Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json)
Hash identifier: Gtc/XQ+bgLL7/jhLQaema7WPiOXf0ocC0EoHOjTT5eg=
Subject key identifier: 66:2B:12:98:44:63:99:14:E0:81:C4:70:5A:3E:10:2A:ED:B3:12:55
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial: 019642556E815C700E7D529224D42271C4CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
Manifest number: 0510
Signing time: Thu 17 Apr 2025 06:00:17 +0000
Manifest this update: Thu 17 Apr 2025 06:00:17 +0000
Manifest next update: Fri 18 Apr 2025 06:00:17 +0000
Files and hashes: 1: 646H87YSEkgW60B6TS9Mv8ofIgY.roa (hash: qigAB2EAlIaW97KB1UwxTGt9D3D4QQiyvLLGjSnPdBA=)
2: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: NWpFHnzcXCpOJSszjePWp9psCQHyAHa6ouTuULgvKQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:55:6e:81:5c:70:0e:7d:52:92:24:d4:22:71:c4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Validity
Not Before: Apr 17 06:00:17 2025 GMT
Not After : Apr 18 06:00:17 2025 GMT
Subject: CN=662b129844639914e081c4705a3e102aedb31255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:0f:6f:89:81:85:f1:4c:9c:aa:c1:b7:c3:
bb:48:8b:af:0b:34:c1:10:e3:61:dd:23:d0:36:2f:
3d:a9:0f:ed:2a:ef:13:a3:cd:f6:bc:33:8e:a4:99:
a1:d0:b0:48:8e:42:7d:ea:bb:e8:be:77:04:a5:4e:
26:15:2f:ee:2e:85:a5:28:61:39:e6:8f:50:4b:7e:
ec:99:1c:75:34:ef:4d:05:25:0d:4f:c8:89:e3:9b:
9a:37:02:33:54:53:30:d4:ec:99:0c:68:ba:03:d9:
34:e8:04:77:79:40:6a:77:26:5d:92:44:24:4e:8e:
de:93:18:df:d1:88:52:24:ff:c1:9f:d3:d4:ef:72:
dc:ab:23:ca:76:fb:5a:b7:6c:ca:65:65:f1:09:b9:
3b:1e:32:45:d1:23:9b:38:da:59:4b:f5:bc:c5:da:
ae:96:13:73:c9:c3:ef:e5:e8:92:38:d2:3f:57:37:
f2:ba:0f:0c:13:ba:37:ca:76:67:26:50:c4:31:5a:
aa:1b:f4:71:b1:88:9c:3a:6f:da:54:b5:a8:c4:8a:
1d:e8:d3:11:8a:15:de:b3:95:36:29:c7:ca:3c:df:
2e:84:02:0f:fc:93:7a:68:ea:54:85:8a:43:dd:77:
c4:ab:e3:12:bf:2e:b8:08:2d:6c:de:17:b9:e6:1d:
76:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2B:12:98:44:63:99:14:E0:81:C4:70:5A:3E:10:2A:ED:B3:12:55
X509v3 Authority Key Identifier:
keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:22:d9:e7:13:63:89:57:e8:df:29:93:cc:ea:75:05:b7:e7:
cb:04:82:b0:cb:e2:ad:58:40:7b:22:8b:1a:d3:93:e5:fa:3b:
e5:6e:d7:46:d2:3c:0e:17:56:75:a6:75:ef:e6:b5:46:37:d5:
d7:2b:03:5f:27:65:1f:95:47:8e:82:26:f4:42:55:7d:47:d6:
66:50:4f:1c:e0:9a:2f:aa:54:0d:27:c6:aa:e2:41:4d:ab:7a:
35:bc:75:fa:66:3f:21:1d:4f:a2:41:27:22:bc:48:3e:57:84:
e4:b1:68:6c:a9:6e:c5:0f:28:52:43:82:a8:fc:d9:02:53:5e:
11:76:8b:83:a4:ec:bb:6e:7b:89:e0:2b:e7:bd:e5:e7:c8:28:
d0:b6:d6:de:55:b1:42:b2:7f:b1:c1:45:e9:73:a7:c1:be:2e:
ac:c3:aa:37:7b:20:e8:e8:e3:42:33:92:8d:f4:3d:08:d0:96:
77:5a:1b:d5:c5:5d:da:d3:fe:af:7f:82:a4:47:73:db:f0:80:
e0:31:6d:a1:ed:1e:25:a4:13:4c:ed:b3:b4:15:00:a7:fb:be:
d5:03:7e:a3:81:eb:3b:d3:7e:4a:0e:c8:2c:e2:3d:4f:b8:d1:
81:39:e5:00:02:3b:34:0c:7c:2f:9c:e2:ad:a4:46:f1:89:d5:
1a:71:cb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:25:48 2025 by rpki-client