Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
File: xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft (raw, json)
Hash identifier: PP70V1zDQOEvXwKf32D+GL/s0aMIE6FpbjdzFBTwtdE=
Subject key identifier: 63:CD:81:34:C5:D7:C1:A6:21:81:FB:F0:4A:94:84:85:B2:21:15:10
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial: 01962BCE68CB12AE6CF33903275F3E349E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
Manifest number: 058B
Signing time: Sat 12 Apr 2025 21:01:09 +0000
Manifest this update: Sat 12 Apr 2025 21:01:09 +0000
Manifest next update: Sun 13 Apr 2025 21:01:09 +0000
Files and hashes: 1: Cj_iWDZ0D1TK46uScrNJsyJfZ60.roa (hash: 2EItGET7KN5xYUnaftxX5tZU9l5ZOP9oj5BYiCLbSjk=)
2: TX8cnXXbIgaO3aE68x88MMtMTTI.roa (hash: FeZgp0BLqJdm0jiS+/GIZyqTIXPtIBPoCgnCgn78SEQ=)
3: xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl (hash: zalQDDiY1MpAja+dpXXEGKJ7XB3prc7E2fWmRDSS6lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:ce:68:cb:12:ae:6c:f3:39:03:27:5f:3e:34:9e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
Validity
Not Before: Apr 12 21:01:09 2025 GMT
Not After : Apr 13 21:01:09 2025 GMT
Subject: CN=63cd8134c5d7c1a62181fbf04a948485b2211510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5a:15:8b:2d:41:2f:1b:2b:27:88:15:19:88:
f8:b8:db:69:01:b1:a4:2a:71:64:c3:3e:35:0a:43:
78:be:63:6d:a0:d3:6e:ad:58:19:c5:75:11:4e:2b:
7d:ee:aa:8e:20:67:0d:57:4c:9d:fc:5f:bd:f4:77:
76:b8:8d:36:17:92:1f:57:f9:21:07:d4:df:2f:ae:
eb:27:48:1c:79:01:44:72:0c:8e:3b:9f:66:35:e1:
8d:b6:ec:56:df:45:ac:35:51:73:e8:bb:8c:6b:d1:
e0:f1:58:81:3a:dc:f3:47:14:dd:03:45:dd:cc:59:
82:f2:85:b7:0e:94:29:de:e0:77:11:90:9f:7b:e3:
d8:e6:c9:dd:76:f9:cd:4f:d3:b8:82:8a:1b:4f:e7:
f8:08:3e:4e:31:ac:2f:54:4f:f3:78:3d:a2:22:44:
3d:22:a5:dd:6a:e5:25:d3:a7:5e:d2:5f:8e:44:44:
83:fb:95:2d:63:03:a2:f4:09:af:d9:4e:cd:ec:47:
c8:d7:53:3c:54:24:b8:8b:2c:76:ea:61:11:2a:3d:
b4:53:8d:a5:e3:8e:08:22:68:7d:1b:9e:0d:40:e6:
49:88:5e:64:4b:83:be:b5:54:bd:76:66:4f:71:d5:
b9:27:8e:04:7e:96:ff:4d:2a:7f:1f:ae:ff:05:c1:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CD:81:34:C5:D7:C1:A6:21:81:FB:F0:4A:94:84:85:B2:21:15:10
X509v3 Authority Key Identifier:
keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7c:52:56:55:37:ab:35:32:72:d9:d4:da:fb:9a:79:54:aa:
41:e7:fa:a7:af:b3:4f:fb:f2:5f:ea:af:7a:a9:9e:71:e9:81:
d0:78:ff:88:5d:b6:4a:b9:77:37:3a:8f:d8:05:85:35:2b:b3:
31:ed:91:71:b5:37:cc:63:78:37:fc:09:2c:ef:b8:34:d3:c7:
14:7d:9b:f2:23:d4:f4:99:4f:5f:4e:9c:ff:87:25:a2:7e:83:
2b:5f:20:a1:f8:94:52:9d:05:b1:90:1c:1e:e6:b5:24:af:ab:
6e:eb:8c:bc:f5:5b:04:b7:a0:30:d5:de:ff:2d:47:6f:3f:e1:
b3:55:74:d3:60:15:d9:e7:7f:01:48:0b:17:e4:97:0e:3b:7e:
77:64:85:7e:32:c3:b5:35:95:b6:f4:bf:ab:a9:c3:0e:df:b1:
18:96:5f:94:45:68:ea:39:df:7e:af:8e:62:12:02:23:b5:f9:
2b:f2:9b:c0:88:9f:97:7d:fc:ce:58:e4:96:9e:5b:ab:ec:cb:
2b:3c:28:1e:e2:06:a6:f5:b7:25:ce:aa:50:25:1a:a1:fe:92:
6d:4f:ff:19:63:9e:24:61:fd:71:79:d4:8f:29:24:22:ab:52:
88:e1:79:34:b5:27:ae:5f:90:06:c9:ff:68:67:f1:20:0e:77:
8e:ac:52:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:53:07 2025 by rpki-client