Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
File: X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json)
Hash identifier: AWd7unSx/Tt3zZgrZWqSxJBPOnoBzDPaM0mGP5xwqdg=
Subject key identifier: DD:53:92:70:05:A5:56:29:3B:07:87:68:A1:22:92:44:86:51:97:C0
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 019657944DEB24ECB75EC8FF4BCF5FAF3991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 09:00:59 +0000
Manifest this update: Mon 21 Apr 2025 09:00:59 +0000
Manifest next update: Tue 22 Apr 2025 09:00:59 +0000
Files and hashes: 1: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: LJcxmzzVIifaAHyfsdGAZohJJmv4g7B7dQMHte0Hskw=)
2: b8cMShMrRsZNeCR-DHToKJSbSFc.roa (hash: Xs+2pmDsikwjys7lR2WnXyOpx7FAM2jx9740akpfIYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:4d:eb:24:ec:b7:5e:c8:ff:4b:cf:5f:af:39:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Apr 21 09:00:59 2025 GMT
Not After : Apr 22 09:00:59 2025 GMT
Subject: CN=dd53927005a556293b078768a1229244865197c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:0b:37:13:e8:3b:eb:25:bb:91:21:0f:20:
2b:7a:bb:03:93:e6:7b:d6:ef:ee:99:f2:85:ca:a9:
a4:24:6a:84:40:23:61:76:3c:87:d1:36:5d:bb:67:
a8:ba:88:cd:b3:14:e3:ec:d7:dc:c2:4d:de:9a:a8:
7e:28:66:31:17:67:60:24:3e:fe:ce:71:92:cb:35:
8d:2c:d0:c7:f6:1a:2e:f9:e3:fe:1a:91:72:c2:f7:
41:9a:1d:e7:f8:3a:c0:f7:bd:33:24:50:b8:e6:72:
be:5d:a3:f3:76:1e:36:0e:db:60:88:42:5f:75:f4:
a9:3f:74:d1:36:76:01:b6:2a:65:ad:b3:a4:36:7a:
f3:71:1b:22:44:05:52:4b:c6:80:e8:6d:5c:8a:c3:
56:c5:ea:c3:d1:44:d4:0c:22:23:fe:d6:08:ff:d7:
57:f3:ab:40:24:2f:e0:35:d5:d4:ff:fd:f5:29:74:
96:ea:e9:c7:a1:ab:ba:1f:3e:f6:a5:42:e3:d0:ce:
ac:df:4f:67:f7:34:93:43:ec:84:0e:40:2f:5a:62:
cd:66:bd:2d:53:e7:61:01:76:90:ec:35:c9:5c:65:
e1:f0:5e:86:12:8a:da:57:b5:90:5b:57:38:1e:c9:
fe:78:ab:73:8f:1f:f1:e9:de:9a:09:a9:d3:91:f3:
3c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:53:92:70:05:A5:56:29:3B:07:87:68:A1:22:92:44:86:51:97:C0
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6c:ac:c6:ef:12:80:a9:4f:f0:d0:58:53:76:e3:2d:46:98:
4a:81:59:e0:b5:7e:e9:02:04:74:de:c9:60:63:81:8a:46:09:
67:62:40:f3:27:81:e6:3f:0f:a6:64:8a:0c:45:91:31:de:38:
c3:0d:c7:bf:6b:f4:5c:e8:ff:20:05:53:f7:e6:fe:5a:79:1c:
b1:54:bf:c5:9c:a8:19:f0:f6:3b:a4:56:a9:58:1a:d1:b5:7c:
22:6d:16:2a:fd:51:5b:4b:73:43:89:d6:28:e9:06:1a:92:0b:
7a:1a:53:66:dc:66:f0:22:85:86:db:60:17:01:b0:43:fa:5d:
25:cf:3e:9d:29:08:e5:38:38:2e:3b:cb:05:2b:eb:e3:b8:13:
0d:25:eb:9d:2d:07:73:8b:4d:d4:22:69:6d:2a:a1:fa:fe:7c:
77:10:93:99:7c:75:a1:bb:23:8e:ad:5d:f9:4b:80:80:84:5f:
55:03:cd:2a:61:2a:2c:dd:76:67:88:b0:0f:cf:9e:2e:8a:c0:
af:62:40:15:92:2f:b1:41:46:d8:c4:fc:43:86:60:3e:ea:a4:
74:5c:2b:55:70:11:ad:9d:d1:56:82:5f:a2:36:f9:97:05:a4:
0f:ba:c1:ac:52:55:89:65:6c:66:77:90:85:cc:98:a4:b0:d1:
56:a0:02:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:18 2025 by rpki-client