7:
41:e8:56:4d:50:73:94:4b:56:4a:e4:e1:9b:d6:ab:b2:b7:7e:
c4:9e:2a:6e:69:72:a3:11:79:13:a8:f4:8b:be:46:f0:c9:2a:
ce:7e:41:e6:22:dd:ba:83:97:87:58:82:c3:48:3c:0d:29:b3:
7d:6a:bc:1b:59:e7:3f:f3:66:3e:f0:fc:4a:19:d6:76:a6:6c:
13:a5:62:ff:ed:79:49:b3:45:c5:85:e1:fe:26:64:00:df:8d:
94:2a:fa:d7:5d:e6:d9:ca:c2:7e:4f:97:a3:52:4c:66:4e:7f:
e7:35:8b:ba:7c:b1:27:58:25:b8:9c:9c:7f:b0:7a:d0:4c:51:
8c:8f:22:a0:df:7a:8d:09:90:76:f8:2c:ef:d4:b2:55:b9:81:
94:e9:a2:f5:90:e1:df:c9:2c:2c:14:9e:f9:fb:bd:61:33:c0:
2f:cc:46:90:05:55:86:f0:24:ac:25:b7:37:46:f6:33:4a:b0:
b1:b2:fd:e4:3c:cf:7f:55:55:29:a2:71:25:d2:56:f3:bb:4d:
be:c8:c9:76:6c:20:fe:ac:3c:95:58:ed:98:b8:4f:80:76:55:
6b:1a:60:d4:56:41:eb:88:f8:1f:7e:e6:97:53:ad:cf:20:d2:
8f:57:52:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:44:59 2025 by rpki-client