Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft
File: xYSSMuOUO_JXydyuqw75LTCkz60.mft (raw, json)
Hash identifier: RB1ejtkN6u1QcCunGFIWk0Mk7q3mUJ490COsIMOvEPM=
Subject key identifier: 33:95:3D:BC:25:27:42:AB:2F:17:E2:9D:5A:E0:32:FF:1D:52:24:69
Authority key identifier: C5:84:92:32:E3:94:3B:F2:57:C9:DC:AE:AB:0E:F9:2D:30:A4:CF:AD
Certificate issuer: /CN=c5849232e3943bf257c9dcaeab0ef92d30a4cfad
Certificate serial: 0196214A98A267214EE479332CB3EC513F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYSSMuOUO_JXydyuqw75LTCkz60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft
Manifest number: 0472
Signing time: Thu 10 Apr 2025 20:00:58 +0000
Manifest this update: Thu 10 Apr 2025 20:00:58 +0000
Manifest next update: Fri 11 Apr 2025 20:00:58 +0000
Files and hashes: 1: Ax2MQ5Lb54u4442Uota7T1lDXqU.roa (hash: WtpxYyNpcHNC3G/vVwvJ9snmh6XrLgpD5cHVaG5LTa8=)
2: owZzsAnJSaU1iNYi45n_txLL9DY.roa (hash: mcBj/ytCvuFdEBFFZvoIyH3aWBfrAgmYQKhMFyspI2M=)
3: p5VeBb53f0-trs6dCEU052R8j6M.roa (hash: Xnzai9MWsx1KpCjRV19PKhOCyTafRZxI8PEiad1933g=)
4: xYSSMuOUO_JXydyuqw75LTCkz60.crl (hash: Nk9Y4TA4AdosdBCwoo38YDMmHQMQarOWraXZJpijrvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYSSMuOUO_JXydyuqw75LTCkz60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:21:4a:98:a2:67:21:4e:e4:79:33:2c:b3:ec:51:3f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5849232e3943bf257c9dcaeab0ef92d30a4cfad
Validity
Not Before: Apr 10 20:00:58 2025 GMT
Not After : Apr 11 20:00:58 2025 GMT
Subject: CN=33953dbc252742ab2f17e29d5ae032ff1d522469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:8b:ad:9a:12:7d:5c:79:d1:a1:15:c9:ce:
6c:0e:b6:ed:6c:9d:24:15:61:e6:87:99:ee:c8:33:
aa:c4:f1:d3:c6:51:19:5c:6f:c9:3b:6f:8a:da:05:
66:c3:48:a2:3d:7b:ff:87:fa:54:4d:d6:7a:6e:96:
3d:1d:47:a1:f2:a8:39:d3:ff:fb:db:25:1a:23:62:
1a:3a:f0:85:e3:e0:3e:1b:73:23:16:16:a4:c0:a4:
77:59:8c:28:70:ae:32:a2:8a:d3:4b:09:7e:3d:93:
11:b0:98:47:6f:a9:fe:fa:33:af:8a:20:54:49:15:
ab:1b:b4:7f:66:43:aa:d4:5f:b9:2d:29:6c:3a:1b:
99:25:b3:04:2b:f3:cd:20:46:4f:01:be:78:5d:b6:
45:2d:a7:ab:eb:a3:c3:95:97:d7:e7:4b:ab:5b:ce:
60:ca:4c:42:a6:83:19:5e:dc:27:99:35:f9:4a:85:
b2:f3:7f:2a:24:06:24:d9:c5:c1:85:c4:7a:f6:e7:
0f:56:0a:cb:6c:49:e7:5e:a1:c1:df:cc:5f:e6:15:
81:fc:dd:49:fe:6f:3f:ec:97:57:8f:41:64:26:32:
b9:2c:af:54:32:83:61:77:57:13:52:20:85:8c:ed:
fd:e8:06:0b:da:33:8b:64:63:5c:ce:42:a1:50:8e:
64:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:95:3D:BC:25:27:42:AB:2F:17:E2:9D:5A:E0:32:FF:1D:52:24:69
X509v3 Authority Key Identifier:
keyid:C5:84:92:32:E3:94:3B:F2:57:C9:DC:AE:AB:0E:F9:2D:30:A4:CF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYSSMuOUO_JXydyuqw75LTCkz60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:da:ed:33:83:8f:34:80:19:67:de:38:cb:94:82:64:90:57:
1f:29:dc:c4:15:b1:a5:ff:42:00:7d:14:7c:eb:0b:5b:74:9f:
a6:74:fa:da:fc:67:e0:0d:31:fa:1c:e5:7d:99:aa:39:fa:06:
dd:ef:32:31:37:78:f0:63:fa:a3:e6:44:f0:d7:70:cb:c8:09:
78:51:69:87:0b:53:b3:26:57:ed:6c:11:8f:6b:0e:74:0e:dd:
1b:b8:93:8e:fe:04:94:bb:c1:df:fd:14:8b:ac:f0:89:58:c1:
6e:c6:f9:b1:c8:25:fe:18:30:59:85:2e:5e:d7:de:84:44:61:
29:34:54:3d:c2:86:6b:5a:60:d8:46:3e:f4:15:02:4f:4f:ac:
d4:03:f4:5c:a6:43:66:d2:5d:84:30:0b:20:48:f4:a1:25:8d:
d2:05:21:77:f0:b6:21:4b:9a:f6:16:21:3f:85:46:8e:1a:f2:
20:45:d1:7b:73:ed:a8:e4:18:b3:7b:a8:a6:eb:dc:1d:09:b9:
42:b6:38:83:70:53:aa:7e:98:f6:9b:a9:21:2b:56:0b:d1:6a:
3a:b1:0d:97:3d:44:44:74:8b:b5:91:bb:5f:2c:81:1c:3a:24:
45:77:cc:f2:b6:4a:a6:60:ec:e6:c2:3e:d6:59:8a:5a:0e:94:
48:61:2c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:51:33 2025 by rpki-client