Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
File: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft (raw, json)
Hash identifier: qGC1YmkD9Ay5YmpiD6l43/z+tk19pUhEgx3OLhDIYwA=
Subject key identifier: A1:64:B5:74:7A:E7:3B:36:4B:33:F3:67:96:EB:93:1F:99:BF:FC:65
Authority key identifier: 5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
Certificate issuer: /CN=5c40454a1b176795f021575347794bd9f04427ac
Certificate serial: 01964CA279D85084C4334867B12C166883F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
Manifest number: 033C
Signing time: Sat 19 Apr 2025 06:00:38 +0000
Manifest this update: Sat 19 Apr 2025 06:00:38 +0000
Manifest next update: Sun 20 Apr 2025 06:00:38 +0000
Files and hashes: 1: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl (hash: MiyAl4XFrUUyiBKvDZSKXTi7rEi51lToGaXw+jz7M2E=)
2: c_JE84x-V2cV3KZFySyzgUu68wY.roa (hash: mJ5axd73qhrQA8e697fkmyMkcOmN3YmgqnGx7qbzQIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:79:d8:50:84:c4:33:48:67:b1:2c:16:68:83:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c40454a1b176795f021575347794bd9f04427ac
Validity
Not Before: Apr 19 06:00:38 2025 GMT
Not After : Apr 20 06:00:38 2025 GMT
Subject: CN=a164b5747ae73b364b33f36796eb931f99bffc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:78:00:fa:4d:78:f0:4f:62:78:aa:ad:43:
5a:df:d5:20:1c:65:17:b2:a9:e6:7a:f3:6a:59:53:
06:86:25:bb:5c:f2:c3:a2:a2:45:55:6b:ea:51:be:
e9:df:47:a5:16:7d:a9:cb:88:23:ec:58:ce:7d:74:
06:eb:cc:89:e3:03:f7:dc:c5:e1:84:d6:f3:82:65:
38:14:05:e6:02:e7:61:05:20:c5:2c:dd:1d:ae:cd:
2c:78:2e:c6:d2:5c:94:09:3a:d1:7d:91:bb:6c:d9:
4c:2f:23:8c:1c:c1:85:ad:85:75:3e:fb:97:35:80:
17:8b:92:92:8e:b9:61:e7:50:aa:80:f0:2a:4c:25:
af:9b:e8:d7:a6:6e:66:14:c9:0c:d9:1d:80:4f:6d:
81:3f:33:44:02:9e:46:fc:aa:20:14:9d:3d:9a:86:
1a:cb:69:63:eb:1a:f8:83:c1:89:00:3c:13:5e:11:
69:8b:f8:9a:b9:e2:37:10:c5:bd:b8:48:c1:3b:b2:
04:e8:2d:81:33:f4:73:bc:6d:b1:bd:62:4e:91:a5:
c2:51:ed:21:9b:2b:f5:d2:09:6f:98:d8:18:1c:58:
db:1c:50:65:40:fb:7a:99:a7:9b:5a:8a:fa:72:d5:
42:a7:7f:bf:f7:7b:66:47:56:ab:c0:3f:1a:7c:ad:
86:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:64:B5:74:7A:E7:3B:36:4B:33:F3:67:96:EB:93:1F:99:BF:FC:65
X509v3 Authority Key Identifier:
keyid:5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b1:06:e6:03:80:01:59:e9:cc:09:a9:9b:19:3a:0c:59:d0:
0f:82:59:cf:27:b4:37:7e:2e:f1:6a:d5:69:7b:56:24:9e:8f:
7e:41:7d:40:8a:a3:e1:db:42:92:c3:07:2a:9c:84:26:48:44:
5b:51:ac:15:62:5c:87:b0:0a:3f:41:c1:ac:e4:7e:41:9e:0e:
f6:cb:57:55:26:2f:bd:a8:88:c3:94:dd:f4:62:9c:62:f2:41:
9a:19:f8:c4:9c:75:50:fb:b3:e3:c1:af:77:11:1a:d9:c6:87:
42:10:99:80:ce:8f:a9:28:0d:bd:d3:68:6e:10:a9:17:16:26:
ac:f2:65:67:a8:a3:12:e2:e5:53:64:1b:75:22:ac:3c:ea:5f:
e1:9c:19:2a:ae:f5:77:d8:66:6c:f8:8f:31:e0:b6:79:cf:a2:
32:f5:55:fc:f6:83:5e:65:39:ff:bc:14:bb:c3:40:1e:9f:96:
ac:8a:be:98:ab:28:3e:0d:03:31:b5:3d:09:99:28:ab:17:78:
6b:19:00:87:3f:80:f0:bf:4d:de:51:d5:de:f9:f0:9a:fb:85:
aa:df:cd:db:9d:80:c9:c4:c5:f8:cc:11:ef:fa:16:f4:39:69:
db:20:ca:17:09:3f:da:a3:06:e1:30:01:89:21:fd:b8:af:80:
00:36:9b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:19:56 2025 by rpki-client