Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
File: XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json)
Hash identifier: kP8f+MHhIGS5oKcVFd1h1xgzxsiAEupcOKse2RLCrqQ=
Subject key identifier: 9E:42:05:B4:AA:6C:E1:15:54:60:8F:73:0F:F1:5B:E9:6A:A7:07:29
Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Certificate serial: 01964F6C446DD63DCDECB22C0AAB35862FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 19:00:17 +0000
Manifest this update: Sat 19 Apr 2025 19:00:17 +0000
Manifest next update: Sun 20 Apr 2025 19:00:17 +0000
Files and hashes: 1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: x348viqpRSRthdb58X686yuRCxqfDOBg5g/+ZBrTFpM=)
2: YpoQb4d2ZirnrI3hA0gBb3h8Ui4.roa (hash: xAwvy1eVXmw515xL9f1ayxKoN3gZJ8WiMBC17Avnw5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:44:6d:d6:3d:cd:ec:b2:2c:0a:ab:35:86:2f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Validity
Not Before: Apr 19 19:00:17 2025 GMT
Not After : Apr 20 19:00:17 2025 GMT
Subject: CN=9e4205b4aa6ce11554608f730ff15be96aa70729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:c2:e0:df:15:54:df:66:20:45:b4:40:c9:
13:5b:b6:c6:49:dc:80:84:bf:f5:cd:81:36:20:76:
cb:8a:bb:60:c4:0f:3c:9b:47:15:53:14:1a:db:6c:
1d:25:b7:f8:71:64:e5:6c:28:77:4e:e8:d0:ad:c7:
ec:3a:16:08:c2:bd:a1:54:60:22:d5:f6:33:c2:94:
60:5c:88:ef:ef:41:39:8e:c8:28:ac:d8:ab:4b:34:
35:28:08:bd:c8:bb:80:67:4b:9d:2d:ec:41:5d:ff:
45:3d:5a:8e:c0:04:3c:2c:ec:fa:10:53:f5:60:d2:
42:75:85:48:1b:ed:66:92:4b:17:35:78:ae:de:de:
cc:80:87:8e:71:4b:44:55:68:f7:64:2e:13:3c:43:
55:df:0e:31:bd:ce:cc:68:7a:50:c7:e8:f5:c4:22:
e8:54:9a:d6:88:2d:cb:d9:ef:4e:f5:08:cb:4f:ab:
c8:cd:25:0f:45:a7:ef:25:57:32:dd:2b:02:81:33:
63:7e:b0:4d:4d:d2:4a:77:3a:d3:c7:bf:fb:e0:d8:
89:41:09:e8:4d:fa:5a:ec:eb:67:40:4d:36:7f:25:
13:15:3d:fe:db:59:ea:aa:68:b1:b1:4f:37:ad:94:
2c:70:93:55:4a:89:21:13:75:a8:c7:d9:25:e4:61:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:42:05:B4:AA:6C:E1:15:54:60:8F:73:0F:F1:5B:E9:6A:A7:07:29
X509v3 Authority Key Identifier:
keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f5:91:71:ca:06:5a:5d:3c:e7:27:36:81:a8:91:e4:e0:f2:
c9:d8:1e:99:1e:98:1d:82:3b:18:99:ea:34:33:f8:32:67:58:
4d:2b:f1:81:87:78:e8:43:76:ba:78:9f:ca:de:b9:bf:64:60:
5e:82:5e:33:d7:cb:50:b7:77:ff:f5:79:10:50:34:07:64:99:
fa:14:d6:fb:1a:fb:c7:e6:94:3d:dd:5e:ff:dc:db:ee:db:99:
07:cf:1c:bb:4f:3f:bd:cc:65:97:1d:c5:1f:00:da:a5:ed:b4:
14:c4:e9:a3:80:ee:0a:60:1a:1c:fe:98:74:6f:d8:95:e1:b8:
79:24:21:04:dd:1f:c7:ab:62:77:2d:c0:c6:b6:48:bf:db:24:
76:e0:78:a2:24:fc:c4:72:99:80:5a:2e:5c:42:76:de:ba:79:
06:b6:98:8c:ea:1a:58:6c:2d:99:bc:d1:4a:f7:70:bf:b9:15:
82:2f:d5:3b:5b:d8:48:06:41:e8:9e:7a:2a:d4:7a:67:40:9a:
a1:b8:3e:64:c0:80:5d:8a:ec:f4:b3:1c:36:8b:c0:3b:9e:2b:
6f:c2:2f:21:5e:47:0c:bc:27:2c:23:bc:4e:7f:f6:45:26:10:
6d:bc:84:8d:56:c4:c3:3f:a4:7e:48:ab:95:68:be:0a:d3:2c:
55:07:ce:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:44:17 2025 by rpki-client