Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: +hVJHltppe+SO8NhGEHlrve1KmZTtd1NW/VCK3HU0Lg=
Subject key identifier: 08:12:B7:89:6C:F6:88:59:8C:9B:40:1A:2A:93:73:88:FF:3D:6D:F3
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 01965047ECA7C7520D188911A23D9E1B5269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 23:00:12 +0000
Manifest this update: Sat 19 Apr 2025 23:00:12 +0000
Manifest next update: Sun 20 Apr 2025 23:00:12 +0000
Files and hashes: 1: QeiRkvhJ1jMmsZj6cRnslCHsAIo.roa (hash: uEqxaO+pWPZv8MfWPZnEIuXT69hT3YN8Q/V/0g2kRZQ=)
2: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: NtBiigV42LIc4J7O+i00Xv3SglwHlA6pf8F9lrPLxRw=)
3: vyiJ9VgxunO1beL-TLp8DQho0z4.roa (hash: ThIUsMZZykRqe6AuoTNCl3LT/Ty2lekPXvQyW0X+N8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:47:ec:a7:c7:52:0d:18:89:11:a2:3d:9e:1b:52:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Apr 19 23:00:12 2025 GMT
Not After : Apr 20 23:00:12 2025 GMT
Subject: CN=0812b7896cf688598c9b401a2a937388ff3d6df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:42:e6:4c:42:16:bd:49:11:1e:e1:01:26:
7a:23:d6:32:45:c4:0f:d8:1d:b9:2c:86:80:4b:0b:
c3:78:42:38:95:f1:51:19:2e:e3:ab:ca:f8:ac:34:
b9:1a:51:fc:c9:a5:67:fc:82:0d:fe:1d:84:68:d7:
a4:f2:bc:63:e1:9d:eb:a3:fa:3d:cd:2c:2e:9d:b0:
cc:a1:f5:48:3b:71:c4:a3:03:fc:c2:4e:a7:43:34:
41:73:57:ae:cc:a5:9e:67:91:37:96:ba:84:e4:3f:
3f:f5:44:bb:3b:51:69:d6:16:63:a5:68:b9:ab:99:
92:89:98:2f:c4:fe:ac:90:2e:85:be:54:90:f3:c8:
40:49:01:c0:12:8a:3c:98:2e:af:27:46:c6:5a:e7:
9d:8e:87:e9:38:79:bb:87:01:d4:f7:04:d4:91:ce:
7b:da:42:c6:51:2d:09:91:95:fd:8d:1f:fb:35:9b:
5f:01:57:f9:ef:81:5c:c2:34:84:42:8b:c6:af:bc:
7f:51:6a:6e:88:72:12:ff:19:aa:2b:b2:5c:f1:6e:
3d:e3:5d:1e:4e:72:c7:98:4e:cd:af:75:f8:9e:eb:
74:86:e2:d3:40:14:47:70:d1:7c:a3:16:f6:b3:3c:
a4:e4:a4:9a:5b:c9:df:9e:fd:ca:e4:21:f4:b3:9b:
d0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:12:B7:89:6C:F6:88:59:8C:9B:40:1A:2A:93:73:88:FF:3D:6D:F3
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:63:45:c9:f1:44:05:55:05:30:c8:a5:5b:41:a2:62:fa:1e:
97:fe:18:6d:23:c4:d8:1a:65:84:9f:a1:87:cb:40:f5:98:74:
fe:c4:b6:de:97:e1:7a:a8:09:25:c6:47:50:6b:62:6d:47:02:
67:bc:a7:0a:30:29:51:1a:fb:bc:19:f3:b4:ee:e7:72:6c:22:
4a:1d:75:c5:0d:82:45:6e:cf:64:6d:73:b1:e7:35:6f:f1:ca:
5b:98:ab:30:cc:4a:51:84:71:8d:08:73:41:71:b2:68:22:87:
c6:85:e5:c7:8b:b2:d0:56:20:07:2b:24:22:63:e5:37:b4:f3:
b8:d3:81:5d:63:4a:83:1d:7d:66:cf:d7:01:5b:51:20:ec:bf:
33:04:20:6f:f1:0f:10:15:64:cf:50:12:35:13:2a:32:1e:d5:
fa:ff:be:8e:a1:82:f0:06:75:aa:05:5a:67:5c:f3:d9:bf:2d:
1c:48:56:96:ce:63:26:93:1a:68:71:89:94:b0:97:6d:fa:47:
38:e5:a0:19:34:64:14:0b:b4:62:a9:a3:eb:bf:97:3a:7b:3b:
2c:47:da:e5:f0:1b:4a:9d:e3:4f:17:9d:89:2f:29:5a:a6:a9:
6c:7b:ff:82:96:90:c9:ab:bb:80:bc:d5:f1:a9:2b:1c:f0:b7:
af:ad:8e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:31 2025 by rpki-client