Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
File: XX9jQBQHwcx5excDToE9IlT5dz4.mft (raw, json)
Hash identifier: 7QbIT6UbuqqiNgadWPtn8kmH67MdM507MAzpnDrufRs=
Subject key identifier: 2A:02:D5:EE:CE:6F:CA:CC:D4:3C:75:62:A3:8D:FD:24:5A:D5:D9:66
Authority key identifier: 5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
Certificate issuer: /CN=5d7f63401407c1cc797b17034e813d2254f9773e
Certificate serial: 0196556ECB224ED01D0737E2D2C40A8092DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
Manifest number: 0B95
Signing time: Sun 20 Apr 2025 23:00:46 +0000
Manifest this update: Sun 20 Apr 2025 23:00:46 +0000
Manifest next update: Mon 21 Apr 2025 23:00:46 +0000
Files and hashes: 1: XX9jQBQHwcx5excDToE9IlT5dz4.crl (hash: opAox+h1GnbY2TEs/wtfHnu5VOMAYRuNtFXf5uAvuMU=)
2: d_GxW2d1XGEYH2UR9fC88UUW3QY.roa (hash: uor8f2a3ITsSo8ZIn5M2P4KmPLaok++1jFjqHJFf6Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:cb:22:4e:d0:1d:07:37:e2:d2:c4:0a:80:92:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7f63401407c1cc797b17034e813d2254f9773e
Validity
Not Before: Apr 20 23:00:46 2025 GMT
Not After : Apr 21 23:00:46 2025 GMT
Subject: CN=2a02d5eece6fcaccd43c7562a38dfd245ad5d966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4f:68:b9:31:ea:3e:a9:d6:65:0f:73:9a:81:
76:33:3f:af:5d:91:15:16:64:8c:44:c7:c1:f3:c6:
5a:64:2d:9d:c9:f4:7a:c1:5c:5d:1b:a9:c7:2c:47:
a4:49:d8:e9:40:3a:8d:8e:9f:dd:12:e9:0a:75:b2:
8e:f0:44:c9:87:56:d3:a6:13:2d:2c:9d:51:f3:9c:
96:bb:11:c1:a6:5e:1e:4b:9e:5b:65:33:7a:56:2f:
01:5b:b2:11:f0:7c:c6:da:a0:1f:a6:d1:7d:d8:3a:
4d:b4:57:83:a7:f5:ed:fd:c3:a7:b2:18:f5:a5:54:
7e:84:38:5e:6d:eb:71:e9:a4:36:74:9d:6c:7b:78:
b9:ad:90:a5:5f:5e:6d:58:7e:ae:59:8f:b3:f9:b7:
c3:c2:a8:92:23:6b:ec:08:91:62:45:e8:b7:2e:df:
82:ce:6a:2c:a0:a7:02:ed:81:e7:6b:ea:97:c8:72:
4c:0d:33:d8:0a:2d:ee:69:8e:8f:30:ab:27:2f:ea:
7c:49:b1:ee:b8:51:88:da:cc:f8:78:f9:2e:58:c9:
14:b4:93:74:ac:a6:61:b2:d1:4a:f1:7b:1c:fb:05:
44:4b:24:db:a9:63:a2:19:45:a4:33:00:1d:c5:fe:
c4:0e:61:39:5e:f0:6f:c1:2d:b3:b2:eb:fd:8f:06:
10:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:02:D5:EE:CE:6F:CA:CC:D4:3C:75:62:A3:8D:FD:24:5A:D5:D9:66
X509v3 Authority Key Identifier:
keyid:5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b7:ea:73:00:8e:a2:bb:23:ce:4b:9b:28:4f:e1:84:d5:9f:
11:85:54:5b:3b:ab:7e:6d:40:9f:0e:0f:34:dc:3e:a1:70:98:
76:ce:36:93:ab:75:91:3c:95:e9:97:d7:38:44:95:ed:d1:8f:
b3:7b:36:ec:34:d6:c2:81:65:57:61:ad:6d:1f:2e:7b:4a:8a:
fb:7e:c9:8f:6b:6b:99:36:9d:31:3d:85:af:f5:d9:6c:b3:b4:
41:1c:0d:f6:e0:c1:ed:94:11:36:91:ee:ee:7d:84:b1:93:0b:
8e:1e:09:b5:f5:a0:39:c3:d8:39:78:38:b7:2d:a7:2b:7b:55:
47:da:fc:5e:0c:f5:af:e6:19:4a:de:60:43:43:62:5c:06:ec:
bf:44:eb:17:79:cf:72:d8:a6:99:c3:69:b1:99:8f:3c:d6:05:
ed:2f:ba:d8:63:b1:ec:cc:bb:6a:b5:6f:99:46:36:8d:f3:66:
ff:20:5c:de:12:ac:99:3f:3d:20:ab:2c:65:01:00:be:d8:c5:
e1:68:22:26:ec:3b:36:cd:65:fa:73:13:5d:65:d4:52:ef:c6:
19:30:76:19:8b:d7:01:ea:3c:79:07:b1:30:60:99:7e:6a:68:
41:1d:71:72:e2:f9:e5:c7:75:3a:1f:22:81:63:32:dc:20:14:
ae:c0:1d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:43:57 2025 by rpki-client