Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
File: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft (raw, json)
Hash identifier: jFDdbi3Qaa+1JHDtmVjvryumnn7nXbiW2df5gc7jK2g=
Subject key identifier: 90:FB:C4:65:D0:83:B3:70:99:4D:BB:8E:22:3B:24:BB:7A:C2:81:3B
Authority key identifier: 5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
Certificate issuer: /CN=5c40454a1b176795f021575347794bd9f04427ac
Certificate serial: 01958B8445F65F5CD106098EEBF26C00FC98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
Manifest number: 02D8
Signing time: Wed 12 Mar 2025 18:00:56 +0000
Manifest this update: Wed 12 Mar 2025 18:00:56 +0000
Manifest next update: Thu 13 Mar 2025 18:00:56 +0000
Files and hashes: 1: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl (hash: 9QuJV5Y/PuX3KMZBc+zaOb8BCuQNP7aqXHY+z2OdwIk=)
2: c_JE84x-V2cV3KZFySyzgUu68wY.roa (hash: mJ5axd73qhrQA8e697fkmyMkcOmN3YmgqnGx7qbzQIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:45:f6:5f:5c:d1:06:09:8e:eb:f2:6c:00:fc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c40454a1b176795f021575347794bd9f04427ac
Validity
Not Before: Mar 12 18:00:56 2025 GMT
Not After : Mar 13 18:00:56 2025 GMT
Subject: CN=90fbc465d083b370994dbb8e223b24bb7ac2813b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:a6:ff:9f:9d:e4:a0:de:09:61:d1:b2:98:
96:68:ea:9b:5c:5a:20:55:d2:20:dc:2b:5a:97:71:
de:38:bd:e1:b8:d4:4a:a6:e1:dd:ba:5c:82:fa:3a:
c6:aa:91:ae:f0:9e:9b:2e:c3:e1:6a:ab:a5:8c:78:
40:c1:e5:f1:8e:0e:ee:3f:6b:0f:5e:79:33:4d:4c:
db:76:9e:c4:2c:b6:9c:20:e9:52:fc:dd:9a:8b:0d:
7a:49:64:aa:a9:25:a7:47:aa:c5:6f:ce:f6:2a:02:
c1:9c:bb:c1:b8:8f:07:d7:a0:ef:4e:3a:8f:2e:3f:
f1:79:29:2a:32:b6:0f:92:a5:f0:b3:9e:62:0e:82:
79:da:94:9e:ae:96:21:ab:47:ac:96:7d:d2:96:0f:
bb:ef:bd:98:f9:4a:90:d1:69:7f:08:3c:a5:a7:fb:
ff:a1:53:32:bd:a0:90:7c:5b:35:f0:54:f2:41:26:
47:17:28:72:32:98:53:56:22:4b:f2:24:f3:5c:5a:
3a:f8:38:6e:1b:1c:b3:a8:99:78:b0:30:c7:4d:09:
8d:3b:48:09:fe:63:0d:6e:28:32:eb:2f:f7:eb:da:
ae:53:fa:7a:29:7a:6d:20:15:16:7a:6b:89:78:46:
24:f6:1b:69:2f:6f:41:91:cd:09:fe:cc:a7:5c:f9:
5a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FB:C4:65:D0:83:B3:70:99:4D:BB:8E:22:3B:24:BB:7A:C2:81:3B
X509v3 Authority Key Identifier:
keyid:5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:00:5c:56:73:5f:2b:81:64:d5:24:11:bb:db:f7:27:e8:59:
3d:af:97:51:1a:7c:fa:44:96:3f:e3:40:fc:1f:b4:fa:0b:e4:
22:b9:5e:a6:9a:32:b5:98:70:8b:c2:32:44:82:1c:23:1d:86:
75:8f:4c:55:6d:c2:02:b2:45:b7:dd:56:2b:1b:12:c6:4c:c5:
2c:32:5a:8a:d6:e0:55:ee:4a:d1:9f:1d:3c:52:60:95:5e:7b:
f3:0d:df:e3:aa:c2:25:96:62:f8:0d:5c:76:40:8d:5c:10:7f:
41:3e:78:7a:7f:65:59:39:40:93:75:7c:6f:5a:ee:4a:5b:d7:
98:39:43:22:aa:25:6d:a8:98:33:1e:1b:fd:70:73:c5:a4:35:
32:44:3e:46:91:b9:68:15:ff:6b:28:bb:d4:1c:c6:38:ed:1c:
d3:8f:49:f6:d8:92:05:12:2a:6c:13:aa:ee:28:c2:ff:b7:69:
1b:dc:9b:d0:e7:65:7d:e5:7a:70:92:df:28:1a:ab:fe:eb:22:
eb:3e:4d:c7:51:0d:07:1d:8a:ee:7a:8a:f3:3b:d9:67:02:c6:
12:70:c3:7f:c6:ce:87:1d:67:7d:a4:24:dc:31:71:d5:0d:2f:
85:a0:d0:b6:ec:c6:b4:da:e6:d0:28:bb:80:70:c0:20:ab:85:
a0:f4:f6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:30 2025 by rpki-client