Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
File: Xpidr2T6291TSPfdIm7Mn-_ARRU.mft (raw, json)
Hash identifier: rMme7W4PCh/OSOowoco4PyR977B9mxnjsgnIFgG3qxE=
Subject key identifier: 28:1F:96:B2:25:7B:66:66:C5:37:95:2A:93:A7:D0:E6:BA:9C:41:27
Authority key identifier: 5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
Certificate issuer: /CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Certificate serial: 019646A0BFF2D3EE9E5D49ACB5A950BD28D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
Manifest number: 099C
Signing time: Fri 18 Apr 2025 02:01:02 +0000
Manifest this update: Fri 18 Apr 2025 02:01:02 +0000
Manifest next update: Sat 19 Apr 2025 02:01:02 +0000
Files and hashes: 1: Xpidr2T6291TSPfdIm7Mn-_ARRU.crl (hash: sA2bZjHaafNTvRTo5QtY/PzzZZzdd04jcQEGIMvBan4=)
2: Zv3Kf7_a7bi1ycJZnLN86MJoQ6Q.roa (hash: opNzDV4dKyFm82stIdxe2eWVlw9lr6MHF0M+Y7Sxna4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:bf:f2:d3:ee:9e:5d:49:ac:b5:a9:50:bd:28:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Validity
Not Before: Apr 18 02:01:02 2025 GMT
Not After : Apr 19 02:01:02 2025 GMT
Subject: CN=281f96b2257b6666c537952a93a7d0e6ba9c4127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:15:3e:af:9a:c8:1e:f1:6f:54:8a:5f:8e:
ad:89:7f:df:93:64:62:1f:a6:f5:0d:78:a6:ee:b7:
09:38:66:f3:ca:47:6a:bc:46:67:4e:5e:ee:19:56:
d2:97:dd:53:8f:0e:7e:cc:c6:8c:8c:9c:24:14:de:
c4:3d:4b:90:90:38:fe:64:5e:4e:f5:3c:f1:12:9e:
43:a1:ba:3a:93:6a:8b:66:0d:47:37:9b:f8:e4:4d:
d1:18:70:f3:26:dc:3b:02:45:53:76:02:17:08:5b:
5f:8b:9c:e0:92:e6:8e:00:5d:4f:d8:9d:cb:2b:bf:
14:29:c2:18:ba:77:db:21:a4:14:2f:44:ef:a0:4d:
d8:16:ce:fe:b9:79:df:67:90:a0:9a:ef:59:ce:e4:
db:56:96:2b:0d:47:b9:f4:83:6a:58:bb:26:15:52:
85:7b:f5:0c:20:33:bd:e8:06:64:99:e9:bd:4c:9e:
65:8e:01:55:88:49:b3:6d:e2:17:b7:ab:92:27:94:
3f:f3:9c:18:17:24:f0:ea:0f:b1:1a:35:31:fa:9e:
83:e7:7d:a3:30:98:8c:a4:73:45:65:b9:ac:06:4e:
88:2a:a5:56:23:57:c1:27:9c:37:19:07:94:e9:d1:
ca:06:9d:23:94:0f:05:72:a8:c0:3c:db:e9:5c:f9:
ad:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1F:96:B2:25:7B:66:66:C5:37:95:2A:93:A7:D0:E6:BA:9C:41:27
X509v3 Authority Key Identifier:
keyid:5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f9:f3:08:27:dc:5c:d5:ce:94:47:ba:af:7f:20:cd:46:a1:
19:6f:18:49:d6:b3:ae:1c:a9:20:3c:2c:3b:7e:1a:7a:f9:46:
ef:a9:36:ff:d4:b1:77:78:af:90:e2:98:3b:02:7c:ad:41:7f:
16:1a:57:a3:cc:55:3a:2c:9f:6e:3f:f3:cd:9a:77:81:fc:a5:
48:54:15:1d:ad:ee:35:d8:d9:e6:42:43:48:22:49:b5:2b:e3:
e5:20:95:da:5c:e8:55:db:88:8f:25:a0:71:96:54:4c:02:82:
14:11:41:17:4c:42:64:df:5e:e9:f9:86:ce:06:03:17:0f:08:
c7:5d:a1:8f:47:37:0a:7a:28:02:ae:08:ba:e6:48:bb:07:6a:
4d:b4:31:b1:a5:cd:e1:b0:15:9b:1d:13:48:00:aa:16:c9:42:
13:48:c6:c5:2b:10:a9:38:00:be:3d:1c:fc:b0:2b:7a:b6:5b:
e6:7c:d2:41:ab:97:59:36:a7:b7:04:78:45:83:33:9e:5b:45:
4f:cb:99:cb:c1:ec:fb:e9:4f:2a:db:32:9f:c4:25:eb:dd:0e:
18:0b:3b:74:b9:93:26:41:76:7a:c4:8e:f9:7b:23:2d:74:7b:
f7:94:91:67:c1:49:cf:94:35:bd:44:c4:70:60:e2:ce:32:dc:
2a:24:58:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:53:58 2025 by rpki-client