Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
File: XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft (raw, json)
Hash identifier: Q0DNph9Z+g5CmY4YBdjAplDDJ3kbS63BKYrkMGsWSTs=
Subject key identifier: 2D:3C:CD:AA:4C:1F:CE:FD:A8:FB:7B:06:76:89:47:66:A2:77:75:53
Authority key identifier: 5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D
Certificate issuer: /CN=5e803b66b306008fb172c2dfd522b5655057360d
Certificate serial: 01963EAFC420ECC4E0F761637E174B0B9575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
Manifest number: 1112
Signing time: Wed 16 Apr 2025 13:00:28 +0000
Manifest this update: Wed 16 Apr 2025 13:00:28 +0000
Manifest next update: Thu 17 Apr 2025 13:00:28 +0000
Files and hashes: 1: Bu2qohV5DT207In6bmDkzPkl22w.roa (hash: yQgjgxJo0jD6Zb5Cbl39m04H6+9TPpDsNpPjtFWzK98=)
2: XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl (hash: +h+On70dL5tSQ678BpMRrc8d1rYl1HIvkUMUSCgd3RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:c4:20:ec:c4:e0:f7:61:63:7e:17:4b:0b:95:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e803b66b306008fb172c2dfd522b5655057360d
Validity
Not Before: Apr 16 13:00:28 2025 GMT
Not After : Apr 17 13:00:28 2025 GMT
Subject: CN=2d3ccdaa4c1fcefda8fb7b0676894766a2777553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:08:6e:bb:93:e9:73:29:75:3e:69:ed:e4:
20:da:92:54:9d:bd:8a:0a:da:64:86:e4:c9:46:1e:
09:04:9f:7e:fc:64:61:84:45:07:6c:30:18:61:b9:
b5:4f:9a:97:c1:50:0f:84:1a:d0:3f:bc:08:b4:ea:
d8:45:cf:0d:29:34:58:4d:8f:27:0c:cc:7a:ac:ab:
a0:e7:67:13:31:d2:05:e0:88:59:a5:df:6b:73:25:
aa:1c:a6:a5:7a:97:a2:ed:e6:c0:dd:da:37:28:89:
01:e3:fc:7e:61:9c:2c:ab:48:36:60:16:a5:a7:f3:
e9:6d:04:c2:45:e8:01:f9:d2:2b:78:09:84:59:de:
3a:6e:e2:16:28:42:95:9f:0d:13:78:dd:59:5f:d9:
f8:9a:00:9c:d3:73:35:1c:6e:53:dc:be:6f:31:b8:
67:b4:b9:4b:ce:25:b7:de:b3:c0:4f:07:a1:8a:e8:
cf:f4:3f:3f:b1:9a:1e:4c:5e:07:d0:5c:22:fb:d6:
93:db:dc:a1:c4:85:c7:88:30:26:87:8d:99:e3:6f:
29:da:91:46:c9:d9:3d:e2:3e:53:64:59:25:21:2e:
8b:8f:b0:ec:ba:95:98:59:a7:57:8e:4d:48:e6:39:
88:49:f6:97:99:05:bf:6e:8b:f4:8e:35:90:de:83:
a7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3C:CD:AA:4C:1F:CE:FD:A8:FB:7B:06:76:89:47:66:A2:77:75:53
X509v3 Authority Key Identifier:
keyid:5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:82:ae:94:1e:2a:43:ee:13:d7:a5:96:76:0a:63:56:6b:f0:
11:6a:f9:7e:6d:64:b4:61:57:6f:ec:f4:cb:b3:4d:d6:3b:68:
ba:54:ba:01:71:c3:eb:8e:39:af:43:1b:5d:6b:de:43:17:0a:
fe:cf:69:ee:b5:17:cd:ee:05:56:ee:f8:26:dd:77:6d:67:6c:
a4:57:55:b2:27:28:b8:59:7e:7e:59:f9:8b:39:88:f5:af:4a:
36:c2:fa:b8:52:3d:9c:87:a8:12:e3:e9:3d:9c:71:3f:99:7c:
9d:7a:dc:5c:23:96:3c:0f:6a:d0:e4:a5:2a:7f:9b:67:94:9f:
d2:69:27:2c:83:b6:02:5c:80:98:87:13:af:c6:5d:73:7e:5c:
d3:34:a1:2f:ba:a2:17:0b:75:9b:8f:44:b9:96:6f:a9:88:3c:
ce:5f:0e:3d:c2:82:aa:a8:dc:55:b5:ff:84:b7:18:5f:54:30:
bb:8b:1c:e5:a7:74:23:96:9a:29:1b:58:35:c3:14:bd:4f:4a:
45:3d:87:87:20:7c:6b:78:82:97:4b:95:63:f9:f4:1b:25:46:
2f:e7:83:5a:aa:79:8c:45:cf:db:cb:a7:19:54:cc:16:8b:b0:
f8:21:c2:26:82:f8:52:bc:dd:92:92:63:5a:02:98:c9:73:07:
a0:e9:75:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:04:05 2025 by rpki-client