Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
File: XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft (raw, json)
Hash identifier: 1E3/f6R94HUTz539A/tShYAm/fphOXACvrQiBGsk+yc=
Subject key identifier: 0F:91:E8:40:9F:2B:A5:1A:40:35:1A:D6:18:6F:67:44:6F:19:86:40
Authority key identifier: 5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
Certificate issuer: /CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Certificate serial: 019654C998E4FA9B64CC93EF34DBB6A364E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
Manifest number: 058D
Signing time: Sun 20 Apr 2025 20:00:20 +0000
Manifest this update: Sun 20 Apr 2025 20:00:20 +0000
Manifest next update: Mon 21 Apr 2025 20:00:20 +0000
Files and hashes: 1: XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl (hash: qZs42gMixNTK8hkworK6XLJrGkBt4MsnMLXJOvhLWsU=)
2: _kNyIo0elab0AX-AZl6-Wfa7Vf4.roa (hash: wDY0OVb6O20WgRVNC3x/4ucGS15YyhNH0PrMxdCX/4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:98:e4:fa:9b:64:cc:93:ef:34:db:b6:a3:64:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Validity
Not Before: Apr 20 20:00:20 2025 GMT
Not After : Apr 21 20:00:20 2025 GMT
Subject: CN=0f91e8409f2ba51a40351ad6186f67446f198640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f7:7f:df:3b:9b:c5:f5:27:70:a5:bf:91:90:
7a:ac:0d:6b:75:ba:b9:ca:af:90:30:17:6c:13:f7:
88:24:18:0d:be:10:c8:f7:c5:b3:8a:c2:44:32:4e:
34:73:2b:47:24:26:00:4b:d7:99:c4:68:9f:2f:13:
af:d6:e0:10:4d:c4:1a:37:f5:2f:98:f7:8e:84:58:
ab:b7:0e:9d:b4:86:d3:ff:26:a9:ee:ca:93:d2:9d:
3d:a9:a4:4e:1c:d9:fd:40:40:5f:6c:5a:80:db:0a:
73:0a:29:2a:6b:01:c3:43:f5:73:9f:22:ce:bc:d4:
5d:b6:4b:a3:45:2b:e9:4f:01:de:6d:33:8a:02:e0:
1e:86:27:98:1a:61:f4:f8:1c:94:cc:17:3c:2a:fe:
6d:aa:c4:a8:c0:7a:ea:c3:87:4e:39:1e:dd:bc:f5:
5a:c8:45:fc:27:23:4e:4a:a2:e1:3b:20:ed:b6:56:
7e:a1:aa:2a:f1:ad:56:61:51:54:93:37:c3:c2:70:
1d:2f:d7:59:f5:55:c4:06:cf:cc:3f:ae:ab:49:f7:
2e:03:ca:56:a2:54:28:48:5c:59:93:a7:bb:c8:9e:
23:79:97:61:49:98:28:d1:71:37:de:67:2d:27:17:
bb:ac:6f:6b:2d:08:35:7b:00:9a:f4:93:31:c6:31:
9b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:91:E8:40:9F:2B:A5:1A:40:35:1A:D6:18:6F:67:44:6F:19:86:40
X509v3 Authority Key Identifier:
keyid:5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b0:ba:87:b7:c6:f1:0e:18:af:e0:24:c7:cd:bd:b6:21:58:
d1:d2:a2:48:90:f4:39:be:c3:f4:b2:4d:27:33:2a:16:58:50:
db:21:ae:1f:13:8d:77:49:6d:3f:11:50:f3:51:3a:ac:34:78:
bb:c8:28:d7:4c:8a:5e:5f:45:cb:1b:e9:f5:38:6e:f7:b4:50:
87:98:3c:bc:81:b9:e8:4a:b9:b2:2e:7b:50:c6:01:31:08:e3:
5b:53:e4:76:b2:67:8c:11:c2:4b:f0:c2:a1:d4:5a:01:94:3f:
ba:5f:d7:3e:a7:61:c8:36:a5:01:26:5c:82:8c:34:b1:24:c1:
05:33:cd:84:e1:90:69:96:75:27:ee:be:1f:e9:ae:cd:b7:8f:
a5:4f:1e:85:72:a7:6d:0a:2b:cd:98:bd:06:0c:ca:ef:31:1d:
d3:4b:53:e0:45:54:f8:3c:16:8a:b8:d4:8b:92:93:44:16:5d:
7d:fd:54:36:b1:4b:e4:86:62:11:80:c2:d0:16:8b:12:aa:e9:
40:96:7f:e9:e2:1b:f4:c2:23:b4:d8:d5:53:73:fa:13:56:fc:
d8:a4:ea:a3:7e:25:a8:51:95:e0:d6:f6:ac:b8:4a:60:aa:8c:
24:4d:2e:e7:a8:1c:7c:7a:c2:fb:5c:57:cf:2d:1a:fa:36:a1:
ec:1d:1e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:34 2025 by rpki-client