Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
File: XatFagUdSpN4i-9PrA0HvcDJ8M8.mft (raw, json)
Hash identifier: rrNmhbVOpnNDgKycpydGSFS52bek/jTdvBInBL9wEho=
Subject key identifier: 14:89:0B:A4:9B:8A:6D:DE:DB:36:13:7B:F7:72:B7:4F:26:F5:B1:EF
Authority key identifier: 5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
Certificate issuer: /CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Certificate serial: 019655A5AEEB7696FCEA0A82D06A1AF06EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
Manifest number: 1507
Signing time: Mon 21 Apr 2025 00:00:43 +0000
Manifest this update: Mon 21 Apr 2025 00:00:43 +0000
Manifest next update: Tue 22 Apr 2025 00:00:43 +0000
Files and hashes: 1: XatFagUdSpN4i-9PrA0HvcDJ8M8.crl (hash: YsPO5eUSzrB4cUYHi/PnJsFU3kHUV9k6KS1ffGDbJ2w=)
2: YkgHQRkVRrWyQ2p2wgLse2qkaoY.roa (hash: p9EN6Inc80zOT2cHk5ltmrKNAtRT7MPUi50PrYUILc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:ae:eb:76:96:fc:ea:0a:82:d0:6a:1a:f0:6e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Validity
Not Before: Apr 21 00:00:43 2025 GMT
Not After : Apr 22 00:00:43 2025 GMT
Subject: CN=14890ba49b8a6ddedb36137bf772b74f26f5b1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:29:35:c5:b7:04:62:0e:1d:68:4d:79:0b:a0:
b5:82:40:70:6b:0b:cb:71:dd:d7:cc:bf:90:35:84:
95:c5:9f:5f:2d:69:5a:b9:ab:09:dc:84:93:59:18:
81:16:5f:e7:4f:4b:97:db:c9:76:27:3f:a3:a9:e6:
8e:55:2b:cc:1a:ce:a8:c3:05:92:7a:07:06:e4:00:
26:d5:5e:0d:1b:67:ed:b7:ac:cd:c4:d1:0b:6d:4f:
4d:24:84:40:01:c1:40:3f:b7:3d:fc:ec:f1:09:36:
a7:7f:1d:ba:e9:76:76:2d:a1:c9:39:79:8a:06:71:
d2:18:52:ae:7d:3d:f0:92:87:40:37:50:8e:08:e4:
88:8f:63:78:00:52:15:31:1e:66:f5:29:39:a4:13:
a3:b9:67:48:39:e3:16:94:fd:0d:34:34:68:6f:82:
3b:b5:47:0a:26:c7:8b:19:e4:4c:17:ca:fe:a6:39:
17:01:a8:f9:1d:21:2b:5f:52:cf:90:71:dd:14:e7:
39:09:40:4e:5d:d2:78:14:5f:5f:4f:2f:c0:47:4f:
c3:8c:6b:3d:39:54:f5:18:fa:05:80:66:37:4e:51:
31:24:52:0a:d2:e1:57:f5:e7:12:55:bf:f6:24:54:
e8:38:67:15:09:ad:33:79:ef:ff:0a:2c:12:be:aa:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:89:0B:A4:9B:8A:6D:DE:DB:36:13:7B:F7:72:B7:4F:26:F5:B1:EF
X509v3 Authority Key Identifier:
keyid:5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4f:7f:34:d8:3d:a9:00:c2:83:de:12:36:1e:0b:39:94:0f:
ae:c0:d0:cd:c7:ce:8c:93:c1:36:45:8f:57:72:55:fb:38:d0:
ff:9e:66:56:05:e1:11:dc:50:51:ea:71:b1:72:3b:b0:75:e6:
31:ff:e1:f4:d5:64:09:e1:11:44:5a:93:c6:fd:fb:72:47:34:
3b:26:f6:8f:66:fe:5c:2b:8d:e9:e0:c9:b8:95:5b:0e:99:f1:
44:35:2e:ba:d3:ba:5f:a3:6c:0f:74:92:e6:99:70:03:db:bd:
91:2b:04:7d:8e:07:c5:a1:5a:10:e3:6f:d8:bd:a1:b7:38:f0:
24:ba:5c:2a:3b:07:96:ef:96:6a:db:a9:2c:3a:b7:0b:0f:8e:
56:22:2d:82:58:3a:f2:8c:51:d9:85:04:47:f6:b0:3b:7f:c0:
3c:19:7d:bc:b7:77:74:ed:1c:21:9d:31:60:09:cc:07:8a:9a:
1a:2d:1f:bf:c0:84:93:1d:38:8e:27:5e:bf:2f:a0:57:21:a7:
7e:b9:e8:07:2a:c5:44:fd:dd:34:4f:5a:2e:b5:03:02:8b:72:
89:a7:3f:35:40:8f:93:91:23:d5:6b:eb:7e:2a:33:bf:20:c1:
b9:f6:f3:cf:b9:41:76:a9:f2:d6:09:06:e8:9e:33:16:fc:97:
95:44:24:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:22 2025 by rpki-client