Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
File: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft (raw, json)
Hash identifier: zQCD4Sp3qLAU8QFFokkzAl7WnZv3PScmitnBZId1ue8=
Subject key identifier: 3F:AF:DF:C7:AB:BE:29:90:FE:C7:61:89:CA:C9:53:8A:A5:B9:71:AD
Authority key identifier: 5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
Certificate issuer: /CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Certificate serial: 019613211DAC5B7C6C5F01DDEFAF7BF9285D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
Manifest number: 0CB5
Signing time: Tue 08 Apr 2025 02:00:59 +0000
Manifest this update: Tue 08 Apr 2025 02:00:59 +0000
Manifest next update: Wed 09 Apr 2025 02:00:59 +0000
Files and hashes: 1: 5y30p7raCKJYfbSEuqmSkSYDtZA.roa (hash: Q9POdVDuj+/Z03r+yT0jSMbPBlZ31szcDGTnnw3yZCk=)
2: EEe4kviaoOaRAlXUsQ8khbzXdfM.roa (hash: T+PjLiW7h53Ujf5UZIxn9gd03FjxCMK/yqiKdbNrdog=)
3: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl (hash: kgTti1Cpc/w4YLUWpzzTxRi0bV13JHnCq/a/IPjqh5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:21:1d:ac:5b:7c:6c:5f:01:dd:ef:af:7b:f9:28:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Validity
Not Before: Apr 8 02:00:59 2025 GMT
Not After : Apr 9 02:00:59 2025 GMT
Subject: CN=3fafdfc7abbe2990fec76189cac9538aa5b971ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:94:d2:1a:25:f7:23:38:c2:85:44:72:f1:
23:83:f2:4b:7f:38:f0:e0:73:ad:50:06:5d:7b:a6:
38:fc:9c:2b:70:4a:43:50:a6:e7:bf:ab:a4:c8:bf:
09:c3:ad:c7:5d:d3:05:af:08:b5:89:a4:f7:e8:87:
5a:04:56:91:43:c7:01:ab:1b:45:32:44:5d:b4:f4:
0c:a8:c1:70:4f:5c:89:78:cd:0e:3d:15:2a:83:5d:
49:e0:d9:03:52:be:47:0e:52:28:fc:fd:4c:8e:09:
d1:17:11:4a:06:d5:a2:ae:c4:6b:af:ea:1d:1a:b2:
ea:ad:5b:17:cc:b4:e2:2d:ea:20:99:d8:3f:b3:03:
d3:60:60:c7:a3:b0:23:b4:3a:92:7e:0a:5b:1c:15:
1e:44:78:0a:e6:45:1c:00:c5:a6:2c:03:18:ec:90:
a7:c9:a8:13:6d:9c:8e:9c:79:b8:40:3f:7f:0c:39:
f0:a4:23:52:78:79:ac:87:e7:dd:16:7e:bf:8d:14:
c3:cc:60:e0:78:7d:57:af:9e:32:ab:77:31:de:31:
a7:08:05:49:f2:57:2d:5e:a3:96:b8:9b:56:ab:7d:
4e:f6:50:e4:22:94:5f:55:0e:af:33:fa:b1:27:f1:
47:23:18:11:43:d7:c3:9c:e5:b1:0d:e0:a5:f2:9f:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AF:DF:C7:AB:BE:29:90:FE:C7:61:89:CA:C9:53:8A:A5:B9:71:AD
X509v3 Authority Key Identifier:
keyid:5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:29:16:01:ef:22:8f:2d:96:91:de:68:f8:71:b5:ed:e9:81:
f7:e0:04:d0:44:95:2f:ac:f7:67:c2:b6:38:77:f4:c1:c8:07:
d7:83:c9:27:58:fa:a5:e6:47:99:b1:7a:84:8a:0b:7f:97:aa:
73:be:ea:fc:b2:9e:01:96:34:f3:0a:26:91:57:31:33:c1:88:
a5:97:cd:88:0c:36:e1:a3:46:69:ff:f4:b3:49:60:76:b6:c4:
fe:b0:ba:6f:d8:5b:f6:4a:fd:34:8b:76:5f:08:9e:9e:82:76:
10:c2:1a:3a:41:e9:6d:40:31:ee:5d:f5:1e:8e:6f:65:23:32:
fe:00:78:74:28:e0:6a:02:cf:ce:f9:c1:5e:7e:a9:ea:37:2d:
03:40:6c:13:26:31:5a:94:d1:5a:df:a7:0f:40:22:a6:46:e9:
9d:da:fb:0d:40:2a:ff:69:95:8a:3c:b7:62:74:9f:5b:2c:de:
fb:61:49:d3:c5:b2:b6:12:2e:39:00:0d:53:a4:c1:a6:55:4d:
ea:35:67:02:ac:3b:75:51:8a:03:a7:38:e4:c8:13:e6:0a:06:
50:a8:e4:71:b9:76:f5:cb:67:c8:a8:04:e8:4e:88:7a:57:07:
13:64:05:bb:51:a4:7d:4d:89:99:04:ea:2c:18:38:85:f6:50:
90:3d:b4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:58:35 2025 by rpki-client