
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
File: XGsMABqZq2KW4kIXO_fn_c8DwBk.mft (raw, json)
Hash identifier: ZDGOERYKM5pjZjDgMgJCO/QteK9f87XgVBfuyQMJmPw=
Subject key identifier: 44:7F:C6:A1:FF:A6:40:0F:BA:49:AA:27:23:D0:DF:EE:44:2C:2A:D2
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 01962B97A57790729111DF266DB6DA2BCA49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
Manifest number: 0D5E
Signing time: Sat 12 Apr 2025 20:01:20 +0000
Manifest this update: Sat 12 Apr 2025 20:01:20 +0000
Manifest next update: Sun 13 Apr 2025 20:01:20 +0000
Files and hashes: 1: IfVj5aDzwI_pIfsi19tG8SlhNUU.roa (hash: 6w13xfZ6L14mhKJP/CtzgVaPjgCMlMEt5Ve3cKKBCSc=)
2: LvwvNGAUbfT2Bt0tY-karZ_wWIo.roa (hash: kCYXazlMebMuzkkP9xGRP+Rl8qwP4Xflsdq3dLyq/Fw=)
3: LwM623k2kR7q91QrhiqdXUwBs7k.roa (hash: RKu1QnAXYUI9f91c+0fb1S3SkGsEsHeC3eprd1gKm7I=)
4: Qd9wy5ftMyh8sTeaWrLO_wpaFTE.roa (hash: oY8TR8QpN82rkBsByfJvFbSYDVr2vD7taUzMtyjJcBc=)
5: XGsMABqZq2KW4kIXO_fn_c8DwBk.crl (hash: oYpKNfXwF+VL8KOFa9Mx4/ciCoRAy8tV5KdGlklS/0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:97:a5:77:90:72:91:11:df:26:6d:b6:da:2b:ca:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Apr 12 20:01:20 2025 GMT
Not After : Apr 13 20:01:20 2025 GMT
Subject: CN=447fc6a1ffa6400fba49aa2723d0dfee442c2ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:0c:f5:3a:19:1c:6e:9a:34:10:33:98:42:
ff:38:49:30:2f:63:4b:63:93:7c:30:a4:96:a1:27:
ff:3f:db:75:d4:15:dd:48:70:3f:36:ec:0d:ce:07:
d3:e5:74:f6:38:7b:f9:87:c4:99:5b:ae:ca:9f:08:
05:ab:f8:e4:0f:e6:56:65:a9:49:f5:ff:06:4f:65:
7f:20:05:65:75:2b:0a:62:a2:0f:c9:7e:e4:e1:ec:
b1:6e:8a:d6:85:d5:03:53:ce:3f:df:a4:d5:75:b9:
0e:f1:a1:ba:d8:16:d3:07:1f:c9:17:a6:36:84:c5:
04:e5:90:74:c7:39:13:93:2e:d2:8b:d8:c2:73:bf:
3c:c2:d7:78:20:e5:b9:49:eb:c6:46:64:b1:ba:98:
16:29:3c:f5:4e:a1:da:57:99:c6:93:d3:0c:d2:e9:
b4:d0:17:11:70:37:a4:5f:7e:0c:8c:fc:a2:c1:aa:
5b:8e:5e:59:7d:06:3c:0b:08:a2:d5:23:47:ad:aa:
1e:b9:77:68:20:72:52:68:0d:34:d4:ab:ba:c2:b8:
f1:ce:26:b0:c2:33:2b:c6:5d:21:eb:b5:26:8a:82:
2f:e3:1c:d6:5b:d0:4d:59:21:90:9f:8f:1a:d8:e3:
fc:c5:71:5c:24:99:e5:68:32:3f:e1:f6:55:4b:55:
e6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7F:C6:A1:FF:A6:40:0F:BA:49:AA:27:23:D0:DF:EE:44:2C:2A:D2
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d1:42:63:6a:a5:7c:9c:34:da:6c:58:ed:21:d5:cd:74:a1:
b9:21:a9:0e:e5:9e:ef:96:f1:f7:a8:26:c0:c2:07:e1:0d:65:
17:72:62:3a:c5:5a:7b:57:df:71:87:00:19:1e:6a:e5:dc:b2:
2e:4a:6b:56:c7:98:58:71:9c:1d:07:46:d7:c0:31:b7:ec:7c:
95:6a:2f:6b:c6:37:5f:49:a9:94:f6:eb:94:68:e9:43:48:41:
18:a0:17:3a:c1:ed:f2:7b:cb:6a:ec:f3:10:2a:7b:be:fb:d2:
27:78:d1:f1:1e:5f:de:6d:3c:0c:e4:68:e9:5f:63:25:b5:4c:
a2:11:e5:4d:90:6f:c8:69:30:22:54:1f:c7:11:22:06:86:35:
70:d0:03:c7:fd:5a:7c:59:08:6b:3a:38:4d:1c:4c:4f:54:4c:
3f:1f:3f:cf:7d:f6:4f:03:e9:78:8d:5b:b8:9b:bc:ed:a5:8f:
4a:8f:bd:9e:14:93:4b:65:8f:e1:4f:53:ce:cb:89:69:41:19:
c8:5e:f6:23:a3:b8:9a:27:02:95:8a:c1:70:1c:c0:fd:8d:45:
13:90:dd:92:a9:de:7e:c8:ff:64:91:52:a4:c8:9d:1a:58:26:
49:c8:01:d2:30:d3:5c:6e:df:ca:de:e9:c1:7d:ba:7e:c9:d3:
46:c7:bd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:07:31 2025 by rpki-client