Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: tLHJMaS0Q+bOQFTjdaivYr/6JlcHVVP7VLmM3YOgyWs=
Subject key identifier: 36:D7:A4:85:B5:96:66:CA:14:D4:04:1A:83:BD:17:B4:8D:2B:7C:F7
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 0196391BF9CB6E5704526AF438E91D2D0B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 14F1
Signing time: Tue 15 Apr 2025 11:00:56 +0000
Manifest this update: Tue 15 Apr 2025 11:00:56 +0000
Manifest next update: Wed 16 Apr 2025 11:00:56 +0000
Files and hashes: 1: LTquGO6JvOxW-LYJu4ZO5vl58sw.roa (hash: v+hhHffkC8MxjORjl69a74aTRaVaz0829ZGGCSWHn0k=)
2: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: kvGIhKTbec+Zfh+U2zbvMV8duh6matCSwX0gedY9BWE=)
3: YOp8_XwcgPGtX480oZMMv5FkFTE.roa (hash: JNbcPg+eKKH2RwoC8Uz9lo+3KmcraBTljIvma3VhA6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:1b:f9:cb:6e:57:04:52:6a:f4:38:e9:1d:2d:0b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Apr 15 11:00:56 2025 GMT
Not After : Apr 16 11:00:56 2025 GMT
Subject: CN=36d7a485b59666ca14d4041a83bd17b48d2b7cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:29:44:0e:2e:14:61:f8:b4:93:f6:b3:ee:
87:67:3e:17:78:7e:8e:d6:d8:fa:99:84:70:5e:7f:
9f:42:fb:38:75:c5:1a:d8:09:5b:5e:ba:2c:9f:0e:
e3:5f:0e:ab:42:cb:f6:74:3b:20:f1:8f:8d:0c:9f:
c2:25:87:d3:f2:4c:2a:48:03:78:8a:df:9c:78:8c:
4e:0b:37:76:e7:67:15:69:0a:5e:16:88:03:8e:fa:
c7:b8:35:32:f1:44:d5:3a:53:ed:6b:f9:42:bb:33:
32:bc:72:e2:6c:bc:7f:7c:38:83:5f:3b:1f:5a:e3:
5e:21:30:97:38:68:51:47:79:03:c0:c6:e9:f8:39:
97:99:54:f1:0a:47:5b:e9:a1:a1:32:59:f3:db:80:
0b:a0:20:02:0e:00:52:34:20:65:c4:21:dd:ed:55:
c8:40:d3:51:5c:e0:91:2b:62:6d:9a:b5:21:a5:85:
cc:85:96:22:ed:8d:18:f5:8a:27:d0:66:9d:d5:e9:
b4:bd:65:6b:0d:de:c1:32:1b:59:f0:02:87:9b:e7:
1c:d4:2c:c4:fc:9b:9f:35:39:f1:b0:97:d0:1b:82:
77:39:05:a5:e4:70:48:bd:41:d9:f4:22:3f:ac:88:
db:de:9f:ae:6d:77:21:72:be:b0:f9:f2:73:ef:f7:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D7:A4:85:B5:96:66:CA:14:D4:04:1A:83:BD:17:B4:8D:2B:7C:F7
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6a:e3:df:8f:1a:6e:ff:90:ba:b7:23:f2:fb:3e:36:5a:fe:
b1:3c:60:e0:fa:f8:6c:97:03:39:13:50:c0:2d:ac:48:99:66:
a9:a2:5c:78:4a:45:60:02:01:39:5d:f6:9f:ae:0c:da:5e:db:
e6:cb:b9:24:23:b9:2f:e7:9f:db:72:cc:92:70:ca:49:4e:a4:
2f:ac:97:44:8b:1e:d8:22:cc:09:d1:a9:0f:8f:0d:3c:a6:23:
92:04:cb:90:27:18:70:63:a4:31:08:ca:e3:67:ca:89:10:16:
a0:e8:c0:d2:c8:37:de:a1:cc:5f:51:4e:be:83:e3:6b:f3:ce:
86:f9:bc:2d:1e:b7:8b:d0:a4:98:0f:e2:c5:84:cb:51:40:9f:
78:19:12:ba:42:5d:91:14:19:ab:85:cf:0b:21:59:57:7f:5b:
63:cc:27:e8:e6:01:97:4c:1c:b6:cf:11:9e:4e:7e:11:30:f6:
8c:d3:e5:7f:8d:07:84:d9:2c:04:9f:71:20:a0:79:06:c4:2d:
1f:39:b8:77:9b:9b:63:28:83:f0:55:40:4a:ed:f8:8c:55:09:
17:84:0b:b0:dc:f5:3d:27:69:8a:e1:f0:d1:09:bd:34:a0:dd:
99:eb:5f:c0:d8:15:f8:38:a2:61:97:8a:a9:43:53:6f:0e:55:
58:e2:3d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:16:31 2025 by rpki-client