Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
File: xb14VKoFD9blUPx80CtVhzC_u3o.mft (raw, json)
Hash identifier: m9euuGJiVRRwuxzV8O1Qpg30o+qR/zQQmy6zwyyeBRE=
Subject key identifier: EB:94:02:D1:AE:9A:DD:29:86:F1:F9:FD:0B:A9:5A:C3:8E:59:12:16
Authority key identifier: C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
Certificate issuer: /CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Certificate serial: 0196458D9F23367D46396711C007CA8FE820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
Manifest number: 0444
Signing time: Thu 17 Apr 2025 21:00:31 +0000
Manifest this update: Thu 17 Apr 2025 21:00:31 +0000
Manifest next update: Fri 18 Apr 2025 21:00:31 +0000
Files and hashes: 1: 5uFqMN3aXlbPQyR_zV-aShdoN_Y.roa (hash: jy9SGKilmmhulS0SQ8USL/F90L5q42BS/yYoLYQj470=)
2: xb14VKoFD9blUPx80CtVhzC_u3o.crl (hash: 62RsESfZW2qnrXf2cJknydmRRQcbSWvQePA+6ASxaC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:9f:23:36:7d:46:39:67:11:c0:07:ca:8f:e8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Validity
Not Before: Apr 17 21:00:31 2025 GMT
Not After : Apr 18 21:00:31 2025 GMT
Subject: CN=eb9402d1ae9add2986f1f9fd0ba95ac38e591216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:f0:e3:81:3f:c9:a6:8b:ac:4f:2e:5c:7d:
f2:9a:7a:78:a7:a1:08:d8:63:4b:ca:45:00:e3:da:
e2:7b:8b:03:43:54:7d:ea:4e:20:37:6d:66:17:6c:
e4:32:a9:b4:28:6b:0b:c1:d4:18:9a:58:d8:3c:3d:
d2:5d:43:29:88:3a:94:5e:53:8b:83:7c:f2:a1:54:
b8:9e:e2:35:26:a7:35:36:5e:15:d8:81:39:dd:a7:
29:68:6c:6a:5b:ec:75:b4:e2:83:88:0d:d7:70:3e:
a7:a7:2e:d5:a3:10:c6:d8:10:f2:82:24:c8:55:d7:
30:14:68:56:1f:63:07:84:3c:92:55:11:58:00:5b:
54:9f:5f:b3:18:0f:52:ca:7a:77:6c:0e:91:5a:3f:
10:3c:05:57:74:b8:d5:8f:16:b9:c4:78:da:d3:63:
d3:ee:63:da:f2:94:9c:f4:60:93:5a:54:37:4c:86:
bc:d5:e7:b3:c0:2c:d8:36:80:f8:45:fa:c2:95:aa:
f8:0e:aa:5d:75:9e:28:76:d5:87:6f:4d:69:0c:68:
6b:93:a9:4a:99:34:9d:2b:54:5e:43:d9:91:b5:a9:
95:d5:a0:80:8f:43:09:39:f8:1c:5c:b7:9e:50:06:
87:a3:5c:db:50:2f:f9:e1:3e:3b:b7:84:3d:54:2c:
37:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:94:02:D1:AE:9A:DD:29:86:F1:F9:FD:0B:A9:5A:C3:8E:59:12:16
X509v3 Authority Key Identifier:
keyid:C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1b:7d:ea:67:ff:7f:4d:2d:19:99:09:e6:ab:ae:ab:70:2b:
fc:41:25:c7:3a:76:bd:16:ba:ad:9a:1c:ba:71:b8:1e:1e:de:
38:4c:fe:ec:98:ac:8c:52:2c:18:6c:2d:2a:51:ad:ba:2d:10:
d4:d8:a7:1b:1d:0c:1d:77:83:7a:7a:5a:7f:a8:4d:ff:76:c4:
25:b2:20:b4:9c:3a:93:97:f0:c8:b4:5e:e7:cf:3b:b6:41:be:
29:71:f9:77:c1:d0:bf:ba:5f:31:70:54:8c:0f:20:b8:bc:67:
e2:75:b9:b3:81:39:3e:b7:ee:50:44:74:66:e1:3a:83:95:bc:
8b:5d:bc:fd:00:44:e0:40:6b:03:9f:eb:a6:80:01:a3:46:a7:
5a:61:94:fd:dd:17:fe:21:62:bc:c1:1e:3a:7b:40:1e:69:87:
88:c5:58:e3:4d:8e:ce:b5:b7:a2:c4:84:8c:8d:da:f7:1b:88:
eb:46:71:20:50:0a:32:51:c8:68:5d:ca:c7:3e:88:02:10:d0:
3f:50:0d:ae:fb:04:80:9c:c7:7c:71:95:5e:f7:02:1d:0a:09:
75:1d:64:3f:7a:17:f8:0e:4c:08:74:47:c5:49:2b:7c:94:43:
cf:74:31:b3:a9:a1:eb:21:03:16:d3:79:ec:6e:d6:06:33:3a:
e4:eb:79:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:58:29 2025 by rpki-client