Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
File: xWYvmAINpON9UO07swICd08pLXo.mft (raw, json)
Hash identifier: j5XiBpzUelQi37UgsKosQvAMU33bGkKDAp9J0HYZl8o=
Subject key identifier: 61:30:58:70:5A:F3:BF:51:48:3C:8A:38:2E:C5:45:CE:1B:DC:6F:2E
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial: 019655A5DEB5EF457A3F3CDFDCE6AECE3770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
Manifest number: 0150
Signing time: Mon 21 Apr 2025 00:00:55 +0000
Manifest this update: Mon 21 Apr 2025 00:00:55 +0000
Manifest next update: Tue 22 Apr 2025 00:00:55 +0000
Files and hashes: 1: k3mYd88nhjXgIJYUkD0IW4wB334.roa (hash: ES4bfd/D7kl4HbO8JFVGRKGNEndi7/c5Oef8CAe6LiM=)
2: xWYvmAINpON9UO07swICd08pLXo.crl (hash: 1NQ5ofx37lxcwz4DUX562oZQiptOwZwytbxY9m/04tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:de:b5:ef:45:7a:3f:3c:df:dc:e6:ae:ce:37:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Validity
Not Before: Apr 21 00:00:55 2025 GMT
Not After : Apr 22 00:00:55 2025 GMT
Subject: CN=613058705af3bf51483c8a382ec545ce1bdc6f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:a7:d3:75:9a:7a:33:30:68:7c:a4:89:08:
53:16:22:02:5c:02:e5:be:03:bc:83:4e:d7:a8:c5:
97:11:60:b7:35:b9:e5:c8:1f:a3:ed:ad:01:0d:e8:
d6:9f:c2:f6:9c:7a:ab:17:aa:85:71:4d:76:e3:b8:
32:17:a7:fa:1c:32:13:86:e0:af:98:ae:5a:33:e9:
7d:67:19:04:0f:69:75:0e:d2:ea:9f:88:25:d2:74:
43:00:19:12:76:0f:0e:f4:ba:40:9e:05:95:36:cb:
d5:bb:62:3f:f5:44:7d:08:b5:52:4a:2b:a0:60:0a:
45:48:0d:93:9b:21:aa:4b:fa:6e:fe:2b:45:a9:34:
f7:c5:88:a0:73:99:d0:d2:9b:cb:58:ee:b2:9a:a2:
c1:fe:a0:ff:fa:a1:37:fb:5a:fe:eb:5f:ba:41:1a:
23:97:0c:e4:55:09:0c:e1:7a:ac:7d:69:97:99:29:
3f:89:b4:6a:12:fc:08:73:c4:b8:64:44:79:15:e4:
7a:a2:67:17:af:3b:24:de:c8:a0:89:ca:1c:a1:68:
78:ea:a8:e0:73:c6:dd:61:15:4c:30:24:47:1c:e9:
d6:f9:fa:44:bd:52:de:c5:57:15:59:65:cb:7a:8e:
e6:52:40:53:02:ff:1a:1e:18:4e:2c:2f:83:f6:b7:
70:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:30:58:70:5A:F3:BF:51:48:3C:8A:38:2E:C5:45:CE:1B:DC:6F:2E
X509v3 Authority Key Identifier:
keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d1:c3:d3:e3:37:63:f0:33:90:25:91:b5:c9:70:85:79:5b:
ad:c1:97:0a:fd:13:6a:ad:50:8b:25:4c:f6:9b:03:96:39:5b:
69:fd:09:ae:3d:4b:26:0b:ed:20:42:3b:c1:ba:ec:5c:0c:32:
6f:b8:34:e9:0f:32:a4:83:e6:49:c8:05:6c:a0:5c:25:88:01:
4f:14:51:75:64:09:76:9f:4b:fa:00:19:5b:5f:7e:49:f8:7b:
99:aa:12:fa:58:7e:dc:23:12:33:ca:ac:76:5b:80:45:ef:88:
fe:5a:80:a0:4e:f0:20:79:1f:61:5c:c5:81:93:22:a8:6b:d3:
83:05:dc:ea:af:a9:9a:5f:17:4e:ab:bd:0f:d9:77:a8:93:a0:
8a:cf:36:f2:c2:6b:08:e3:55:24:d4:1b:b6:11:99:44:a2:2c:
fe:a2:cf:27:b9:cd:65:03:a2:75:40:d8:17:13:b9:ee:96:6a:
16:53:8c:dc:88:ab:b0:15:d2:0f:11:c2:56:81:6d:9f:de:28:
8d:af:d5:0c:96:c2:64:d3:9f:f8:d2:11:29:71:54:14:29:2b:
ec:34:2d:50:0b:b8:39:23:c1:1e:1c:49:54:9d:11:6a:61:91:
a4:66:fa:92:77:4d:fd:fe:15:40:29:9e:2f:5b:24:42:c4:cb:
39:e0:46:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:16 2025 by rpki-client