Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
File: XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft (raw, json)
Hash identifier: 79f+/FacVGwAyGZgohklqd3CycMKofdGv77EH0sh8fQ=
Subject key identifier: 35:C3:45:1A:89:8B:3B:CD:73:86:90:E1:09:10:AD:BB:93:4A:62:E9
Authority key identifier: 5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
Certificate issuer: /CN=5c757007aebf00098a800228db1f5930ee66e675
Certificate serial: 019654255295B1BEB5157DB0F50654C6007D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
Manifest number: 0503
Signing time: Sun 20 Apr 2025 17:00:54 +0000
Manifest this update: Sun 20 Apr 2025 17:00:54 +0000
Manifest next update: Mon 21 Apr 2025 17:00:54 +0000
Files and hashes: 1: XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl (hash: OJPUwUXi5nE8Liqce28nqscYEOZemrkImzhXMKrvtZw=)
2: zeSSBsoxeiaEub6sPGDgBihsYlQ.roa (hash: ZJtLDNZbI5epQGziT22ZjYkOk6GcLflWv5h+Gm6/V1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:52:95:b1:be:b5:15:7d:b0:f5:06:54:c6:00:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c757007aebf00098a800228db1f5930ee66e675
Validity
Not Before: Apr 20 17:00:54 2025 GMT
Not After : Apr 21 17:00:54 2025 GMT
Subject: CN=35c3451a898b3bcd738690e10910adbb934a62e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:79:58:08:c8:37:f9:a5:09:a8:67:91:af:8f:
96:54:0b:73:5e:68:aa:b5:49:0e:ca:73:2f:a0:93:
9f:e3:63:78:8a:47:ab:7a:55:9f:ca:79:1e:8b:a7:
48:aa:28:cb:b9:dd:72:9e:43:78:e5:c6:fd:a4:76:
59:01:f7:7c:46:fa:48:c7:63:ca:a9:af:b7:b0:ae:
08:45:20:7b:3c:d2:12:bc:c1:5a:6a:18:41:43:9c:
6d:cb:3d:7e:81:7d:5e:51:f8:48:f2:8c:c4:c1:45:
16:0f:33:32:95:7c:14:6f:b6:06:d1:f3:a1:7a:1c:
f7:29:34:bb:10:45:9f:6e:76:89:1c:9e:fe:8d:7d:
40:5e:4d:fc:cf:a3:93:60:06:91:96:2e:0e:7d:7a:
f4:84:06:50:c6:dd:52:29:7d:2f:59:09:ef:29:b4:
1e:ef:36:7c:87:3d:8d:d6:e0:da:6c:c7:e0:da:39:
0f:25:42:1d:9c:e2:35:8a:1e:74:3f:7d:b2:8d:f5:
ea:65:5f:da:d7:ba:e6:d0:85:c1:34:4b:ba:c7:e3:
7a:b1:14:c7:6e:24:48:35:d7:ea:bd:87:cc:ce:5c:
c3:5d:d0:90:db:e9:b3:ff:2c:21:f9:c3:20:de:2c:
1a:b7:8e:6f:69:aa:4c:5a:16:38:ba:ef:f3:13:31:
45:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C3:45:1A:89:8B:3B:CD:73:86:90:E1:09:10:AD:BB:93:4A:62:E9
X509v3 Authority Key Identifier:
keyid:5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:70:aa:71:3e:6c:3b:b1:ff:5d:66:79:51:48:ae:88:4d:2b:
61:49:02:41:d4:be:92:69:1e:ba:06:27:1d:94:c3:3a:80:ab:
ed:98:cd:51:b3:87:72:23:d8:77:a9:cb:ea:fe:21:02:dd:45:
ee:6d:c1:23:00:95:12:93:b4:7a:5b:b2:f0:8a:17:c2:db:d2:
cb:85:49:06:fb:9c:e8:0d:e7:8a:e1:e2:78:66:93:c8:f6:27:
a6:6b:85:5e:bf:03:26:4f:59:2e:75:c9:4e:04:1a:8c:3a:45:
db:82:bf:32:78:24:00:53:28:c5:f5:d5:c2:3c:8b:ed:41:b9:
7a:f8:76:f1:e1:7e:34:5a:8f:1b:2f:94:52:f2:73:6f:f1:eb:
eb:f2:20:60:7b:37:6a:20:3a:e4:70:11:cb:8d:d6:f2:7c:9b:
8a:d5:3e:02:ee:9f:4d:ca:ef:14:07:da:98:1f:d1:87:81:c8:
f9:35:5b:73:88:e1:80:72:31:11:d5:7d:fc:29:f8:df:91:05:
0e:42:bc:f3:16:a7:ed:ad:50:40:2b:0a:b8:05:54:69:62:71:
05:cd:4b:e9:bb:56:a4:4b:c9:63:aa:b6:97:18:aa:6f:e2:a2:
a0:62:c6:d9:b1:75:d0:7c:af:02:d7:5e:a8:fa:bd:7b:c9:68:
28:e0:46:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:19:25 2025 by rpki-client