Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
File: XoEWTOOIJZGG-6AVrMSw60i-tVI.mft (raw, json)
Hash identifier: 5kWr4qZlrlQ0A4a2Op/A0497951JAr1BIBKRRPtiw/4=
Subject key identifier: 35:8C:5B:64:EC:72:0F:7B:96:25:57:01:FD:4F:AA:0A:ED:D5:A1:7A
Authority key identifier: 5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
Certificate issuer: /CN=5e81164ce388259186fba015acc4b0eb48beb552
Certificate serial: 019613583F41B9453A4E6B5373DD73A9950B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
Manifest number: 14D9
Signing time: Tue 08 Apr 2025 03:01:12 +0000
Manifest this update: Tue 08 Apr 2025 03:01:12 +0000
Manifest next update: Wed 09 Apr 2025 03:01:12 +0000
Files and hashes: 1: XoEWTOOIJZGG-6AVrMSw60i-tVI.crl (hash: TpqXJ3yoIGmt+IthWoCFsVVwMk64DGcBiqgnDzAHpX8=)
2: ewmzu1c5hlX5WEsUAJJ_EBHHe8c.roa (hash: LqYC06a3Uz9AaZO7Y0iTGjC5jKrTveBVSDvC1hJ3I8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:58:3f:41:b9:45:3a:4e:6b:53:73:dd:73:a9:95:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e81164ce388259186fba015acc4b0eb48beb552
Validity
Not Before: Apr 8 03:01:12 2025 GMT
Not After : Apr 9 03:01:12 2025 GMT
Subject: CN=358c5b64ec720f7b96255701fd4faa0aedd5a17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:b8:3b:f0:22:26:c0:8c:99:43:1e:26:74:
5a:b9:53:05:12:0b:e2:a8:9f:d3:06:79:2a:31:7d:
6b:3a:b6:c3:b9:f2:23:e5:0f:04:62:b1:5f:ea:8f:
c6:86:0a:16:00:80:a6:1f:58:65:a5:3d:1a:40:ef:
5c:16:a9:e0:4d:8f:ef:7a:95:78:66:c6:7e:79:82:
6e:3e:73:42:4d:bc:f4:98:e8:1b:cc:e8:3e:34:ad:
f4:39:a2:1f:dc:52:b8:f6:4d:c4:33:64:94:b1:fa:
a6:05:57:70:b2:f1:59:59:52:7e:9f:65:2c:ee:6b:
83:92:06:b9:40:3b:8a:0b:a8:97:14:3f:1a:67:6e:
20:18:bb:c2:0a:cd:3e:1b:c6:45:9d:dc:c1:2a:3f:
6d:09:aa:c5:0b:d9:ba:c1:7a:99:f7:c1:b3:48:e6:
a5:b0:71:de:9d:27:d4:fa:f8:e0:42:cb:06:a3:64:
09:ff:b1:80:f5:f9:3e:34:dc:ec:8d:f6:6d:19:41:
a2:4a:1a:19:71:5a:7a:d5:dc:20:81:a9:a3:88:c7:
e5:ce:95:80:f5:ae:5f:a4:9a:63:e0:1c:55:ad:7e:
de:a0:30:22:55:19:93:90:1e:05:35:2b:a7:7c:13:
75:7f:5f:ae:da:3e:4e:15:c6:37:fb:b9:c4:35:54:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8C:5B:64:EC:72:0F:7B:96:25:57:01:FD:4F:AA:0A:ED:D5:A1:7A
X509v3 Authority Key Identifier:
keyid:5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d5:ca:65:d2:bf:47:9f:62:09:48:35:21:ba:fc:1f:08:31:
6e:f5:ef:f5:5d:8f:eb:20:b3:49:b0:9a:79:65:51:ab:0f:b2:
ea:60:5d:4a:63:f9:a0:13:cf:e8:c6:76:fb:a8:f9:b3:f8:99:
af:9c:73:70:7a:bf:cc:26:fa:e7:a8:18:13:82:3b:2c:1c:c7:
87:b0:e7:d1:e6:3b:b1:94:95:53:b6:02:fe:66:6f:ed:0e:fa:
e1:d0:f8:aa:62:89:35:f0:31:aa:d6:bd:53:5d:01:01:d0:82:
65:6f:1c:a0:a7:81:e2:b2:20:f6:8d:ed:14:3f:a9:e3:b5:36:
33:46:1e:a4:04:6a:16:0d:b9:b0:67:a2:6d:70:88:5f:69:81:
c5:6c:a9:10:d8:e0:b5:06:60:21:c7:b2:97:1a:d9:37:fc:58:
ae:58:da:4f:45:cd:fa:2f:40:04:2b:24:31:e8:fe:bf:94:ad:
b5:33:da:a5:a6:3e:0c:79:23:64:52:e6:f5:1f:07:4f:44:87:
e0:20:2b:08:ce:36:7f:84:fd:8e:4a:4c:15:b1:8c:5a:51:61:
36:3e:b7:72:32:18:8c:7b:86:fb:d7:6f:5b:43:f1:00:c1:3f:
6e:00:50:5b:70:69:d0:75:29:53:53:e5:7e:d4:45:93:bf:94:
ab:9c:f8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:36:14 2025 by rpki-client