Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: YzzlN9Qvi1wIeBOdpJ0BoL34TMcgk7Duf4y5eRVNCj0=
Subject key identifier: DB:75:A4:07:2B:C3:29:EE:46:AC:6A:F8:A3:6A:A0:24:42:28:5D:6C
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 01959005E04FB765DFA564F6A82B6499876C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 0BFD
Signing time: Thu 13 Mar 2025 15:00:58 +0000
Manifest this update: Thu 13 Mar 2025 15:00:58 +0000
Manifest next update: Fri 14 Mar 2025 15:00:58 +0000
Files and hashes: 1: N9xO1-NLybIuf2QGNV0iV1i1rRA.roa (hash: EUQ0hueLkMsL20to636qmUcLllL0XtQ2Nr9B2Qpz0Yw=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: R/b28PQEeLnoKwkzaDde6bxDF7x5PlRB1TReFvy9Xwo=)
3: jaAQVqLk3N6vXmbGkwSHtHbashQ.roa (hash: 57hExgt+ivC5tWr9wIi1WBpxn1Wv7MUmq0/RKAWH5Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:05:e0:4f:b7:65:df:a5:64:f6:a8:2b:64:99:87:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Mar 13 15:00:58 2025 GMT
Not After : Mar 14 15:00:58 2025 GMT
Subject: CN=db75a4072bc329ee46ac6af8a36aa02442285d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:23:14:bd:5b:50:3b:71:63:9c:ca:73:32:
be:87:91:6e:e2:d5:c1:19:86:87:30:18:46:52:f4:
14:8f:21:c2:aa:1f:cb:ab:f2:ab:7a:47:78:fd:70:
dd:a2:73:a2:ab:12:12:ce:b2:f4:44:16:a8:1d:63:
af:03:aa:07:52:86:00:f2:7e:55:e9:36:86:04:d1:
25:7b:23:b5:30:a0:69:94:1d:e9:17:16:b3:72:d6:
05:ec:c9:0c:44:f4:d2:6b:15:b4:ad:70:ed:7d:51:
f5:cb:4b:3e:22:34:ee:db:40:94:9c:bd:28:99:5d:
ab:06:49:09:5e:15:dd:ed:51:de:b1:63:4a:ad:9f:
9b:53:6c:e5:f8:ae:f8:65:38:69:61:35:d6:3c:16:
67:a8:44:88:8a:40:c1:3f:53:db:74:31:8c:78:40:
53:71:f0:80:74:df:a2:c1:98:bd:16:97:45:ea:31:
34:d8:58:ea:1a:b1:fd:51:85:83:c4:be:5a:a5:c9:
45:70:99:46:b1:ef:bc:09:1a:e5:1d:fc:1f:d5:c1:
77:df:d8:79:88:0b:54:77:0f:a2:c4:60:40:8c:d1:
43:a6:6d:29:1c:d7:9f:48:9d:81:b1:43:3f:65:c1:
37:67:d7:39:42:f3:ad:f4:b7:16:35:37:9b:14:83:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:75:A4:07:2B:C3:29:EE:46:AC:6A:F8:A3:6A:A0:24:42:28:5D:6C
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:43:64:5e:41:c4:2b:d6:0c:fc:cf:de:70:e4:e2:68:44:9a:
b3:e0:4d:35:19:c2:f8:a0:53:29:64:ef:6d:aa:27:0b:0a:84:
ac:84:43:4c:74:2c:61:fe:a8:83:3c:78:bc:9d:bf:8d:c6:f1:
95:d8:46:91:89:32:9d:a8:f7:8a:59:e9:5f:b9:35:ef:33:63:
f6:29:42:b8:0c:bc:b3:22:5b:2c:70:9e:3f:90:61:76:71:50:
51:2e:66:78:1d:47:c1:f1:a4:59:3f:73:96:02:c6:17:18:ed:
12:a6:aa:e2:46:db:46:72:37:10:61:11:df:dc:30:75:2b:3a:
3f:83:de:0b:bf:57:46:b1:9d:ec:42:d9:7e:79:51:3b:fd:33:
57:c4:3b:34:a2:4b:7e:7a:26:85:4f:3f:b6:6a:a7:f4:7a:c8:
cf:1d:44:8a:a7:6f:53:34:ac:cf:59:4b:f6:b9:67:6c:ec:35:
e1:ff:2c:da:81:01:74:21:b9:98:e2:33:a0:9e:94:ac:46:a7:
78:87:76:bc:63:84:f0:69:6b:2a:8e:d6:2b:77:8d:b7:0d:ff:
a6:79:73:64:7f:b1:3f:b9:8e:d5:7b:b4:1c:2b:5f:cf:53:15:
66:94:22:4b:3f:9a:a0:49:af:21:ac:29:b8:bd:bf:53:b8:81:
39:4c:1d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:58:25 2025 by rpki-client