Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
File: XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft (raw, json)
Hash identifier: dAMI9tLgIwv8Pbn/9/LmQXqqefW7uJ+aw1neEnTB1uE=
Subject key identifier: 2F:13:DF:D4:80:A7:98:BB:79:4E:2F:A7:9B:67:13:C2:CA:98:A7:4C
Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Certificate serial: 01964EC81CBA7DC4B74689C43667F6F88323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
Manifest number: 1235
Signing time: Sat 19 Apr 2025 16:00:59 +0000
Manifest this update: Sat 19 Apr 2025 16:00:59 +0000
Manifest next update: Sun 20 Apr 2025 16:00:59 +0000
Files and hashes: 1: K_AT4bSuNVVRHY1_UQf9p3oUmaU.roa (hash: UUfyHhYh06/+OIKNXsCgKD2Y5o+FiTgolZxplZXidG4=)
2: XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl (hash: tn3XvxU906zirtjieKFIZGYg04Cra4Q9vvvPkRAUJ5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c8:1c:ba:7d:c4:b7:46:89:c4:36:67:f6:f8:83:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Validity
Not Before: Apr 19 16:00:59 2025 GMT
Not After : Apr 20 16:00:59 2025 GMT
Subject: CN=2f13dfd480a798bb794e2fa79b6713c2ca98a74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b3:e5:7a:b7:57:a5:32:e8:95:01:79:2c:a9:
5b:bd:62:a2:23:44:56:c9:41:f3:71:0b:c7:26:48:
b8:3c:08:bf:df:64:0d:7e:a8:5f:8d:f7:5a:b8:20:
ae:56:1e:6f:6f:57:fd:20:ae:a2:2f:90:bf:10:9c:
58:86:2e:2f:c5:0c:b2:1b:4f:d5:8e:cf:6c:5d:4d:
da:9e:fe:18:9c:a9:7c:ad:cc:04:e7:5b:32:d2:25:
b4:97:f5:ba:eb:a1:d6:0c:40:7b:62:ba:45:6f:b6:
27:83:ec:23:2e:d1:3b:02:98:c6:65:c1:a9:53:06:
93:6b:b3:61:26:11:b4:d5:6b:45:96:b5:92:27:90:
1a:20:8a:1e:74:1c:60:66:c8:1c:20:13:08:89:99:
a2:53:65:9e:4e:76:02:56:b5:d6:03:ea:91:5c:70:
e5:84:08:88:f1:44:88:90:c6:ca:55:43:8f:ad:c0:
e5:fb:b9:78:b0:fe:16:3f:7d:5d:68:87:ad:b7:00:
c4:8a:4a:5e:5d:e8:de:50:a7:74:55:ef:18:e8:e5:
99:24:57:d4:82:b5:76:f7:b3:e7:64:91:e3:42:87:
b1:05:43:49:d6:6c:f2:04:c4:c2:3d:35:d0:c2:29:
e0:3a:89:a6:86:5e:e9:1b:7d:b3:15:bf:db:43:12:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:13:DF:D4:80:A7:98:BB:79:4E:2F:A7:9B:67:13:C2:CA:98:A7:4C
X509v3 Authority Key Identifier:
keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b3:da:af:2d:c6:27:1d:d4:22:a5:a4:54:8a:3f:1f:49:b5:
d5:bb:3d:a1:ab:cd:00:70:08:da:80:0d:7b:e8:47:f9:44:58:
00:d8:6b:6f:a2:91:ea:a8:aa:61:ef:56:fd:88:b3:c1:93:fb:
c5:d8:c3:57:07:b4:7a:70:3b:a5:af:05:4a:57:50:fb:03:bb:
30:8d:50:10:a1:a9:1c:85:ba:7c:46:32:67:7f:c2:b2:f6:89:
a3:bb:ab:ad:ff:be:38:de:66:e6:16:27:ff:4d:30:83:23:98:
bd:83:7f:be:8c:ca:55:b8:b8:aa:06:f1:b8:c8:ed:2c:69:70:
7a:32:56:36:27:59:6e:41:79:14:76:6b:fc:df:9b:a6:f9:00:
6f:f8:c6:73:ea:e5:ea:dd:59:97:84:c9:69:94:45:b8:64:ac:
2b:74:4f:df:b1:f9:42:85:ac:3d:bd:ea:b2:49:97:5c:8d:d7:
0d:fb:68:f3:58:20:3e:7a:c0:e7:0a:71:39:4d:da:fc:be:90:
40:f5:eb:1a:5c:5f:c2:d9:73:df:24:02:91:1b:d5:73:d1:a1:
ca:19:ae:9e:90:a2:06:fe:a5:57:dc:0a:c5:f2:08:a9:57:72:
7f:81:7d:1d:c3:b9:42:50:29:ad:42:1b:51:ca:8b:a1:6b:9e:
25:fe:56:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:16:53 2025 by rpki-client