Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: /pDOEMEm6UKc003kU9Qg27uUwAr1EiLFMwq3WooyVFw=
Subject key identifier: B2:2C:02:7F:56:11:31:36:CE:C0:C1:14:37:56:CE:A9:9E:04:C5:C4
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 019610C512A8FC44EC230914BCBA5722DEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 134B
Signing time: Mon 07 Apr 2025 15:01:12 +0000
Manifest this update: Mon 07 Apr 2025 15:01:12 +0000
Manifest next update: Tue 08 Apr 2025 15:01:12 +0000
Files and hashes: 1: BhzUAWAmqJa_PA-L7yjY7FT9Af0.roa (hash: MUBzsjqvQyVXx3qdpZLrInMDFQqgnqT5UakUiyluBrA=)
2: HCKNxU6TCLkO6DVpZ3lA90mNVKU.roa (hash: Xh6VoAi/B2yrRWzytdRx21/eskMRRaoQHczwQgtUHG8=)
3: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: MJ0QtAUz95vEj9dVnreRg+Zmq410OnNKv7MaDfNkSkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:c5:12:a8:fc:44:ec:23:09:14:bc:ba:57:22:de:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Apr 7 15:01:12 2025 GMT
Not After : Apr 8 15:01:12 2025 GMT
Subject: CN=b22c027f56113136cec0c1143756cea99e04c5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9f:38:b6:f1:8f:37:a7:0f:0d:ca:57:d4:4d:
4b:15:69:82:c7:56:09:46:6e:a9:db:f6:70:5f:a9:
3a:55:54:93:72:73:26:34:6e:dd:67:09:9b:69:cf:
4c:62:bd:b4:9e:af:ef:7e:af:8e:37:59:1a:48:25:
f7:7f:0a:3c:74:f5:a7:d8:93:01:a1:02:3f:bc:5e:
bd:17:5a:dc:71:17:71:0a:74:83:09:65:a2:35:7e:
3d:d0:91:cf:7b:91:10:94:8c:45:95:1e:c0:e6:2f:
c0:7f:85:59:1d:44:75:f1:58:0e:e0:c1:83:c6:02:
21:6b:2a:68:25:d3:4f:ac:c6:ac:a6:97:40:50:7f:
ba:63:79:2a:bf:7d:00:cb:87:96:3d:41:83:a8:f8:
f6:ca:7c:05:67:7b:15:54:90:f6:d8:bf:18:e3:59:
b5:36:c5:1a:8a:9f:19:48:47:2a:53:7a:1d:28:f5:
1e:81:27:6e:a6:74:69:85:22:23:41:2b:a6:d5:79:
4f:0b:af:7d:0e:ac:c6:0f:7a:87:e9:10:c8:46:83:
da:55:0e:3e:4f:83:1d:64:a7:ff:64:22:ed:e4:02:
34:26:54:2e:a7:b1:17:dc:e0:27:17:ae:3b:50:cc:
c7:42:f3:f9:78:f3:79:ba:4f:eb:89:86:6e:3a:06:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2C:02:7F:56:11:31:36:CE:C0:C1:14:37:56:CE:A9:9E:04:C5:C4
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:44:bd:00:ac:62:f1:f1:92:7d:ef:76:88:17:23:bf:d0:29:
4a:f6:3e:80:c7:7c:a7:f8:c8:4d:8b:da:f0:de:69:d5:af:25:
d0:09:f4:0a:de:69:68:90:6c:1e:b4:31:05:15:e9:59:b0:d2:
6e:b3:22:99:07:c0:dc:d2:49:81:7c:59:dd:73:a9:7d:7b:b4:
c8:8f:aa:e3:fc:3b:0e:b1:8a:9d:79:ff:02:f6:16:25:e7:22:
6e:fa:d2:bb:a5:44:2f:56:07:e2:67:bd:37:f4:b4:24:22:62:
b1:cb:4b:35:d5:9e:33:13:73:8f:3c:4a:f8:a6:50:c6:1e:92:
21:e2:72:4f:dc:34:d4:1d:61:e0:73:57:cb:35:10:72:4f:a9:
ac:02:1d:a0:b7:b1:5d:0f:92:77:93:e7:75:c0:fa:a7:f0:8f:
5a:c3:98:43:e4:66:7d:13:26:63:5c:1d:46:d0:0b:df:30:3a:
15:2f:42:12:c2:39:ce:d9:01:03:ee:ff:f6:83:ca:40:a1:64:
d4:8f:50:86:5d:8c:02:ca:af:92:dd:60:d1:2a:29:58:e4:fb:
5f:7b:b1:8a:6a:82:c5:5c:c0:39:49:ff:78:80:1f:49:96:46:
1b:27:d4:69:50:2f:0b:32:66:8e:10:f9:29:bd:64:5a:5f:7d:
50:09:1c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:39 2025 by rpki-client