Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
File: xeP39AwQDf_bGBIccmGZ6FgExYU.mft (raw, json)
Hash identifier: TeEtXQHNSMQ9AzJApVBBW7okdxmdSulZwG4SLwLY6vw=
Subject key identifier: 7A:4B:B2:B9:03:D1:84:05:06:D2:90:63:10:04:EC:9C:22:00:E8:9A
Authority key identifier: C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
Certificate issuer: /CN=c5e3f7f40c100dffdb18121c726199e85804c585
Certificate serial: 0196ACFB0033E33B5BF13F53218B10245411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
Manifest number: 152A
Signing time: Wed 07 May 2025 23:00:52 +0000
Manifest this update: Wed 07 May 2025 23:00:52 +0000
Manifest next update: Thu 08 May 2025 23:00:52 +0000
Files and hashes: 1: pziQk_Jpqg7RVSwxW0kshn-FxgM.roa (hash: 3IfnTIQK5ln+c+ATiKdOHRNEXtXgflbchwoY1RIrNJU=)
2: xeP39AwQDf_bGBIccmGZ6FgExYU.crl (hash: Vfk8Ik1+/xYZKPT3PumzflRA1JGHFwm0p+6zBo1Onv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:fb:00:33:e3:3b:5b:f1:3f:53:21:8b:10:24:54:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e3f7f40c100dffdb18121c726199e85804c585
Validity
Not Before: May 7 23:00:52 2025 GMT
Not After : May 8 23:00:52 2025 GMT
Subject: CN=7a4bb2b903d1840506d290631004ec9c2200e89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:91:80:13:be:77:a1:72:07:79:c6:e5:84:
f7:c7:08:73:ba:ce:cc:fc:f0:f8:6b:f7:68:d4:44:
ae:3a:fd:46:2e:83:4e:80:2d:29:d5:24:28:aa:ec:
82:b5:49:ec:4b:c5:f4:b7:62:93:04:df:12:0b:64:
2d:df:e2:62:20:5f:7f:5a:4b:ea:84:b5:22:b5:89:
f3:bd:3a:8e:6f:99:28:73:33:6d:54:e5:88:84:da:
71:6a:28:ba:ac:7a:49:dd:c9:3f:b5:c3:80:3f:ae:
53:f4:e7:20:b1:f1:8e:06:14:fe:bf:34:98:cf:25:
06:97:77:41:31:4a:4b:67:9f:20:5b:fa:9c:5c:2b:
5e:37:17:da:61:7a:dd:5c:45:e5:f1:35:32:9a:0b:
23:d8:26:bc:39:93:65:b0:c2:2f:69:2c:24:b9:3d:
0c:03:66:47:5b:93:1d:b4:3b:c0:ca:a0:cb:64:64:
8a:65:f3:03:d0:32:86:75:16:7d:2b:c6:0b:45:61:
68:78:39:2e:55:94:36:d2:00:25:1e:aa:98:25:97:
ba:53:8e:21:d4:e0:ab:8a:51:c7:d4:1b:8d:d6:76:
64:c5:c6:33:8e:bd:6a:90:00:f1:5b:70:9b:ad:99:
e1:b9:0d:e1:a4:5e:c4:5d:04:b7:18:57:ab:a9:14:
f3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4B:B2:B9:03:D1:84:05:06:D2:90:63:10:04:EC:9C:22:00:E8:9A
X509v3 Authority Key Identifier:
keyid:C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cf:ea:b1:09:86:e8:3a:c4:89:b7:9f:7f:91:98:25:7f:f2:
47:bf:2a:66:09:e4:dd:fc:aa:ed:4d:d4:29:ec:3a:6d:70:eb:
f4:e3:f6:57:28:ea:b9:d1:3e:8d:7b:2e:31:6a:38:b6:b9:74:
85:f7:e9:1a:74:1b:ce:34:e9:26:30:f6:11:ea:f2:bc:5c:38:
24:51:65:ac:d2:8d:f3:ae:e8:2a:01:e8:61:52:a6:2b:31:3f:
69:5c:b6:6b:a8:e7:4a:52:8f:f7:03:0b:10:fc:30:17:01:08:
63:76:43:5e:88:7e:6b:3e:47:cc:c2:a4:c5:c6:3f:b2:64:27:
92:0e:07:9e:fd:d9:1c:e2:dc:d9:38:77:32:32:39:3c:43:f3:
f8:ad:28:64:77:e6:1f:dd:d8:7b:22:f5:af:ec:4c:66:1f:64:
6e:99:b2:70:59:21:51:a8:95:e1:08:b0:db:86:b0:80:88:97:
f8:fc:51:6e:ac:06:bf:5f:d7:40:ef:29:e3:64:89:c1:93:44:
34:14:5f:41:79:7f:d2:c2:d7:44:50:99:e5:ff:0e:2b:34:15:
0a:02:9f:1e:7e:84:ca:0a:df:bf:45:ea:99:63:c7:6e:98:4a:
25:52:46:c5:9d:d5:f8:fa:bc:63:d7:d3:4b:51:17:3d:e6:d8:
5d:7b:87:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:22:23 2025 by rpki-client