Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier: JSXFuLiGd18UarLpJ5+fPehUNpNSj2BmLIyJZDEAx/8=
Subject key identifier: 04:BC:92:82:53:15:D1:B3:9B:19:55:26:48:44:1E:01:C7:70:AA:3D
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 01965DCD1641796D4B485752B7BD56B675B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number: 04EF
Signing time: Tue 22 Apr 2025 14:00:43 +0000
Manifest this update: Tue 22 Apr 2025 14:00:43 +0000
Manifest next update: Wed 23 Apr 2025 14:00:43 +0000
Files and hashes: 1: Wk_9wtGClVrtYODuHEtURJ-3oHQ.roa (hash: s/nXb34IkLeKLlmquub76FOlWdViv6YcrY3Wh7bVOcc=)
2: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: MhWyftwp5jAS1jP0flWLs5kafKFSuksAmv67l8I1om8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cd:16:41:79:6d:4b:48:57:52:b7:bd:56:b6:75:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: Apr 22 14:00:43 2025 GMT
Not After : Apr 23 14:00:43 2025 GMT
Subject: CN=04bc92825315d1b39b19552648441e01c770aa3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b1:d3:cf:25:6e:9f:fb:66:fe:4d:d2:3f:95:
ba:1a:03:a8:95:aa:6b:7f:7f:ce:e2:d0:aa:4d:8f:
25:c8:5b:9d:d2:1b:1b:70:af:12:b3:d4:98:f6:10:
c8:d9:53:f4:0e:96:fa:8e:64:89:84:11:b9:88:1f:
7b:fc:1f:c2:47:99:a2:2d:25:38:b0:68:b1:81:d2:
43:ac:6a:48:be:23:3a:10:4d:5d:1f:dc:7f:03:49:
c2:87:d2:27:4f:42:3d:d8:81:70:1e:de:49:d1:c1:
fb:44:9a:05:53:06:ae:0a:11:28:5b:4c:82:cc:c8:
f9:6d:f3:d3:23:e7:4d:e1:ac:ea:f1:c8:29:23:09:
8c:6b:87:fc:62:a1:9d:81:1f:1b:8e:55:4e:fd:43:
51:1d:7f:01:a4:33:ed:ef:17:00:3b:76:c1:40:c9:
ed:9e:cf:df:5f:d6:55:9f:54:0f:f4:b7:fd:e1:48:
c9:d8:45:5a:ba:23:9b:31:8a:05:86:eb:ad:f5:97:
f9:ea:10:07:e5:f1:a3:6b:c0:dd:d9:74:42:ee:32:
7f:51:04:64:fd:eb:bf:ac:83:8f:58:77:76:98:6c:
67:6c:f4:cb:8c:e8:88:1a:d5:25:cc:09:97:a2:a0:
99:3e:54:ff:9a:42:4e:d8:d4:70:3b:36:42:52:d4:
17:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BC:92:82:53:15:D1:B3:9B:19:55:26:48:44:1E:01:C7:70:AA:3D
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:02:a9:95:c0:11:5e:c3:88:60:1c:8f:d3:38:ea:6c:28:db:
42:c2:ef:67:77:74:c5:fb:e6:4b:7a:fb:01:0e:cc:d1:53:9c:
15:df:ac:b1:7f:12:a1:53:36:c8:ec:79:c2:2c:eb:64:23:36:
46:eb:3b:a4:b4:db:df:ef:72:12:07:8e:09:3a:4d:43:4e:6e:
f2:ad:a6:b6:d5:7a:2a:3f:af:c5:18:2c:28:f3:2c:27:d7:a1:
9c:2c:71:24:91:c0:03:32:5b:2c:35:b5:22:6b:2a:f8:9f:2b:
78:1e:bc:cb:7a:30:41:d4:53:bb:7c:c3:1c:9a:44:45:81:07:
1c:84:42:cf:0a:5c:de:22:56:9c:37:82:9c:30:ec:8b:77:31:
48:7d:87:d7:15:94:a5:42:7a:1b:4f:9e:aa:21:58:2f:59:eb:
81:1f:71:d5:e9:ff:0e:f7:0e:84:72:35:a8:7c:06:72:05:3e:
dd:3a:38:3d:31:87:f0:eb:a7:92:7c:1a:33:d1:f6:bc:84:83:
93:65:c5:e8:46:14:77:aa:84:f0:3f:23:53:86:d5:3b:8d:b3:
4e:a3:95:1d:38:17:c1:6a:be:19:26:89:95:b0:c4:60:e7:63:
87:c1:b4:c1:e8:72:75:3b:36:48:49:97:6b:d7:64:03:34:a4:
71:70:fc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:38:28 2025 by rpki-client