Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier: 3ouTilNIdGxU0S2LhEtXnV6jB3usd39BVaftasUugf8=
Subject key identifier: BF:76:F7:92:44:42:2B:39:91:7C:B5:E1:72:A3:13:F2:54:7F:E5:0D
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 0196CEAADB5F7167A3495DF1EBC390BC0E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number: 057C
Signing time: Wed 14 May 2025 12:00:25 +0000
Manifest this update: Wed 14 May 2025 12:00:25 +0000
Manifest next update: Thu 15 May 2025 12:00:25 +0000
Files and hashes: 1: QEss9zLOzbnk5Xa_0K4YXbMb5qY.roa (hash: OBsJALGCyyQG7Ejkwlv6+1osaKxY665jLogVGloKmd4=)
2: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: Tdu2nhkUlWvdg9nTQskzlwVjwYmz2M3yKcm8v+WHhgM=)
3: tCB14kGV6U2NGcyfByN7-DomVJ8.roa (hash: UZ1VDBkhzAvTXI924h/1409nf6LFWjypU3ljSY/BZyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:aa:db:5f:71:67:a3:49:5d:f1:eb:c3:90:bc:0e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: May 14 12:00:25 2025 GMT
Not After : May 15 12:00:25 2025 GMT
Subject: CN=bf76f79244422b39917cb5e172a313f2547fe50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f9:b0:90:d4:12:4f:b9:b7:fa:c5:ad:27:5a:
16:19:1e:f0:d4:e2:a8:39:90:ce:5a:75:aa:b6:2f:
9e:7e:1b:a1:c0:12:c4:86:df:2f:3b:f7:f3:e1:b1:
18:a5:6f:08:31:fe:b6:5e:26:40:96:af:b5:24:35:
db:13:fc:b7:97:d6:c4:bd:04:5c:90:7b:78:0a:54:
99:db:66:70:fd:bf:43:fe:42:d0:5d:bb:e0:a7:48:
00:a7:96:5c:34:a8:cc:85:fd:45:3a:2a:82:03:cd:
85:c3:3e:82:64:1f:48:f3:16:9d:82:5b:0e:f1:09:
72:94:7d:f6:f3:ab:78:85:be:82:8e:e5:26:1b:d9:
4a:84:eb:6f:c2:76:a8:cd:49:20:f0:bd:9c:ce:1c:
b1:08:de:b2:a4:7f:7e:28:22:79:69:91:39:7a:1c:
c3:e3:e0:fb:35:7c:44:95:ab:e5:79:5c:26:0c:83:
83:80:77:02:68:2a:2f:8e:d8:f3:35:29:88:53:23:
06:43:3f:f0:c0:04:fa:ff:25:91:e3:7b:f8:f8:a5:
92:64:f0:c7:82:bc:d6:ae:57:a2:f5:f2:55:d5:69:
56:bc:f8:61:d8:4e:c7:05:06:e6:b8:d9:90:d4:e0:
c6:66:94:9d:11:60:b2:93:32:44:b1:61:ef:31:7d:
58:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:76:F7:92:44:42:2B:39:91:7C:B5:E1:72:A3:13:F2:54:7F:E5:0D
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:64:4b:1b:fd:41:99:fd:8d:cd:f0:43:3b:5e:6b:f0:f4:e6:
d8:eb:a3:1f:84:57:a3:af:60:d9:7a:5a:7f:52:bf:da:15:fb:
75:e8:b1:38:12:f5:f0:0b:cd:03:18:89:c7:09:5c:f2:83:99:
02:9b:67:d6:41:52:93:1e:88:a5:90:b8:e3:ad:d4:9a:a9:e3:
b4:03:73:e1:0d:49:5e:42:09:8d:e4:01:38:0d:3b:c6:13:79:
3e:6f:4b:f0:79:b8:11:5a:2f:92:0c:fc:4f:85:58:b6:0e:24:
14:b1:fe:55:43:67:38:4c:f9:53:33:87:57:5a:e1:76:ad:e9:
aa:a9:f8:98:15:0c:d4:46:d3:1c:90:f6:fa:07:5d:d6:23:15:
c4:65:48:3b:9d:6f:19:a8:7b:23:86:3c:18:c5:d2:84:bd:3f:
5f:36:de:fd:bd:8f:87:11:17:ea:77:51:ea:b0:5f:0a:a3:8c:
76:ac:3f:82:99:bc:a0:14:e5:13:91:01:5c:34:1c:ef:75:41:
b3:fd:73:d6:ad:8e:a4:45:24:cc:b9:a7:95:85:d1:3a:c6:46:
ce:72:56:4d:39:60:60:fe:73:7a:89:d9:af:e8:96:5e:6e:f3:
2c:d5:38:89:cb:36:40:be:5e:8c:8c:84:8e:7a:40:71:a5:e5:
67:ed:69:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:19:23 2025 by rpki-client