Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
File: XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft (raw, json)
Hash identifier: H8miuyqzEA7DQyeOr8LnbrWAMVFKjnUj3PBJmifVXoM=
Subject key identifier: 4A:7D:C0:E8:EA:69:2E:7F:D8:B2:F8:40:0E:F5:05:CA:B0:F0:48:0C
Authority key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
Certificate issuer: /CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Certificate serial: 01965B39ED67B78BEFF82D708B78E688410B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
Manifest number: 0A75
Signing time: Tue 22 Apr 2025 02:00:45 +0000
Manifest this update: Tue 22 Apr 2025 02:00:45 +0000
Manifest next update: Wed 23 Apr 2025 02:00:45 +0000
Files and hashes: 1: 4nKgTO7nMwv7E5XkGZGra4Dj7eU.roa (hash: /DJ3vJxgq5Ik8hchhiF1sG1wu/bXrSEOv/Tfe2hOIxg=)
2: XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl (hash: eKAKpQBoHzEFpr8gwKdCPyCQhSiyskP+XghNTvBo8aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:39:ed:67:b7:8b:ef:f8:2d:70:8b:78:e6:88:41:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Validity
Not Before: Apr 22 02:00:45 2025 GMT
Not After : Apr 23 02:00:45 2025 GMT
Subject: CN=4a7dc0e8ea692e7fd8b2f8400ef505cab0f0480c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:ec:98:4b:66:fb:ac:40:7b:eb:60:5f:e3:
4d:89:8e:0e:9b:62:a0:66:96:9d:05:eb:79:f7:51:
c9:2d:76:55:06:01:38:6a:0d:90:32:d6:42:e2:f6:
fd:7b:9b:4e:a0:44:cb:8a:f8:7e:b8:3e:45:6b:57:
d0:3f:49:1a:bc:df:be:25:d5:48:c3:b3:2e:20:82:
d6:f5:47:bc:2a:b6:da:e0:e6:a8:13:86:c4:3e:d0:
7f:1a:c6:1f:f3:8a:d5:ae:2a:9b:e1:8c:1c:ae:b7:
eb:85:2c:2b:aa:04:dd:c0:73:2c:7e:52:e3:5b:9a:
21:3f:f9:be:2f:ea:5f:be:dd:dc:0f:b4:90:d0:b8:
36:f6:85:f1:9d:77:76:fd:c0:a6:83:80:8d:3b:96:
94:a6:7e:37:4a:b0:c3:57:e4:68:38:8c:14:2d:04:
21:b5:79:2d:c0:0e:25:69:16:dc:21:a1:10:02:77:
d5:d7:5d:9a:22:5e:a9:59:11:37:e3:12:8d:99:9c:
f8:ec:ea:22:7a:76:02:77:c9:06:d3:64:2b:ba:46:
d7:c3:f2:eb:3f:17:15:b6:fc:63:8b:ab:77:b1:ab:
2c:75:3a:8b:6f:49:42:b7:ea:d5:6d:83:e9:95:74:
76:f3:c3:b0:fa:a8:96:9c:7a:1a:56:4f:ae:39:17:
a3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7D:C0:E8:EA:69:2E:7F:D8:B2:F8:40:0E:F5:05:CA:B0:F0:48:0C
X509v3 Authority Key Identifier:
keyid:5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ab:99:3b:ef:6d:a4:5d:89:52:86:c3:4f:5b:41:95:e7:63:
da:3b:12:49:71:e2:1d:f8:c5:bb:4b:5a:e8:5f:e1:97:82:0b:
35:f3:0d:86:f8:69:a1:1a:f7:a1:6e:e3:68:5a:00:2d:fc:d5:
c0:1f:05:04:f6:eb:25:d9:33:62:1e:46:d9:da:ab:25:9f:e4:
f1:31:df:0a:0c:ac:bc:78:48:d7:2e:ba:b0:95:bb:f7:77:0b:
c0:94:c0:a1:e5:41:16:c4:12:6f:02:ce:ae:ce:90:c2:b3:f4:
72:bd:49:16:c2:ac:36:65:5f:bf:6a:ee:b1:07:0f:28:21:bf:
21:fc:6b:ba:3b:69:ee:96:3e:62:d5:4a:fe:5f:40:46:c6:25:
1b:e3:0c:d2:ea:4d:7d:10:d9:39:fa:a0:f4:82:dc:f7:e7:4c:
22:bf:8b:21:54:90:87:29:24:1d:fb:b0:c4:80:dd:03:23:e1:
c7:25:1d:71:ef:ca:25:06:d3:5a:60:16:b0:13:7a:97:d2:db:
6b:fd:a9:da:50:78:f1:4c:3d:58:0d:8a:6a:4b:7b:1b:47:0f:
14:88:cc:72:5c:10:f2:8c:5d:5f:de:f5:5f:61:33:4c:e4:f7:
5d:6e:3a:03:27:fe:2a:33:67:c0:85:51:c8:66:1a:9d:7b:0e:
5b:e1:af:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:22:00 2025 by rpki-client