Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
File: XQwn-FWB4ue94MmPvVS-HUlnBRc.mft (raw, json)
Hash identifier: WxaT8hbGgJaA2EszYMfv7cw2V9nDoWpZxoDtzUi1O4E=
Subject key identifier: 29:46:42:7E:F4:DC:1F:6B:B1:95:70:89:DE:BB:4B:A2:50:01:79:2A
Authority key identifier: 5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
Certificate issuer: /CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Certificate serial: 01964E90BC601A4F22BBFCAD2BE1D7C81A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 15:00:30 +0000
Manifest this update: Sat 19 Apr 2025 15:00:30 +0000
Manifest next update: Sun 20 Apr 2025 15:00:30 +0000
Files and hashes: 1: 5lc5ZmxcIf_S-qtTdxwVFYdfw74.roa (hash: nWQ6LzHmMcNUWFVJjD8F6A2IBDinnQ/3GkZ+tOcMhcc=)
2: XQwn-FWB4ue94MmPvVS-HUlnBRc.crl (hash: QoG5YpENnR6Il/axi+Tyt0wbDdx6hemWDt1kQ3Iu3sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:90:bc:60:1a:4f:22:bb:fc:ad:2b:e1:d7:c8:1a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Validity
Not Before: Apr 19 15:00:30 2025 GMT
Not After : Apr 20 15:00:30 2025 GMT
Subject: CN=2946427ef4dc1f6bb1957089debb4ba25001792a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:4c:f0:b6:38:2a:a9:d8:d9:e4:bb:ca:71:
f9:55:ad:98:93:b0:d0:14:16:89:6f:f0:d8:d8:74:
8d:50:e6:10:b6:79:13:15:cb:b1:e7:f0:cc:f5:a5:
4a:e3:51:4e:b2:b8:62:5c:19:61:2a:6a:dd:c7:cd:
6e:46:43:06:0e:2f:ff:92:4d:67:a0:fc:7e:3f:09:
0d:8b:1f:24:77:fc:be:cb:31:b2:c7:25:d8:c8:3b:
17:6b:96:88:25:e5:92:bf:40:d8:fa:51:e5:7b:b8:
84:56:e5:12:55:26:b8:ca:fb:2c:e4:11:f2:f1:1d:
23:e9:eb:15:b3:3e:27:85:ce:ba:c0:bb:14:eb:5e:
dd:81:a8:73:5c:4b:1f:69:d4:4d:10:a1:c5:49:42:
8d:3e:10:ff:00:aa:b0:b5:b5:22:70:51:6e:1c:61:
ea:c7:8d:9d:33:15:0f:83:d6:86:ab:79:11:59:16:
36:58:14:be:ed:75:c4:4d:dd:2f:f4:a1:fd:56:d7:
f4:8c:5c:3d:90:bb:69:76:58:09:5d:4e:b1:cd:1c:
d9:11:75:8b:ec:19:47:ce:ff:22:32:c4:4e:bc:42:
f6:d9:73:3a:9b:93:6d:7a:8b:15:5f:a0:48:5f:5c:
b2:e5:fc:e9:08:d8:79:2b:ae:e3:eb:9d:75:3b:c3:
e7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:46:42:7E:F4:DC:1F:6B:B1:95:70:89:DE:BB:4B:A2:50:01:79:2A
X509v3 Authority Key Identifier:
keyid:5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:50:90:f8:c4:3a:89:23:22:e3:76:76:5e:96:5e:03:4d:6d:
d9:d6:80:48:18:d0:71:17:3e:8b:70:62:29:7a:12:6c:de:d4:
06:f4:31:34:e5:05:fb:f8:64:f6:64:c4:ff:35:91:7c:f7:bf:
b8:7a:d9:5d:f4:6d:61:49:d4:a1:7b:c5:01:c0:2c:f4:a5:34:
a4:a0:cf:b4:ec:a6:f1:48:74:4a:cb:3f:14:ef:31:7b:74:0b:
12:9c:6d:ab:13:fd:09:61:01:13:9c:d6:9f:ca:50:fc:8b:f0:
e3:1b:ee:25:84:f4:68:44:0f:cd:ec:32:e0:20:52:ae:c0:e5:
72:a1:e8:bd:20:31:69:bb:09:5b:e9:d9:03:60:d9:9a:c3:a7:
15:f7:e2:a4:a6:06:36:88:53:fa:4a:6d:5e:21:38:f0:2e:7a:
99:f3:e2:46:e1:63:53:1a:e0:aa:c9:57:ac:57:f5:88:56:f7:
40:24:67:18:99:b1:20:b7:24:90:ce:84:f5:f3:08:45:ed:ad:
75:1c:87:ec:0e:47:2c:31:0f:09:e8:80:6b:3e:81:44:30:02:
7f:5c:51:34:9c:b3:1c:45:67:3f:dd:8b:b7:65:2f:dd:0e:b3:
f5:34:07:a0:fb:b8:63:7b:82:0a:54:80:0e:79:2e:26:2b:ad:
24:76:fe:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:13:49 2025 by rpki-client