Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json)
Hash identifier: t0y7tMPWuWiEaLpPIK/Jf/YJ7LDe4l6AcnlrMq5UwWI=
Subject key identifier: 75:F5:4F:EE:28:39:6C:0F:B9:1F:B4:13:67:78:41:1A:C6:E5:BF:8E
Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Certificate serial: 0196C19448F6D21E14E2C6026C5BAA8F7228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
Manifest number: 0B4E
Signing time: Sun 11 May 2025 23:00:42 +0000
Manifest this update: Sun 11 May 2025 23:00:42 +0000
Manifest next update: Mon 12 May 2025 23:00:42 +0000
Files and hashes: 1: x9osegNwUKFrT1H1VZTt-kaY4bg.roa (hash: ZX93NU3lUgtZDAGcH0Q1U8yUfw/JO3m/vmWuhpphGKg=)
2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: JHSogGjkDa41OKAkmVmrhfzjH6/Fj7Y9/BaMC1b4coQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:48:f6:d2:1e:14:e2:c6:02:6c:5b:aa:8f:72:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Validity
Not Before: May 11 23:00:42 2025 GMT
Not After : May 12 23:00:42 2025 GMT
Subject: CN=75f54fee28396c0fb91fb4136778411ac6e5bf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:6a:99:a3:5b:6b:35:d1:be:f8:72:c0:aa:
91:5a:b6:bb:e0:5f:72:a2:8f:79:0f:b5:eb:62:b3:
4c:8f:8f:bf:99:60:d9:a0:f0:b0:8d:f5:fe:60:eb:
8f:e4:f3:2e:12:35:e5:24:63:95:65:9e:14:b5:1a:
91:09:f4:d3:51:e9:ff:44:b7:8f:9f:fe:c8:91:96:
f6:29:e8:37:6c:57:08:ae:e1:d9:44:45:f5:fa:09:
d2:f8:85:da:01:e1:05:7f:ae:87:09:b3:d0:42:f2:
c5:4f:98:eb:13:c4:48:a8:a1:50:37:b7:35:60:65:
7b:df:5f:0a:1d:07:f6:8f:28:f2:96:9f:ce:ea:8f:
92:4a:50:bd:a4:3f:64:79:30:dc:fc:23:da:06:76:
d5:d2:a0:ed:6a:a8:30:f6:c8:17:cd:15:80:b4:43:
e1:c7:f1:1c:b0:49:e7:c4:3a:62:f1:77:41:10:46:
42:48:49:45:0e:63:d4:99:14:12:07:d3:4f:a5:52:
d0:44:fb:67:7e:df:ee:1f:00:9f:6c:db:bc:1a:04:
3b:bd:0f:0a:2c:9d:4b:bf:5f:54:cc:bb:d1:75:dd:
31:6a:f9:e1:c0:97:a8:73:4e:71:4f:cb:cd:80:28:
74:34:45:f8:c6:e8:af:df:96:8b:33:71:60:ca:c3:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F5:4F:EE:28:39:6C:0F:B9:1F:B4:13:67:78:41:1A:C6:E5:BF:8E
X509v3 Authority Key Identifier:
keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:20:21:60:5a:5d:38:a7:e0:c5:8c:62:dd:e5:11:6c:c5:e6:
e5:c0:09:44:72:5a:7a:f1:19:b4:37:3f:86:83:24:a3:37:f4:
84:42:6b:c7:40:0b:cf:93:34:e0:07:cf:19:9f:de:e6:b6:7a:
61:16:2d:91:d2:fc:3b:59:a0:55:1f:f1:b0:a3:38:26:b7:35:
21:36:6c:1a:26:e4:4d:ad:00:27:f2:e8:e4:87:5f:11:53:b9:
4e:cd:c3:63:b8:ac:b7:23:77:87:1b:6c:d8:9f:d7:00:a1:3c:
ff:2a:ea:0a:21:7a:45:97:ce:f0:04:e5:36:50:f8:d1:d0:b0:
5f:4d:28:4c:49:1b:d0:06:99:f1:f9:df:4c:2a:08:e1:80:fb:
3e:13:ca:14:d8:a5:91:64:40:fc:6e:0a:d5:42:71:df:ab:5f:
f3:54:fa:5b:49:a4:86:98:49:4b:31:3d:7f:c3:ee:8e:9b:50:
94:6d:b1:c9:fa:c3:89:4b:ce:e1:04:4c:85:64:f1:5f:60:9b:
d7:1d:e0:9a:73:78:c1:f9:a3:6c:c1:0d:44:0f:a9:27:9c:c3:
c6:61:77:3a:e1:6f:ae:35:57:66:a7:50:79:d9:d5:39:4f:8c:
d4:8f:95:6d:0c:da:07:28:3e:79:78:3a:04:86:ad:de:c4:88:
13:5c:32:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:14:48 2025 by rpki-client