Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: MSbJml0GefqwAUWQ9edxUF+MmUtd4Lv7Kl8XkRtok+s=
Subject key identifier: 09:36:F5:91:E3:12:8B:38:09:D5:EA:25:6E:C6:6B:6D:28:8F:C2:A2
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 01958C5FF8825F88DBE0917489B26945362E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 0B77
Signing time: Wed 12 Mar 2025 22:00:54 +0000
Manifest this update: Wed 12 Mar 2025 22:00:54 +0000
Manifest next update: Thu 13 Mar 2025 22:00:54 +0000
Files and hashes: 1: Ke8e1NAYZzQiPtwwM3L4rP1yhWQ.roa (hash: 4CTO9kGNxwlbcy52jny+xyVS9xLBGZQ5MXz3PD+4Smo=)
2: R43PaYUKZCLqgzcK-39C4LhJkYw.roa (hash: RU4oVL2aN6ItjsLLYNF/Tqi8VXdquafeG/KUtVtAMgo=)
3: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: TdTPn2NcuwgQyqb6uEX4F+FUVyxAu1zlKrsy7beyz5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:5f:f8:82:5f:88:db:e0:91:74:89:b2:69:45:36:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Mar 12 22:00:54 2025 GMT
Not After : Mar 13 22:00:54 2025 GMT
Subject: CN=0936f591e3128b3809d5ea256ec66b6d288fc2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:60:8e:4b:15:2b:0d:3d:61:7e:99:d3:28:eb:
ef:4b:48:3b:9a:87:db:21:4d:20:d9:86:0c:d2:8b:
8b:9a:23:c6:a4:3b:8e:60:07:37:f1:f4:71:9c:1b:
d7:c2:b4:1e:38:a1:52:3c:3d:08:0c:78:b8:21:45:
de:f2:73:0f:4d:fa:f5:d1:eb:05:a7:11:bf:3c:8b:
b2:a2:2f:06:45:d5:19:1c:34:9d:0a:00:fb:02:47:
79:62:0e:ca:00:41:5a:61:77:c7:f3:71:4e:99:3b:
33:d6:93:07:91:cd:49:8f:42:aa:a6:c7:b7:64:e8:
30:20:28:41:e7:3b:23:6d:46:20:75:8d:9e:18:bf:
3e:23:04:c6:aa:81:3f:e3:c0:b6:c5:c6:1c:44:1e:
69:69:6d:55:e1:53:41:45:70:84:f9:36:8b:51:22:
75:ee:da:1e:bb:ef:69:21:d2:a0:30:5e:56:27:4b:
94:72:f6:a1:f5:42:d2:16:73:9f:09:88:fb:1b:61:
f3:41:3b:e5:bd:19:ef:19:b4:02:fa:c8:fd:cf:8e:
d7:1c:60:8f:25:d4:f1:fd:60:65:5c:8c:aa:25:db:
51:b4:56:11:ca:c0:2e:a3:b0:b0:25:7f:e7:88:79:
89:f4:d1:08:32:cd:c1:f8:9f:35:ea:0d:4b:ec:c9:
79:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:36:F5:91:E3:12:8B:38:09:D5:EA:25:6E:C6:6B:6D:28:8F:C2:A2
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ee:ee:9a:b4:b9:1b:d1:34:ab:1d:22:74:c4:3e:50:d6:22:
f0:c4:04:ef:74:56:b1:85:85:93:57:af:ef:e2:1e:74:8f:5d:
3b:77:4e:2a:b0:64:2d:5e:68:c0:05:c5:c6:fb:ab:bf:60:31:
5e:89:d3:3e:3a:47:d6:f7:fe:9c:b8:e3:07:05:09:51:92:24:
d1:84:8f:79:05:bf:66:13:b4:93:f4:af:91:9e:f0:5d:cf:9b:
c4:a1:47:c1:30:c7:6a:3c:d9:d4:db:a7:04:80:ed:1d:94:80:
79:bd:1d:6b:29:8f:2c:31:3f:e4:5d:af:4d:37:3e:d1:fc:49:
d5:41:63:44:0b:f5:17:de:ed:11:fd:9e:75:b1:e2:8b:4d:a0:
b6:92:7c:c6:81:48:6a:2d:45:3e:ef:92:db:56:d8:3c:3f:d1:
43:3d:f8:9f:b8:eb:a3:e2:7d:d7:f4:05:1c:3f:4b:18:b9:e3:
41:ac:a6:40:1e:30:a9:71:90:95:74:ae:8e:c2:b9:6c:d0:d1:
b4:91:b0:c1:7e:b0:8c:83:27:2a:19:9b:f3:8f:66:8c:d7:ff:
fa:ad:e1:a2:f7:7e:dd:7c:f6:a9:2e:f1:61:4a:cf:64:eb:12:
78:13:9f:26:f8:92:7a:38:4f:c5:43:18:bb:5f:77:bd:0e:f4:
d2:3a:e9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:38 2025 by rpki-client