Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
File: XGpfUrAC9ihsHV6yV7tehTNCooQ.mft (raw, json)
Hash identifier: xPMX1MlLXgG4A/PXPahKcXiI4siyxg5zrgA4cRnE/2A=
Subject key identifier: 5B:F1:29:09:7C:40:9E:C3:09:AA:67:B9:45:BB:5E:A5:E4:CF:64:F5
Authority key identifier: 5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
Certificate issuer: /CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
Certificate serial: 01965B0389A131E63051F7FCF81DD31E251A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
Manifest number: 11B4
Signing time: Tue 22 Apr 2025 01:01:20 +0000
Manifest this update: Tue 22 Apr 2025 01:01:20 +0000
Manifest next update: Wed 23 Apr 2025 01:01:20 +0000
Files and hashes: 1: XGpfUrAC9ihsHV6yV7tehTNCooQ.crl (hash: Bmg7/XvnqtrOpsV+1WSH5Ejg4eBrKJrUgwSTg/gO0ow=)
2: tscq8RR5-J67nLuusgspLPatxCY.roa (hash: mhooYjP72FJexVsRBpMnu3/8vTwdVxQOmpcDiGXdBjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:89:a1:31:e6:30:51:f7:fc:f8:1d:d3:1e:25:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
Validity
Not Before: Apr 22 01:01:20 2025 GMT
Not After : Apr 23 01:01:20 2025 GMT
Subject: CN=5bf129097c409ec309aa67b945bb5ea5e4cf64f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ea:c0:e7:9d:ab:a7:74:bd:7c:e2:c8:76:ed:
32:db:18:29:6f:dd:66:df:9f:f4:63:1f:5c:c9:e4:
6d:97:e6:aa:b5:c0:d0:74:55:e5:e3:2f:a3:9f:44:
c1:53:f3:fc:a2:db:f2:4e:75:e8:f6:c8:e2:a4:00:
93:f8:44:41:5b:14:96:64:75:60:ea:d1:74:8d:75:
58:11:77:d9:d9:fb:2e:9e:bd:59:5f:6b:15:ec:88:
33:66:6f:54:03:53:ce:30:00:cf:c7:96:76:fb:23:
00:ac:17:05:02:c7:8d:c6:cc:4f:99:3d:76:6e:0a:
66:9a:83:1a:f6:71:16:7f:ec:33:52:18:c6:d4:77:
57:e9:d4:4e:da:c1:60:bd:97:f6:d5:d1:92:bd:1c:
be:8c:45:a4:d6:03:f0:d0:6f:a8:01:aa:77:c5:61:
21:00:36:6a:d1:89:e1:79:85:7d:c8:c3:f7:a4:70:
be:e9:40:86:2a:cf:de:e7:ff:9e:26:65:4d:b0:2b:
11:66:50:61:48:41:bf:d8:d6:e6:63:bf:39:6d:78:
ce:ae:6f:18:65:29:61:d9:72:d1:59:a2:d1:c1:62:
56:fd:20:c3:9f:83:5e:b8:16:b7:cb:a9:e7:7e:4d:
da:e2:56:aa:37:64:ee:4b:e7:6f:ee:22:93:80:9d:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F1:29:09:7C:40:9E:C3:09:AA:67:B9:45:BB:5E:A5:E4:CF:64:F5
X509v3 Authority Key Identifier:
keyid:5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6b:20:cf:dc:03:02:18:06:e5:c0:f5:5f:38:34:8b:b2:b4:
ed:f0:c3:09:79:97:0c:50:b0:12:e5:6b:b5:90:a4:1a:e9:c0:
3c:70:f1:24:02:58:8c:12:cc:ff:93:85:18:8e:27:8f:e9:85:
af:11:05:2e:f0:66:cb:f4:26:3c:8f:90:ec:a6:3b:88:aa:9a:
5b:69:13:81:cb:d5:e6:44:b0:3f:2b:f8:df:62:51:6b:00:71:
32:9e:3a:3f:85:53:6e:8d:bd:ae:5d:d3:b3:b0:f1:59:db:a1:
9f:bf:6b:70:35:28:cf:17:d3:d7:b5:99:3c:33:38:10:bf:a4:
18:78:c7:9b:e1:46:7a:bd:4c:c1:86:e1:e8:95:32:90:1c:45:
a4:f0:ca:56:bf:72:b4:c6:c2:bc:75:7f:0c:1a:15:e2:87:0f:
0d:ef:b2:00:e9:88:ce:7d:d4:27:07:45:96:5c:2d:74:64:f9:
46:aa:9e:ae:07:d8:65:9e:6c:7a:7b:51:6a:65:c9:d0:26:d9:
3d:53:51:b4:a5:ed:48:68:1f:cd:28:f3:05:bc:e1:5b:c4:7b:
44:6f:9e:36:c8:16:75:0d:b9:92:7d:7b:87:b7:b4:18:76:33:
f9:e7:0f:da:85:8f:c7:c1:a2:85:be:9c:ad:3f:08:61:f0:07:
36:9a:a1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:59 2025 by rpki-client