
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft
File: XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft (raw, json)
Hash identifier: tX0UGG4js2Zn75NEJq30Hih+Xsp8j39wYxF4id8Q6G0=
Subject key identifier: 36:CF:30:B9:06:74:68:F2:C6:37:6D:B1:4E:4F:03:0D:6F:64:46:26
Authority key identifier: 5F:2A:13:3E:C2:FE:60:67:B5:64:96:E8:19:D5:BF:B4:E4:47:1F:94
Certificate issuer: /CN=5f2a133ec2fe6067b56496e819d5bfb4e4471f94
Certificate serial: 01965492A323A61306B9A0C255BDC3792DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyoTPsL-YGe1ZJboGdW_tORHH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft
Manifest number: 070E
Signing time: Sun 20 Apr 2025 19:00:18 +0000
Manifest this update: Sun 20 Apr 2025 19:00:18 +0000
Manifest next update: Mon 21 Apr 2025 19:00:18 +0000
Files and hashes: 1: XyoTPsL-YGe1ZJboGdW_tORHH5Q.crl (hash: kPr+el0+tKJKPbr71r0Ek5GNTN/yruJ0PcPRjCRWCVs=)
2: zw3OOzLu7F0rCvVUhFlHNjK6_48.roa (hash: EC4+NtSiW4UmHKtwZdLsHrR4X7fUOJDCpzkjNoARw5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyoTPsL-YGe1ZJboGdW_tORHH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:a3:23:a6:13:06:b9:a0:c2:55:bd:c3:79:2d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2a133ec2fe6067b56496e819d5bfb4e4471f94
Validity
Not Before: Apr 20 19:00:18 2025 GMT
Not After : Apr 21 19:00:18 2025 GMT
Subject: CN=36cf30b9067468f2c6376db14e4f030d6f644626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:64:c6:e0:4f:9f:f2:05:40:ab:db:0c:36:
88:56:5c:7d:32:cc:d2:a8:3d:f3:e3:0f:cf:af:08:
ce:c7:bf:dc:5d:34:58:cc:84:be:c4:f2:53:46:71:
d3:09:d0:49:c5:8d:54:2d:43:f6:59:10:1b:95:00:
a3:57:bd:eb:3a:6c:ce:c9:7a:da:78:73:c1:54:47:
8f:f0:cb:a5:b6:43:52:c1:fd:cb:51:33:d2:b2:9f:
79:ed:e2:25:1b:95:ca:cc:ad:33:21:f3:f8:74:77:
f4:d1:a1:86:b0:95:f1:d8:fe:85:ce:f2:bb:3f:41:
f8:09:0b:0a:c1:bd:01:e5:65:63:f2:08:ab:39:6c:
47:04:b1:a0:c9:5e:99:5e:b7:56:60:09:24:11:08:
77:8e:1f:09:e8:4d:dd:ae:ff:9f:dc:59:fc:8b:1c:
69:45:bc:bd:da:24:20:c2:1d:ee:c4:b5:f4:86:80:
0b:27:17:05:6a:83:13:99:47:4c:c0:14:c3:57:c0:
41:02:b8:ed:e9:40:e2:f1:a4:28:7e:12:72:ce:b4:
07:44:1c:0f:b9:ad:3c:7a:b6:ff:42:95:c5:32:cf:
69:85:cf:d4:35:42:33:bb:32:62:c3:3f:cb:5a:02:
03:6c:a7:7f:cf:d1:9a:8f:c0:2c:81:3c:0e:a1:b5:
ac:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CF:30:B9:06:74:68:F2:C6:37:6D:B1:4E:4F:03:0D:6F:64:46:26
X509v3 Authority Key Identifier:
keyid:5F:2A:13:3E:C2:FE:60:67:B5:64:96:E8:19:D5:BF:B4:E4:47:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyoTPsL-YGe1ZJboGdW_tORHH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:fa:b2:06:4d:75:e6:e7:00:40:e8:66:a3:85:ad:2e:95:18:
4c:f6:0e:9d:3d:d1:3a:33:cd:ef:01:9b:75:e3:b9:b6:84:f2:
d4:67:1f:9c:35:73:c1:b1:fb:0e:66:53:75:73:6e:e8:72:88:
d4:c9:93:75:d3:54:18:48:9a:c8:ae:32:4f:db:50:12:af:9a:
57:6c:72:98:71:50:f2:12:6e:6d:1a:97:64:b3:54:b5:85:15:
92:0a:fb:1c:a7:ae:a0:6b:4a:90:58:6f:59:ec:fc:24:74:69:
4e:17:10:bb:49:4d:30:c4:45:39:ce:a3:e6:a0:d7:d1:e7:58:
71:64:06:bd:95:f8:90:6a:2f:bf:4c:f0:d7:a6:74:56:28:76:
d1:63:6d:d1:46:d7:7d:22:77:31:f2:b1:10:91:ba:07:f2:3a:
e7:62:df:d6:6f:2b:80:3a:aa:69:56:e3:0a:42:60:a9:8e:6d:
3b:6d:c0:2a:86:36:6e:2a:c9:b4:5d:5e:24:4b:a5:3d:34:44:
6c:4e:03:13:b2:1e:50:5f:46:3f:9f:42:a6:14:0c:e4:5c:ed:
71:be:86:5f:70:84:08:f9:a1:d2:27:80:3f:ab:14:3e:dc:b8:
c1:72:cc:ef:82:fe:10:0b:3c:3b:b4:ed:a8:9f:35:90:35:4f:
23:1e:e9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:47:25 2025 by rpki-client