Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
File: Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft (raw, json)
Hash identifier: BJSoJQyib0n6aRnPd/xumYQNHmirQf3XLgVY5r72VF4=
Subject key identifier: 9B:FD:37:0C:C6:AF:05:11:63:1B:11:E1:8B:88:2F:96:0A:09:AB:FF
Authority key identifier: 5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
Certificate issuer: /CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Certificate serial: 0196319973BB73A585D759459FD7FBAF9530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
Manifest number: 14EE
Signing time: Mon 14 Apr 2025 00:01:02 +0000
Manifest this update: Mon 14 Apr 2025 00:01:02 +0000
Manifest next update: Tue 15 Apr 2025 00:01:02 +0000
Files and hashes: 1: Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl (hash: tMT7cAUMNIvVRtX/c0JmF7zjTnAUcewnSBB4EC3e90E=)
2: vK5h-o0ZiTjYgr7TtTUx7l9N3_U.roa (hash: GzoVl428O56Z6DSR6RbFH+KhA2k4PkQR1ShOytMGxs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:31:99:73:bb:73:a5:85:d7:59:45:9f:d7:fb:af:95:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Validity
Not Before: Apr 14 00:01:02 2025 GMT
Not After : Apr 15 00:01:02 2025 GMT
Subject: CN=9bfd370cc6af0511631b11e18b882f960a09abff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:d0:28:a3:f8:86:fe:fd:79:ee:ff:90:19:
73:1a:bd:7f:99:4e:a3:36:02:0b:ad:4b:36:1b:17:
59:d0:f8:28:06:ed:6c:a6:d4:ab:0b:1d:0d:c9:95:
71:07:4b:7f:1d:f4:d1:27:b0:07:65:23:33:c6:23:
4b:13:96:12:4a:7f:14:1c:54:bf:6a:8b:c8:c5:f2:
2a:fd:ec:42:40:25:40:57:ee:20:22:77:a8:b2:a9:
f7:16:fd:dd:55:b1:91:4c:e6:76:db:d2:82:af:15:
d6:89:57:83:72:f5:eb:e2:1f:7c:ea:83:12:12:34:
e3:f0:e7:66:9f:8b:a1:99:58:73:c5:36:ce:ef:1a:
d4:7c:1e:b8:10:28:be:f6:15:a3:66:7a:f4:38:da:
a2:00:85:5e:67:e8:77:81:12:af:c5:07:39:6f:12:
ef:96:ce:6c:bd:70:f5:de:77:85:5f:b0:cb:47:ed:
16:59:f1:e3:4d:04:08:82:8f:86:8d:99:3f:01:39:
44:fc:13:68:0f:18:29:ce:d9:69:4c:91:89:f1:05:
11:8d:d7:af:2b:5b:2f:cb:28:f3:e7:cf:e0:cf:ce:
a1:dc:a2:d3:fe:be:23:e7:66:8b:ea:d4:93:91:28:
a3:60:e6:b5:2c:17:42:3d:75:b3:5e:24:27:68:93:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FD:37:0C:C6:AF:05:11:63:1B:11:E1:8B:88:2F:96:0A:09:AB:FF
X509v3 Authority Key Identifier:
keyid:5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:5c:3c:e8:63:7e:b9:9e:af:d0:0f:21:76:0e:b3:42:cd:0f:
fa:a6:2c:4b:83:42:8c:a0:97:5e:09:b9:68:f0:57:0e:dc:e4:
61:49:46:99:43:88:d3:1d:f3:5b:89:58:f7:53:4c:5d:40:df:
bf:ba:9d:d1:99:8c:16:aa:3f:f8:ec:e8:57:62:b5:f6:71:a4:
dc:e0:0f:13:42:b9:32:c4:6a:60:a8:07:17:10:e1:37:5a:28:
af:d8:b5:68:a0:51:e7:fc:19:de:ee:b2:6d:0d:ca:03:3a:5f:
9d:66:0a:06:1a:a6:46:62:83:7b:ba:3e:4a:ea:27:0d:9f:e4:
57:bc:4c:06:93:64:97:00:df:ca:19:63:06:7d:26:bf:30:b4:
99:f5:9c:50:b8:46:58:59:a6:21:f8:31:f7:3f:70:c0:5e:16:
31:ee:91:0c:6d:29:f0:b9:8e:d0:ff:d1:3b:8c:e4:11:c1:85:
0a:b8:d6:38:b8:8e:93:bd:30:b6:56:2b:0d:67:5e:58:c1:40:
3a:71:07:ee:32:b0:4e:36:62:e2:fc:6c:1f:ac:b3:b8:96:7e:
58:73:d5:18:cb:98:af:07:a0:9e:f2:49:d2:56:3e:57:6a:fb:
26:05:0a:26:0c:63:6b:dd:58:94:f5:03:1b:b0:74:ba:ed:af:
c8:66:f1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 08:35:44 2025 by rpki-client