Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
File: xT4qugUV7JDRCREGD88pI2123d8.mft (raw, json)
Hash identifier: CQZ45CgMrIPOaQd1Mw31EyN+uO6ieNEI16D1L1cXMAo=
Subject key identifier: C2:9E:A2:D0:40:C3:9C:A9:A6:15:39:8C:0B:1B:E3:FB:79:DE:2C:4F
Authority key identifier: C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
Certificate issuer: /CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Certificate serial: 0196556E645F0811E154C84BDB71097596CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
Manifest number: 0CB4
Signing time: Sun 20 Apr 2025 23:00:20 +0000
Manifest this update: Sun 20 Apr 2025 23:00:20 +0000
Manifest next update: Mon 21 Apr 2025 23:00:20 +0000
Files and hashes: 1: f0yhahkLcuZ1yoHAyLMFgYV-0C4.roa (hash: o3wGDB8+TAGkWavLVm8YXjs+gVitRLdf6b5WKa02EC8=)
2: xT4qugUV7JDRCREGD88pI2123d8.crl (hash: zh3JFfeIM3CdaQHguz26+SeGVmELm0S1kYcjpceISro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:64:5f:08:11:e1:54:c8:4b:db:71:09:75:96:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Validity
Not Before: Apr 20 23:00:20 2025 GMT
Not After : Apr 21 23:00:20 2025 GMT
Subject: CN=c29ea2d040c39ca9a615398c0b1be3fb79de2c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:76:3f:ca:c9:60:30:87:0c:28:97:64:5b:
e3:98:5f:72:d1:5a:15:f8:95:18:b0:72:f9:f8:a8:
e3:ab:25:82:2e:81:6c:4b:22:3d:b9:54:1f:0b:3f:
3a:90:fb:9c:99:dc:4e:f5:b6:81:57:a1:dc:a7:81:
8a:10:bc:c4:4c:fe:53:d0:1e:81:e2:71:4e:46:11:
d7:08:cc:48:b7:30:2f:ca:e6:50:f4:3e:03:20:e8:
c7:30:bf:00:cf:8a:ed:94:e3:31:dd:06:6a:12:02:
7a:a7:e4:62:ea:60:3a:18:5b:4f:e9:ec:70:7e:99:
0c:ec:8a:4f:be:ff:08:70:ab:ec:a6:c2:dd:b4:e5:
ba:90:b7:5c:17:c1:de:3d:1e:4c:9f:51:d6:c9:03:
f7:8a:6d:b4:35:a8:11:51:58:c6:cc:d2:da:cd:d1:
77:f3:fb:ee:5d:20:16:32:da:eb:43:cd:48:ff:e0:
1e:f2:e3:32:4c:12:11:6e:a3:4e:5c:bc:be:96:86:
8f:7f:0e:ef:2c:e3:5b:65:cb:a3:8d:93:55:67:e7:
c3:8b:d8:ec:79:a8:56:6c:21:b0:37:5c:dc:9e:d0:
8e:b7:56:cd:ab:a9:15:69:b7:fc:14:9f:9e:53:56:
2f:60:99:0f:9f:18:29:94:99:3c:6d:9f:cc:f9:60:
a2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9E:A2:D0:40:C3:9C:A9:A6:15:39:8C:0B:1B:E3:FB:79:DE:2C:4F
X509v3 Authority Key Identifier:
keyid:C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0a:ae:ef:5f:1c:40:36:c3:fd:1e:f9:81:c4:dd:20:83:cb:
fb:a2:16:9f:54:33:d2:7b:ec:f3:7a:a3:78:00:72:c0:67:a6:
f0:17:c9:c7:70:be:49:d9:41:50:fb:94:10:c0:8e:83:8e:2e:
03:f3:2e:4e:1d:1d:9a:73:8c:2e:60:4b:e2:a7:75:14:dc:8e:
ec:99:de:b5:b0:aa:a8:a9:0b:e5:54:7e:38:c4:19:66:30:31:
5a:1d:8b:17:54:7e:ff:05:db:56:e3:4f:71:b2:9d:3a:71:e2:
87:c0:9d:9f:6e:2f:ef:38:9b:d5:9c:19:a0:9c:d7:9b:e5:20:
e8:c5:48:68:0e:4b:c4:56:35:c4:8e:75:d4:02:55:66:18:d5:
a3:04:17:58:29:79:a9:c0:fc:db:85:06:41:d9:70:ae:e2:d6:
ed:86:c3:f4:37:44:61:9c:d5:6a:12:56:dc:d9:ba:de:af:b3:
f0:38:0f:45:03:88:00:82:6e:b3:b6:5e:ec:e1:ee:da:ff:31:
6f:2c:f8:d9:a9:1d:1a:5b:ad:e8:e1:a8:f7:10:c7:77:fa:f2:
68:b3:4a:db:f1:cf:d9:c8:db:09:21:a3:04:12:71:08:85:76:
b8:2b:b2:38:8b:7b:23:4c:ac:4f:9d:f2:2b:49:10:a0:8c:99:
6f:71:79:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:51:47 2025 by rpki-client