Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: iMGcJ3wTjkul3bMKnR0q18wmT9nXwhrsHtK7ox1BBn0=
Subject key identifier: E0:7D:FD:78:62:2C:95:F1:4E:35:90:57:17:8E:BA:DE:35:BA:CA:0B
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 01960A8C6D0E28DE607A4BA9696372E6F682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 02C9
Signing time: Sun 06 Apr 2025 10:01:37 +0000
Manifest this update: Sun 06 Apr 2025 10:01:37 +0000
Manifest next update: Mon 07 Apr 2025 10:01:37 +0000
Files and hashes: 1: 9sDTJcHPUOu0xVqrTxWLOBaQ64A.roa (hash: vptvr3J25ztlCmZtkSM0UG2WMV8luXgqTlBmKUmGLHA=)
2: GsnOL5iHHrW6oQXApcRlDxJejY0.roa (hash: ouWbGoaZHSfSjzbvHbi5NQp6GPK98y84LC+ZBJMKIe4=)
3: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: 7rN4taeW/DQkJZEwjOd7GmzZYrjoRQL+5v/aP/F1aKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:8c:6d:0e:28:de:60:7a:4b:a9:69:63:72:e6:f6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Apr 6 10:01:37 2025 GMT
Not After : Apr 7 10:01:37 2025 GMT
Subject: CN=e07dfd78622c95f14e359057178ebade35baca0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a3:fc:2f:2f:59:00:ad:25:75:a0:f9:49:21:
80:52:6a:5f:09:d8:e6:7d:04:9b:63:ec:18:42:bb:
68:3c:10:fd:86:fa:cb:0a:0b:1b:56:84:8d:12:de:
85:0b:18:d9:9a:e3:d1:8e:e3:1e:76:4b:fd:f4:36:
ca:f9:1d:d7:2d:f4:fa:98:70:d0:98:90:89:df:06:
a4:25:fc:0b:d7:c1:5b:40:26:d2:98:32:f7:b2:8e:
46:11:9f:15:d8:e4:a7:c7:65:7e:2a:93:89:bd:18:
a5:c8:c3:d9:fe:5d:46:30:e7:5b:e8:45:14:ee:f4:
c6:b6:7b:63:b3:fc:3d:5e:21:df:6c:eb:bd:1d:db:
b5:86:c7:9c:3e:d8:c4:e5:d1:45:79:57:a2:d4:a5:
07:c1:7b:00:a0:ec:c1:c7:46:2b:14:c8:0f:90:3d:
5f:77:ff:3a:ae:f6:85:c2:8b:10:59:ef:e8:b3:d9:
dd:94:b6:b0:2f:16:98:aa:14:82:57:b4:95:bd:d0:
6f:2b:63:20:84:1b:19:61:98:e3:55:f7:29:ce:21:
5a:85:4e:49:ba:36:4f:42:80:d6:50:eb:de:70:1a:
17:f6:44:dd:10:13:2c:b5:db:15:87:05:61:31:b3:
40:9a:f1:47:52:d3:42:89:1d:84:13:c4:23:ac:3a:
9f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7D:FD:78:62:2C:95:F1:4E:35:90:57:17:8E:BA:DE:35:BA:CA:0B
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:73:e6:8e:ba:0d:73:5c:fe:e3:ea:d0:59:93:0a:b0:7f:8d:
9e:cd:d1:db:39:69:38:f4:9e:22:a4:34:d2:b3:c8:92:ab:7f:
36:01:aa:27:8c:97:ec:e3:32:c8:18:ef:8a:8f:b6:dc:a1:c7:
18:22:41:4f:b5:03:84:62:fa:21:ce:9d:7f:c2:8c:d5:76:18:
a9:f8:10:b4:9e:91:27:1f:54:99:9c:63:c4:f7:86:47:d5:46:
22:00:ca:34:19:c1:7c:83:a9:63:fa:0b:4c:ac:b7:42:5b:0a:
fc:3e:7b:e5:55:eb:f5:5a:cf:15:a7:aa:c7:a1:e7:41:0a:2b:
f8:44:ce:df:3f:95:05:0e:fc:4a:1b:e8:6c:12:9f:62:eb:e1:
ab:e6:00:93:e1:42:82:0a:72:4c:92:6a:0a:8b:26:3e:23:da:
f6:b6:d8:0e:90:a8:09:d1:e9:8b:d5:0b:5f:a1:dd:91:ef:06:
39:0e:9f:f6:6f:49:c4:d7:44:8d:17:ad:1c:81:81:91:56:50:
f0:7c:18:66:7c:ae:33:d7:fe:0e:64:26:38:ca:38:b3:33:9c:
68:29:a2:13:42:7d:82:16:6f:4e:73:7f:7f:98:e1:59:89:55:
50:a0:ec:28:aa:dd:2b:1e:bc:9b:04:4e:16:26:47:bb:1d:5a:
c4:e4:58:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:57:42 2025 by rpki-client