Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
File: XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft (raw, json)
Hash identifier: CtAQKDnHIubB+T8jkc70Q5p7AfJ7XHrq/nPMqhnDGW4=
Subject key identifier: 84:86:AE:DE:5D:24:16:F3:1E:CB:59:77:EC:24:C9:A1:5C:90:B8:F8
Authority key identifier: 5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
Certificate issuer: /CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Certificate serial: 019658DD49E9F4800F639CF371AB4DB8E461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 15:00:19 +0000
Manifest this update: Mon 21 Apr 2025 15:00:19 +0000
Manifest next update: Tue 22 Apr 2025 15:00:19 +0000
Files and hashes: 1: XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl (hash: R6L6RXS2IoW8AYjSR9lUcMZl+2BBPgjSEFkZculGmUg=)
2: ZhJ5kdVgunlmo848w1nL5S4mr34.roa (hash: /GDuU5hcbbZPCMfEmpk6BhKCTJ1fC6jXDas0PVjpCto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:49:e9:f4:80:0f:63:9c:f3:71:ab:4d:b8:e4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Validity
Not Before: Apr 21 15:00:19 2025 GMT
Not After : Apr 22 15:00:19 2025 GMT
Subject: CN=8486aede5d2416f31ecb5977ec24c9a15c90b8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:d6:da:1a:5e:02:10:78:44:f3:a8:09:00:
c2:88:00:e0:26:c0:27:5e:0b:69:c6:7f:d9:ea:9c:
b9:c0:99:71:88:bb:9d:08:2d:73:a3:37:39:24:45:
35:a5:6e:ad:ae:fd:b2:45:bf:0f:b0:2a:08:bc:d9:
54:3e:37:1c:92:ca:94:78:4a:a9:85:20:8d:cf:61:
94:19:72:36:14:5e:0b:b3:82:8c:ca:34:d7:3b:1c:
cc:04:77:77:bf:b5:3e:c3:30:13:d6:ea:b1:c0:15:
41:35:62:d3:90:9b:1d:fb:00:ae:1e:7c:e0:36:66:
b5:e7:28:98:2c:7c:37:04:a3:4a:ef:24:0f:78:c1:
bd:f4:49:d0:2d:a5:6a:89:bf:70:ec:e5:86:82:df:
b5:78:3f:87:0d:09:ef:25:ca:6b:19:46:6c:12:2f:
20:cd:00:b7:d4:44:7f:1b:e0:e7:87:00:97:eb:92:
1b:04:e7:53:4e:37:02:50:3f:f1:f6:d0:b0:72:08:
13:41:35:c6:71:08:59:a1:29:f8:d7:63:59:90:af:
5f:3e:dd:ed:1b:16:da:ce:c7:12:46:15:67:fd:db:
e0:43:9f:d2:84:7a:11:28:22:61:c0:0b:f1:9e:6c:
fa:c4:a7:b9:02:bf:5f:06:8c:af:8f:9a:38:bb:35:
9a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:86:AE:DE:5D:24:16:F3:1E:CB:59:77:EC:24:C9:A1:5C:90:B8:F8
X509v3 Authority Key Identifier:
keyid:5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b0:fa:48:e5:6a:77:f3:68:d6:3d:ca:3f:ac:44:1e:bd:27:
75:a0:73:39:3e:b6:ff:4e:36:a9:e6:ed:21:26:7c:ed:58:8b:
36:5b:04:fa:8d:e4:9e:6f:0f:18:1e:d8:07:3c:18:0c:b6:d7:
8d:43:5d:60:c4:a0:8a:aa:bd:ee:70:46:c6:6a:cc:5f:da:a2:
60:77:e5:b9:63:84:c8:17:81:41:64:25:c4:36:65:c6:1f:cf:
c5:d9:94:08:6a:24:9f:b4:a3:c1:13:5c:db:3e:83:d3:bc:43:
f6:33:81:3d:c8:7c:65:2f:a2:34:d8:25:c7:bb:bb:b4:b9:04:
fa:84:41:7d:65:1e:ec:a2:4d:c7:c3:de:29:34:23:cd:d4:96:
0f:56:de:92:c7:65:51:b3:f1:09:56:9f:7d:a8:c5:d0:b8:d1:
0c:34:73:77:22:99:d0:63:52:54:c3:44:d2:24:bc:b4:99:24:
73:e0:a8:2e:eb:e8:d9:0a:76:8b:92:df:8f:9f:ed:0d:61:57:
8a:15:8f:19:d2:66:b8:5b:7f:13:91:42:b5:b9:41:c2:09:34:
53:52:b4:eb:ad:b3:18:64:94:ea:c9:0e:ae:4a:18:c9:24:cc:
1f:9a:92:9b:ef:ef:60:36:c5:71:a1:a2:5b:6d:80:26:9f:dc:
69:b7:45:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:49:07 2025 by rpki-client