Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: K1gNxA3p351woC22gDVaJZa8O3+ipn5A1NVmFYQDkEM=
Subject key identifier: 5E:BF:7B:3D:CE:A5:9E:90:9F:74:69:1F:FB:69:F7:6D:0B:7E:8B:60
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 019645C5A4DFB296D99FC490A73BC8E0D41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 0BD7
Signing time: Thu 17 Apr 2025 22:01:42 +0000
Manifest this update: Thu 17 Apr 2025 22:01:42 +0000
Manifest next update: Fri 18 Apr 2025 22:01:42 +0000
Files and hashes: 1: Ke8e1NAYZzQiPtwwM3L4rP1yhWQ.roa (hash: 4CTO9kGNxwlbcy52jny+xyVS9xLBGZQ5MXz3PD+4Smo=)
2: R43PaYUKZCLqgzcK-39C4LhJkYw.roa (hash: RU4oVL2aN6ItjsLLYNF/Tqi8VXdquafeG/KUtVtAMgo=)
3: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: L0b4zQYC8WZl0pHkYb4iwtRniNLuFnsFrDtus0uqUAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:a4:df:b2:96:d9:9f:c4:90:a7:3b:c8:e0:d4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Apr 17 22:01:42 2025 GMT
Not After : Apr 18 22:01:42 2025 GMT
Subject: CN=5ebf7b3dcea59e909f74691ffb69f76d0b7e8b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b4:d2:e7:4b:76:2a:b5:77:b4:9a:ee:f1:de:
67:09:85:0d:ca:64:0e:d9:33:9c:a1:02:07:4b:2b:
89:f7:f7:25:dc:0c:78:fa:84:3f:e0:63:07:2c:e8:
fc:1c:51:ea:66:30:37:71:97:74:53:ae:44:fd:f1:
82:ec:7e:fa:5e:80:3e:6c:bc:7f:b3:d5:fe:e4:4d:
42:e9:5d:3f:f5:ad:d5:ba:89:ac:b5:d9:e0:c0:1f:
ff:19:18:55:af:2e:b1:2e:c1:7f:df:84:ba:a0:66:
97:6f:7e:d3:b1:ab:c8:61:f5:d7:9d:aa:10:e1:d7:
bc:dd:49:a9:4d:2d:10:bd:85:98:fd:9c:1d:cc:48:
7a:ed:f0:64:6f:89:03:91:17:c5:56:25:0a:7a:b2:
52:6a:4d:e3:60:3f:52:16:c5:7a:56:9c:ea:90:1f:
b3:9f:ad:82:f6:65:7d:02:89:7a:75:2a:9e:d4:b1:
a9:c4:26:93:03:dc:f0:39:a3:42:a7:4f:2a:1a:fa:
2f:0d:44:54:d2:fe:b7:a2:a1:1d:de:6f:5c:fa:b0:
a3:ea:49:e7:17:c5:79:15:62:da:57:99:e5:37:7b:
51:1c:03:60:22:c1:cb:49:8f:e5:eb:f7:10:09:cd:
2f:bf:fe:13:48:d1:9b:f6:84:44:32:e1:80:9f:ae:
93:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BF:7B:3D:CE:A5:9E:90:9F:74:69:1F:FB:69:F7:6D:0B:7E:8B:60
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4a:7d:03:eb:df:7a:93:65:60:51:52:b1:ff:04:f0:66:d0:
c9:10:cb:6c:eb:7b:28:25:6d:09:78:8b:40:3a:eb:03:db:d3:
1f:e7:ee:f2:30:c4:e7:8c:57:09:cf:c9:f3:19:e9:a0:26:62:
0d:9a:bf:6d:03:c0:32:a4:88:01:3f:8f:83:ec:66:da:c1:e1:
ee:26:19:93:12:8c:6f:65:42:28:48:8a:8a:64:ca:aa:b0:7a:
58:2c:66:07:4b:22:4c:87:ed:0a:11:f6:70:d4:b1:18:d7:a3:
6a:fd:3d:4b:bf:e3:26:f0:32:ec:3e:a2:b6:56:60:83:2d:a5:
d8:58:69:ae:9e:58:71:1e:97:85:1f:49:02:3b:2f:54:48:3e:
c7:1b:db:3f:e8:b2:cd:23:39:c2:0c:1b:58:1d:de:6f:c6:4d:
c0:b0:e8:01:60:0e:8e:3e:fb:71:4a:dc:d7:f0:4f:c4:1c:f0:
c7:20:fe:2a:9b:20:23:f1:53:e7:bb:73:58:ee:02:0c:1c:0d:
1b:c6:5d:4d:7c:01:51:50:c0:9b:e7:42:96:0b:e3:a8:cf:af:
40:74:ec:06:2f:61:0c:4f:4d:dc:57:d3:a7:9e:2b:cd:d8:4c:
09:ba:b6:4c:06:ee:7a:53:ef:d9:95:8f:4f:ec:72:a0:56:cc:
41:70:d4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:50:15 2025 by rpki-client