Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
File: XqFlPhd6opVUAIBcjHW9DWhYOvw.mft (raw, json)
Hash identifier: a0wD8X7kXV29/X8uHwLNNt0NLrGoVPHf4aOa6+QHK8E=
Subject key identifier: C3:BD:93:AD:BD:37:78:8E:27:59:54:76:6B:C0:12:52:C9:AD:7C:B4
Authority key identifier: 5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
Certificate issuer: /CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Certificate serial: 01964DB4C0DD9FC0439A6B4297B1785DFBE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
Manifest number: 098A
Signing time: Sat 19 Apr 2025 11:00:13 +0000
Manifest this update: Sat 19 Apr 2025 11:00:13 +0000
Manifest next update: Sun 20 Apr 2025 11:00:13 +0000
Files and hashes: 1: XqFlPhd6opVUAIBcjHW9DWhYOvw.crl (hash: 4G7LkSG2p192BvTSn/JI1l2dG2m8GVYFDuclkdD/oio=)
2: pG0gZB0nkw3GnTji0o-IVbuNrD4.roa (hash: viA8g+053tZ6I/BKlBgt30tnVs0+WwkriBcMwHPLKm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:c0:dd:9f:c0:43:9a:6b:42:97:b1:78:5d:fb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Validity
Not Before: Apr 19 11:00:13 2025 GMT
Not After : Apr 20 11:00:13 2025 GMT
Subject: CN=c3bd93adbd37788e275954766bc01252c9ad7cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:68:6e:e4:6d:3d:fa:93:44:e8:74:c2:ed:
37:46:3f:18:16:9e:9e:fb:23:de:25:62:25:7e:fe:
2e:ac:9e:93:4c:f1:96:0d:ca:01:9d:6f:1f:78:79:
4c:18:d9:9d:7e:50:05:ab:a8:41:fd:4a:0f:e9:64:
43:4e:d2:e9:b4:ff:69:5b:f0:3e:0f:85:db:dc:69:
c4:2a:0e:89:a4:be:3a:fb:44:a3:41:32:16:50:f5:
c1:a8:e8:c0:16:ee:2a:af:91:9f:eb:7e:2d:b2:b1:
3d:3b:1c:85:da:91:b7:23:42:93:91:c4:25:3a:43:
50:9b:f0:ab:8b:30:2b:35:e7:d6:f7:d8:34:7a:0f:
41:eb:9a:36:79:0e:46:04:b9:06:20:68:93:0d:f7:
2b:a4:2a:0c:2d:83:cb:56:14:6f:8d:fb:18:18:17:
fb:39:5d:51:99:1b:3d:d3:89:e8:39:27:f8:cb:89:
dd:d6:f9:ab:06:91:4b:31:ef:90:c7:5b:5b:e1:69:
98:30:58:14:c7:dc:92:2f:cb:a2:83:f2:eb:ef:5d:
91:ff:e2:7b:bb:3e:ef:ed:78:8a:97:79:be:6a:77:
5b:76:b1:94:6a:47:2c:f7:88:6d:a3:ad:63:64:b3:
70:0c:09:d5:11:92:f3:5e:96:66:61:69:12:5c:bd:
b1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BD:93:AD:BD:37:78:8E:27:59:54:76:6B:C0:12:52:C9:AD:7C:B4
X509v3 Authority Key Identifier:
keyid:5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5d:bf:2e:4d:e2:ab:dc:7f:86:27:93:a5:03:52:f6:53:2f:
f0:d1:fd:c4:9f:73:67:26:28:a3:4c:97:dd:b1:8b:1e:ba:ec:
f1:b9:92:dc:a2:a9:ae:28:16:ef:8e:8b:19:5a:a0:e1:34:d1:
fa:d5:7e:c0:82:c6:56:21:4a:96:d6:ac:8c:99:74:c1:49:19:
eb:ea:68:26:ab:7a:6a:3f:b4:26:80:96:7b:03:28:a2:7d:fb:
f1:fc:8e:ec:b2:b7:34:67:13:78:e0:db:a2:09:1c:cf:40:96:
ba:6b:db:6a:5f:97:ec:53:9c:24:2e:ad:94:c8:5d:1c:4c:05:
05:aa:32:ab:26:65:d1:30:8b:6f:75:5f:e5:4c:e4:3d:4d:d5:
fb:f2:70:a3:56:ea:4a:7c:e5:18:96:73:27:34:8b:d4:0d:a2:
73:15:0d:2f:03:11:68:a7:ae:b0:4a:5c:3c:6a:36:c5:2f:3e:
34:ab:79:41:04:b1:92:40:97:f7:84:5f:c3:28:21:b8:e4:ff:
bd:04:b6:7d:6b:f2:92:f4:6d:1e:4b:d7:36:43:a9:b8:c1:00:
ff:67:6c:8d:23:b7:c0:fe:8d:d8:00:bd:e2:a6:ac:2b:9b:80:
18:bf:bc:34:5b:af:e2:75:25:ee:9d:db:ff:c5:c3:f2:2e:ed:
84:2d:7d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:18:07 2025 by rpki-client