
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
File: XBxjojad99_s88hQhZM0HNNpsjc.mft (raw, json)
Hash identifier: 5tazrex34gWBI1IomLBIW7GjRPWKfO62Amf6a+Dvb2g=
Subject key identifier: 50:81:A4:56:3E:D2:F7:81:4C:B8:0C:54:72:B6:55:5E:AA:22:E7:46
Authority key identifier: 5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
Certificate issuer: /CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Certificate serial: 0196556E9DF19817D825752420DFE09C30FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
Manifest number: 045D
Signing time: Sun 20 Apr 2025 23:00:34 +0000
Manifest this update: Sun 20 Apr 2025 23:00:34 +0000
Manifest next update: Mon 21 Apr 2025 23:00:34 +0000
Files and hashes: 1: XBxjojad99_s88hQhZM0HNNpsjc.crl (hash: lgu1/7wcFbh7W5k2Vle8Wz3v9kfzfSpYD58tuUS0oDQ=)
2: dkL-icE6gq78C7DesQUCkZbkiGU.roa (hash: cFio+9rofPRYCPknrSyqNWrmK0BvI1RqaWk0ZI2vMRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:9d:f1:98:17:d8:25:75:24:20:df:e0:9c:30:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Validity
Not Before: Apr 20 23:00:34 2025 GMT
Not After : Apr 21 23:00:34 2025 GMT
Subject: CN=5081a4563ed2f7814cb80c5472b6555eaa22e746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:c3:03:d6:8e:68:63:af:39:a8:b4:02:51:
5f:0e:ff:92:ca:cb:22:cf:54:c7:5d:a1:08:3b:96:
d7:76:58:7d:94:81:31:ca:91:c7:b7:54:25:a8:93:
8c:b3:b2:28:d6:bc:25:6d:ea:af:d8:84:48:ed:41:
96:c8:be:67:89:b0:60:77:b0:80:7c:6c:9e:68:9a:
90:0c:bf:55:bf:c0:db:9f:ca:46:24:d2:e4:9d:69:
e2:14:bb:bb:ff:95:3c:40:46:04:5e:4d:26:a9:5b:
44:6a:fb:50:26:79:2b:cb:ed:0e:42:c1:b6:a1:fa:
5c:15:97:28:77:21:03:dc:d1:59:18:d0:c8:b2:42:
84:b2:a5:a0:c2:3d:96:c4:12:15:57:4d:17:63:28:
1f:84:07:86:0a:42:8b:5f:ca:b7:ab:a8:a0:fd:88:
bf:b5:3f:5c:0d:e3:22:bc:8d:96:91:18:0a:d3:26:
84:5c:fe:0e:c5:d9:d4:4d:b8:fd:49:44:e9:6b:c6:
6e:10:28:b1:b9:30:63:11:7a:8a:db:ca:52:52:d2:
f7:6b:74:84:5e:b2:d3:0d:09:84:07:71:ec:75:22:
9e:64:fd:e5:55:d7:e1:be:48:01:86:30:f0:ac:24:
c2:6a:ba:3a:65:99:df:91:6e:d0:e7:a3:64:a1:73:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:81:A4:56:3E:D2:F7:81:4C:B8:0C:54:72:B6:55:5E:AA:22:E7:46
X509v3 Authority Key Identifier:
keyid:5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3d:f1:56:bc:a8:3a:ac:7d:ba:9c:b3:6c:36:32:19:c0:99:
8b:9d:89:7e:13:f4:ee:be:df:94:9a:8b:51:48:b0:55:57:67:
f6:c6:b6:1f:c3:65:b0:b7:fb:dc:28:e0:3a:bc:6e:93:af:ea:
14:6f:c9:f7:03:45:f0:85:ee:2a:50:3b:d3:29:3c:cd:85:7b:
19:0f:c6:f9:0a:13:ed:3e:d8:d9:f5:66:25:7c:43:69:e0:39:
9d:bd:62:6b:23:db:f0:2c:50:f9:de:a7:6c:de:fa:dc:01:b1:
4f:51:4a:c6:55:e0:ab:af:de:f5:56:89:ce:06:2e:11:dc:15:
41:b4:1d:1a:6f:82:20:0d:21:ff:b6:f1:6e:cb:f1:64:98:52:
fd:5b:45:f6:c4:aa:72:93:00:16:08:d3:d6:64:dc:85:cd:81:
73:96:f7:9f:02:cb:bb:de:3a:6c:54:82:b5:cc:38:91:43:75:
65:9d:04:39:ac:71:95:4d:14:44:17:45:82:76:1b:31:19:52:
74:5a:4f:37:41:b3:b2:49:72:0a:0a:0a:e8:85:82:1d:83:6f:
41:37:a4:28:01:8c:42:b8:47:87:23:31:e3:1d:1b:db:7d:f4:
ec:5f:14:e3:b9:9f:62:e4:a8:da:90:ed:bf:f0:04:da:c3:aa:
56:2e:ee:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:16:28 2025 by rpki-client