Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
File: xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json)
Hash identifier: 1x2DPzSc228thcdQ+Vn+kkQ296VNxw/6dXemGomDI+g=
Subject key identifier: C8:CA:9E:5C:1C:BA:5F:E7:4C:49:8E:90:6E:6C:38:FC:D5:4C:4F:7A
Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Certificate serial: 01963C1CCF15065317D8C9BBDD32A32EA933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
Manifest number: 09AA
Signing time: Wed 16 Apr 2025 01:00:42 +0000
Manifest this update: Wed 16 Apr 2025 01:00:42 +0000
Manifest next update: Thu 17 Apr 2025 01:00:42 +0000
Files and hashes: 1: O93k6bKhYCgLqm1pwPcFwndFJfc.roa (hash: mGQ92ARMuHfH2tnd6YZOf6zGRFHFURqcW968Yoazf28=)
2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: 0QYXKmCyy/AJ10oqdzSJqTkRGzqE0yZycqSWkKscPuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:1c:cf:15:06:53:17:d8:c9:bb:dd:32:a3:2e:a9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Validity
Not Before: Apr 16 01:00:42 2025 GMT
Not After : Apr 17 01:00:42 2025 GMT
Subject: CN=c8ca9e5c1cba5fe74c498e906e6c38fcd54c4f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:f5:1d:3d:c1:3c:ec:bb:cb:e0:2f:18:91:
8c:cb:fc:7d:26:fb:23:e8:9b:67:e1:53:b0:34:af:
39:50:7f:a3:19:ea:8b:f6:3f:f5:14:4b:96:a1:e6:
49:2e:7e:ff:ce:1e:2d:f8:d3:f1:17:6f:62:0c:d0:
d6:1b:b8:2b:45:eb:48:19:b1:00:63:52:ab:5f:43:
00:8a:6a:76:f3:5f:e2:ea:03:1f:ee:9c:d2:e2:56:
6d:dd:56:b6:fe:2e:a3:e6:09:2f:44:4e:56:87:1d:
59:8f:47:a7:42:1a:d3:08:c8:88:08:da:0f:e3:84:
cd:4d:35:40:10:21:b8:3f:8a:ec:14:28:5e:db:be:
3e:ee:fd:cd:9c:ae:82:0a:61:81:23:e0:84:1f:b2:
3f:b1:22:c2:af:84:0c:fb:81:f0:24:be:07:8f:ad:
c7:87:b5:f1:18:ea:98:52:e1:31:42:22:94:09:b7:
38:16:a1:d4:3d:f9:33:f1:93:f4:86:73:c7:e9:f6:
e5:78:18:e6:e3:c3:55:1a:11:2f:80:fe:f5:45:8c:
81:3f:e1:f4:61:9a:d0:ec:f2:d2:f4:f4:5e:ee:10:
f7:cc:db:cc:a7:66:19:fd:7d:c3:3f:b5:54:88:ef:
f9:0a:db:79:78:9a:48:95:02:d7:dc:35:32:68:ea:
2e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CA:9E:5C:1C:BA:5F:E7:4C:49:8E:90:6E:6C:38:FC:D5:4C:4F:7A
X509v3 Authority Key Identifier:
keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:87:1d:c7:41:83:dc:bf:cb:97:5a:a7:67:8c:30:08:a7:1d:
7f:8b:3a:a5:da:af:2f:fa:ae:80:17:fc:7a:de:3f:b9:32:9e:
62:f6:cf:b8:9e:9c:b9:d7:cd:04:1a:c8:46:ce:e1:b6:c5:28:
d6:58:df:17:38:5b:19:18:dd:2a:c1:34:64:ff:fc:fb:a6:dc:
80:bb:45:89:50:3c:ce:e0:9c:b6:88:ec:0e:fd:df:ae:bb:87:
36:f8:b7:62:83:68:0c:e5:c0:f2:18:95:54:4d:6b:20:bc:ae:
bf:67:60:2b:95:86:d1:1b:07:9b:d0:d4:09:fd:20:2e:15:f7:
22:8e:10:2e:e8:22:46:cd:30:e3:d8:7d:70:af:2b:a2:d4:4d:
bb:97:fe:b6:f1:f0:ac:22:55:8e:41:44:ea:4b:28:f6:8a:cf:
35:4f:f5:6d:a8:18:12:d0:cc:cc:f0:65:f2:08:17:c8:83:58:
89:06:4c:04:57:09:fc:9a:c4:85:28:2f:6d:bb:b5:ef:2e:d0:
ab:77:93:7a:62:fb:a1:cd:f4:a9:a5:82:03:e0:21:56:90:74:
6f:93:a3:67:4a:e0:58:af:04:18:4a:e8:c1:90:c1:89:d9:cd:
8e:e7:f0:78:5c:f5:b8:e2:a3:d2:de:42:47:79:5b:7a:a5:c6:
a5:3e:d5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:03:28 2025 by rpki-client