Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
File: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft (raw, json)
Hash identifier: NqqFAIFosfGPp0q1Ewt7LZbTOIrV8b3e4af5ERkX4Sc=
Subject key identifier: 1B:55:09:1C:B3:D2:58:73:25:EC:E8:C7:80:A8:44:46:69:B1:ED:FF
Authority key identifier: 5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
Certificate issuer: /CN=5ea68c853810d0320b156844f29317701b58610d
Certificate serial: 01965981F9A67D3B845BA3F3C094B63FB4EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
Manifest number: 093E
Signing time: Mon 21 Apr 2025 18:00:12 +0000
Manifest this update: Mon 21 Apr 2025 18:00:12 +0000
Manifest next update: Tue 22 Apr 2025 18:00:12 +0000
Files and hashes: 1: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl (hash: DrCkR+ctpnWf/tkyudMYChZ70bOQeNrWPGX7cd/heNg=)
2: zWctF490hB_hw_nmdFUFC_bPmMM.roa (hash: SsIXLaayVDdukX1So7HtLQgGu/7qBD8U27FPnJFIDDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:81:f9:a6:7d:3b:84:5b:a3:f3:c0:94:b6:3f:b4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea68c853810d0320b156844f29317701b58610d
Validity
Not Before: Apr 21 18:00:12 2025 GMT
Not After : Apr 22 18:00:12 2025 GMT
Subject: CN=1b55091cb3d2587325ece8c780a8444669b1edff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:14:3d:b2:ef:81:68:2c:92:44:97:cd:97:
2b:43:e7:6f:3c:20:62:8a:f8:2c:61:2e:3a:6f:f5:
8b:57:42:ef:0e:a8:67:7a:5f:6d:fd:ec:a3:7c:8e:
bb:ba:bb:02:58:88:bf:7f:f2:ac:d8:0e:69:04:ba:
0c:34:1b:c1:87:b9:b4:76:01:d2:93:34:05:1e:46:
c5:48:6e:35:89:4e:0f:40:76:1d:e0:c8:3f:9b:a3:
20:12:54:34:5b:73:1f:d6:70:9d:52:c2:bc:47:54:
be:04:67:ed:fb:0f:23:ac:83:04:84:b6:58:81:80:
ea:4c:85:a9:46:3a:41:8b:3d:d2:13:3c:e0:0f:98:
22:ff:23:47:15:b8:59:a6:a3:be:ee:36:66:0b:48:
ad:12:76:57:bf:8d:c4:51:50:cd:b8:16:cb:7a:38:
2b:73:49:dc:e5:49:91:fe:b8:e8:9c:5e:5b:82:77:
5b:9c:12:98:bb:93:30:c4:f0:be:8f:68:b4:ac:1e:
de:c0:9b:30:e9:2d:06:40:13:bb:29:3e:ed:6d:4a:
6e:a8:6a:43:a8:15:7e:61:62:37:10:82:56:73:0a:
c6:8e:a0:29:29:30:8b:4a:93:0f:53:58:48:d4:7b:
9c:f5:b3:b9:c5:06:8d:2a:01:d4:98:25:82:ee:32:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:55:09:1C:B3:D2:58:73:25:EC:E8:C7:80:A8:44:46:69:B1:ED:FF
X509v3 Authority Key Identifier:
keyid:5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c3:62:39:45:09:35:32:12:ee:2c:0e:56:40:e7:79:7d:3a:
d6:92:79:3c:57:fa:21:a7:b2:29:d0:b5:23:28:c8:cc:07:b0:
05:e6:a5:82:43:7a:1c:4e:fd:e3:3f:0f:f4:45:53:ff:04:d2:
8a:58:b5:b4:c8:87:0f:92:68:9b:14:da:6f:b6:fc:67:ad:ad:
05:f6:66:8d:6f:83:84:ec:2d:91:df:27:93:1f:e3:1b:c4:e2:
68:5f:57:37:d1:94:df:35:d7:6e:e6:21:37:a3:b0:aa:6a:89:
17:c7:a2:26:b8:2a:57:b3:72:e5:da:e2:71:4b:d4:f6:19:a0:
1f:30:a6:63:03:3b:00:3e:65:52:b5:c6:1e:fc:d7:95:d9:d8:
fe:7e:5e:f8:cb:84:c5:39:9a:1d:3c:e6:cf:a6:8e:67:0f:c6:
b7:39:79:89:33:69:0e:ac:4f:34:ae:f3:93:95:54:61:8d:82:
61:ed:1d:be:3a:0d:a0:04:6c:4e:63:4e:c8:93:8c:df:df:27:
d4:e8:f2:f8:25:79:19:3a:d2:cf:8b:91:95:da:ec:56:e8:2a:
f9:d8:dc:33:4b:52:10:82:a1:0b:d8:70:e0:92:34:8f:74:e1:
e7:2a:3c:78:ec:53:da:dc:d4:a9:20:d7:89:c2:62:ad:48:b6:
41:e2:6b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:32:14 2025 by rpki-client