Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
File: XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json)
Hash identifier: 6q9VXMSuiAjIG2OS4FzlOLI7hn9lStshlb/I1c3LTtk=
Subject key identifier: 06:CE:BF:1C:CB:32:4B:E9:CB:5F:02:2A:5E:99:A6:55:F3:2C:1D:70
Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Certificate serial: 019609799A7CE48302306033508AA2FC601A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
Manifest number: 0F38
Signing time: Sun 06 Apr 2025 05:01:26 +0000
Manifest this update: Sun 06 Apr 2025 05:01:26 +0000
Manifest next update: Mon 07 Apr 2025 05:01:26 +0000
Files and hashes: 1: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: IX2N5AUF8OshLcHOqQeQ87TG5g+NIj8cSfC5VysxcvU=)
2: a15ql9whSmA7v8PDlzobAKStIYU.roa (hash: i4JQTq1d7soOmwMqfdiIR8FwyHTrIMo+VQIkB92oIzE=)
3: qT5tUrp0ieWxjsIH98IvAEwbuX8.roa (hash: fpGji62FSVsBApBvHfHEB5ApQmyXJQRF9R2Di5FougI=)
4: tars8J2v-8N6JtB2suJ6nsAGhgI.roa (hash: VKSpLn3FB2L/sDLR9l5iJR3MIMweqN1CpStbR7qOoA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:79:9a:7c:e4:83:02:30:60:33:50:8a:a2:fc:60:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Validity
Not Before: Apr 6 05:01:26 2025 GMT
Not After : Apr 7 05:01:26 2025 GMT
Subject: CN=06cebf1ccb324be9cb5f022a5e99a655f32c1d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:f3:0d:86:07:4c:00:55:3c:23:3b:0c:a6:
6e:fb:ae:63:ce:f9:65:69:8a:f0:fa:c4:3d:cf:70:
26:a6:22:f2:f8:42:36:29:ac:eb:05:3d:87:63:e4:
b6:b3:c0:05:86:17:a9:e7:1f:a7:f6:4e:e3:b9:21:
b5:89:e3:82:e4:b6:0a:e8:53:8d:7d:e8:1b:95:b0:
db:a7:f4:97:fc:25:5a:9c:29:40:2a:c4:2a:3c:81:
c6:eb:70:e1:2c:11:43:e9:ac:b3:dd:62:14:0a:20:
03:69:85:6b:45:68:97:2b:a5:55:6e:2b:2c:fa:2e:
87:8f:70:2c:5f:a7:3a:27:58:b1:1b:45:e5:a9:bc:
23:fe:60:87:20:f6:85:6e:cb:e1:b1:00:97:d8:69:
d1:cd:c3:6f:96:1a:ba:de:5a:b1:f6:b7:4f:c1:ae:
b3:c2:03:f5:00:b5:fc:de:79:69:38:39:86:eb:d3:
fb:10:db:ed:60:f8:13:38:88:cb:9e:75:fb:70:48:
c1:83:71:07:12:bd:44:32:da:5a:44:59:7d:8e:5b:
c0:19:81:db:1a:1d:c4:91:29:84:37:37:18:da:f1:
b2:9f:f8:24:61:36:b1:2f:d5:8d:c5:28:13:c5:8f:
ca:76:62:34:7f:0d:11:a4:90:10:f5:d5:6c:23:b0:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CE:BF:1C:CB:32:4B:E9:CB:5F:02:2A:5E:99:A6:55:F3:2C:1D:70
X509v3 Authority Key Identifier:
keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1e:59:08:78:f7:1e:bd:c3:c5:c6:fb:f3:a0:c3:3a:a6:80:
82:8b:22:84:07:f0:1f:c7:75:d6:32:d9:dd:88:d1:45:d2:44:
b5:4a:b7:d1:b9:68:4e:bd:48:b2:e1:d1:4c:d3:04:72:88:9b:
74:79:66:02:f4:b8:dc:8d:84:86:ad:df:cd:c9:fa:3f:42:51:
1c:f4:f5:33:18:fc:21:ee:97:00:2c:dd:aa:90:7d:00:bf:a9:
b0:28:99:74:c9:aa:10:1e:1d:c6:5b:8e:95:e1:45:81:24:3a:
64:ca:d6:a3:df:eb:52:87:ac:82:38:1b:5a:0b:ae:ff:77:d3:
ba:67:43:dd:6a:a4:10:9f:0e:9a:fb:db:08:3b:0a:03:7f:1e:
90:1e:50:6a:01:f7:61:27:e8:da:3a:20:3e:b0:9d:f4:6c:38:
a7:ca:33:34:54:ab:1d:10:87:51:e7:3d:9e:35:76:20:a2:24:
02:75:91:5e:ca:96:03:68:12:6d:54:ac:1d:56:c9:7f:54:60:
75:2c:c0:6f:a1:e5:48:da:01:9f:a6:ae:3f:56:b0:a7:4c:4b:
0e:8d:76:f7:40:e7:4c:31:6a:ae:e1:40:34:da:ac:66:fa:ce:
38:54:37:40:ca:14:fc:f1:41:59:7e:b1:ea:31:3a:c2:40:62:
05:6a:22:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:39:03 2025 by rpki-client