Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: 5+Nfi4MZD9JYXfnYEbVLlZDJPuQvLPCp2Jqr9XFcTjk=
Subject key identifier: E7:DE:6A:B3:1F:24:BD:32:5C:05:EB:F5:55:4B:A3:7E:9B:7A:D9:43
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 01964E59FDAFEB8AB7EC9975C18D4D06EE82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 148B
Signing time: Sat 19 Apr 2025 14:00:42 +0000
Manifest this update: Sat 19 Apr 2025 14:00:42 +0000
Manifest next update: Sun 20 Apr 2025 14:00:42 +0000
Files and hashes: 1: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: Q1ygrITAXlibp7V5O3QY0lx8ubrHZKjVIeNLSWGFS8I=)
2: uWnagnV7ph6W305lDhQcUtu8iOA.roa (hash: O2rllaolJLmB6wHK4WL6QTUawzuqbXsQObcxgCsZ0L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:59:fd:af:eb:8a:b7:ec:99:75:c1:8d:4d:06:ee:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Apr 19 14:00:42 2025 GMT
Not After : Apr 20 14:00:42 2025 GMT
Subject: CN=e7de6ab31f24bd325c05ebf5554ba37e9b7ad943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:35:e6:f6:ec:37:af:59:d0:46:1b:f5:83:
4e:4b:dc:c4:f9:30:54:7f:11:22:33:7b:19:74:cb:
63:9d:c0:f6:d2:80:65:bf:b8:00:32:8f:5a:1f:23:
9f:90:19:e9:27:d5:97:24:32:74:26:24:aa:f2:e5:
1e:d2:13:65:be:0a:83:c0:31:5d:b9:ab:39:94:fe:
2a:26:b6:b5:89:e9:bb:23:ca:c6:d6:5a:2c:e0:e1:
94:de:5a:1a:d8:81:55:e5:19:58:63:35:20:b4:64:
1e:a5:0d:92:32:12:91:50:28:db:5a:7a:f0:6f:9e:
af:ee:c2:f0:95:af:a6:7f:ee:e1:5d:80:88:2b:11:
a5:ab:b6:ba:72:31:97:09:04:40:aa:b1:e6:7d:0c:
02:4d:d4:fc:09:a2:44:8b:d3:cd:be:09:cf:54:b9:
93:90:e0:ac:8e:38:56:32:75:83:fa:54:9a:6e:f6:
32:31:5f:7b:5f:dd:48:f3:bd:42:e3:38:03:7e:db:
0e:c4:b3:65:26:03:fe:a1:63:b3:83:9b:14:38:ea:
01:5e:66:74:dd:0e:88:a9:9b:2e:5f:1f:1b:d6:a8:
37:04:f9:dc:43:3b:5a:35:e3:f2:d8:30:d8:5c:04:
f5:50:e5:c2:c3:10:77:50:bc:e1:9b:94:69:6e:47:
23:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DE:6A:B3:1F:24:BD:32:5C:05:EB:F5:55:4B:A3:7E:9B:7A:D9:43
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:2f:7a:b3:5f:52:d4:cc:6b:bf:d4:5a:52:a0:fe:d1:a6:53:
b5:38:0c:bc:06:70:fd:ec:e7:8e:a1:1d:d4:aa:e7:52:df:12:
b5:84:3a:40:c0:63:5d:21:8f:27:dc:6e:7f:6b:79:28:31:4b:
8e:98:d1:f8:03:d0:e4:20:c0:41:5c:88:25:b4:be:be:5c:fa:
f2:71:34:68:d3:92:6e:25:97:66:20:3f:b1:eb:4f:a4:ce:02:
41:18:dc:ee:b1:4a:67:ce:a2:66:f6:e8:9f:f8:ee:1a:e2:1f:
0e:b5:b3:7f:f0:37:68:24:aa:f0:e4:90:78:0b:92:1e:6b:f9:
f8:ab:3f:6a:d9:bf:92:33:f7:82:c2:dd:47:22:74:db:50:87:
c0:cc:b8:3c:75:96:0f:58:be:67:b2:e5:90:7b:ef:2b:33:85:
86:0d:75:f3:68:d7:75:71:67:d7:16:f2:60:7a:0e:3b:b3:c6:
97:dc:b8:8c:90:aa:77:69:50:d0:6b:35:b3:5c:d6:69:e3:d9:
a8:15:b8:98:c6:75:02:bc:84:71:0c:54:16:09:05:03:e0:4b:
83:e6:3d:20:51:75:0e:7e:e4:ea:dd:d0:41:80:96:66:99:2b:
ab:34:64:9d:55:30:49:e9:81:11:f8:50:0d:86:2e:1c:73:17:
57:c3:58:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:22:05 2025 by rpki-client