Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
File: xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json)
Hash identifier: NFuawvJLV0ZUYaolsmj7ven6T/sb9kCMDroFD/2O5xs=
Subject key identifier: 03:62:D7:87:22:60:41:FB:84:A3:F1:C3:64:55:31:4E:A3:5C:D3:9F
Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
Certificate issuer: /CN=c5f2203bc0286702345ac465500b4488c031c6b5
Certificate serial: 01962B29BC02C416E452A03FAD2B9A1BD570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
Manifest number: 14E5
Signing time: Sat 12 Apr 2025 18:01:17 +0000
Manifest this update: Sat 12 Apr 2025 18:01:17 +0000
Manifest next update: Sun 13 Apr 2025 18:01:17 +0000
Files and hashes: 1: TXaQaEN4XvnYBFgT0ib4CXdw4tY.roa (hash: 0gsLwdoudfPPIkVNaiLgsua+5TeHeS/a6jBdMi3m75A=)
2: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: Zv95yQH/Pa6VeifBddM3+isR/njBFV/oKtvbOFyDppw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:29:bc:02:c4:16:e4:52:a0:3f:ad:2b:9a:1b:d5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5
Validity
Not Before: Apr 12 18:01:17 2025 GMT
Not After : Apr 13 18:01:17 2025 GMT
Subject: CN=0362d787226041fb84a3f1c36455314ea35cd39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:69:80:ec:30:5c:c8:d9:17:30:85:7b:17:
b8:3c:e9:01:19:da:17:64:f4:10:6d:25:fd:bf:69:
07:1d:e6:ff:49:6e:14:3b:d6:62:5c:9e:d2:d9:f3:
2a:6e:ca:c9:88:32:ca:0a:fd:df:30:ae:81:fd:34:
b6:d7:23:c4:5a:44:93:fe:8c:0d:8d:da:6d:10:2d:
cd:44:c4:a2:1f:d7:1e:65:af:c4:43:ff:67:37:41:
91:7f:9b:d6:6d:32:52:e7:91:fc:6e:8a:b9:0c:9f:
94:4c:c2:d7:e0:c3:89:80:e6:4b:0a:c0:e0:78:d7:
18:9c:85:b9:49:d8:cc:6a:32:ea:d7:69:29:1c:1c:
b8:e0:b1:7c:e8:bb:9b:a7:aa:58:e6:98:fa:41:c2:
58:43:d9:e5:57:c5:3f:2f:e0:7a:b2:34:31:e8:e3:
20:bd:d6:2c:84:05:22:c4:11:ca:ce:48:4a:b8:14:
f0:20:63:cf:c7:81:a8:35:3f:4f:dd:b2:7e:6f:5d:
02:79:65:ff:37:2c:86:97:27:ea:97:50:b6:de:f4:
5e:e2:57:88:12:ab:04:e1:d9:f6:57:4b:da:9a:68:
1d:da:30:08:01:00:59:65:28:5b:30:d6:01:9c:c3:
f5:1c:3d:0c:53:90:a8:c0:e7:e8:8a:e2:25:5a:ed:
4b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:62:D7:87:22:60:41:FB:84:A3:F1:C3:64:55:31:4E:A3:5C:D3:9F
X509v3 Authority Key Identifier:
keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f6:7a:51:b6:65:00:39:d0:bf:7d:84:bd:5b:6e:7d:e1:c9:
d9:cd:01:f8:22:e9:4f:ab:ee:66:a9:87:28:97:0e:89:9a:cd:
e6:d1:aa:7d:6c:51:4e:62:74:ca:f6:a7:48:f3:54:e5:be:ab:
6c:9f:54:51:c5:23:8b:aa:d4:bd:90:87:a6:d1:9d:33:c6:f9:
91:3f:ac:31:01:79:92:02:64:c1:a0:a7:48:93:cf:78:2e:ae:
8c:c4:05:6e:76:d9:56:68:43:77:f5:9b:13:d5:a6:6c:4b:a1:
cf:d6:35:b0:7d:d5:f9:95:fd:9c:cc:e6:5e:6f:08:b3:b0:a2:
d2:ef:03:6d:bc:86:fd:33:2f:6f:e6:b9:87:6f:6d:d1:48:22:
10:fb:ee:cc:ea:f9:a0:f5:c9:26:60:77:b4:e9:d4:7f:6d:24:
ed:e7:b7:90:00:42:45:b1:18:1f:d3:e4:44:d1:6e:6c:5a:9f:
3d:b8:34:99:fc:0d:dd:7c:6b:26:00:ab:64:40:b9:87:05:dc:
80:b4:0c:dd:d0:c7:6d:f5:78:3e:79:a0:b3:6d:0d:c3:29:0d:
d6:9c:70:6a:2a:ac:a0:58:67:d9:f6:72:6a:11:d2:b2:d9:5a:
98:f0:e6:9c:7f:b2:16:24:40:f7:c4:20:79:8f:e4:75:43:b4:
5c:2a:18:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:42:27 2025 by rpki-client