Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
File: XchzCYds7EBPAHv22gQ0wL3GLYs.mft (raw, json)
Hash identifier: /GZnNeBrDRw5IovTklgVXbRLH+mNBwpHDMABbvqn3ig=
Subject key identifier: 90:B3:39:F3:A9:03:B5:C7:5C:2E:B0:5C:B3:15:BB:18:E1:CE:BB:C8
Authority key identifier: 5D:C8:73:09:87:6C:EC:40:4F:00:7B:F6:DA:04:34:C0:BD:C6:2D:8B
Certificate issuer: /CN=5dc87309876cec404f007bf6da0434c0bdc62d8b
Certificate serial: 0196458D9838889541192FE9D7700C2CB5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
Manifest number: 14F3
Signing time: Thu 17 Apr 2025 21:00:29 +0000
Manifest this update: Thu 17 Apr 2025 21:00:29 +0000
Manifest next update: Fri 18 Apr 2025 21:00:29 +0000
Files and hashes: 1: XchzCYds7EBPAHv22gQ0wL3GLYs.crl (hash: IxwPd5wlkjxam5yer+OVoGvISQ1P/RXTGCHZRCmDezc=)
2: jcQt-MOzJfjybIamiUioFB-oBn4.roa (hash: vxzopxc1UXJfcspNz3GsRCac77+K0gwBOQSeqjgarpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:98:38:88:95:41:19:2f:e9:d7:70:0c:2c:b5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc87309876cec404f007bf6da0434c0bdc62d8b
Validity
Not Before: Apr 17 21:00:29 2025 GMT
Not After : Apr 18 21:00:29 2025 GMT
Subject: CN=90b339f3a903b5c75c2eb05cb315bb18e1cebbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:93:6f:85:d9:90:72:84:67:2a:f3:ce:81:ad:
d7:1c:b8:40:67:8c:f1:69:45:1e:32:7b:47:86:6e:
cd:c0:2e:a2:b4:48:10:4c:c2:b3:a2:7f:63:20:f5:
3f:9a:b8:82:4a:1d:f7:e4:36:f8:51:94:f8:72:fe:
0e:3a:42:63:42:eb:30:c2:b2:06:8a:33:a9:0c:13:
7e:75:47:fd:be:84:5c:9b:60:ba:f7:8d:99:2a:ba:
5f:50:f0:2d:4e:e3:dc:b7:17:31:ff:d3:e0:a7:7f:
76:ff:25:77:4d:0a:30:0a:e6:1a:c5:c9:a8:c6:a3:
f0:9e:dc:fd:b8:d6:52:ce:2a:c5:3e:de:31:62:e0:
ba:3c:7b:2d:5c:13:4b:3b:7c:ba:6a:1c:3a:c0:ca:
bd:e1:1f:67:8c:05:bb:d4:ea:05:41:71:ec:ac:2f:
34:ef:fa:57:c2:d6:8b:a9:aa:90:52:81:63:f7:e5:
7c:df:7b:e2:2f:6f:89:c5:26:82:44:51:af:ff:12:
01:dc:ab:1f:74:cf:6b:cf:3b:ff:08:da:79:b3:9d:
44:57:79:fd:bf:2b:8f:df:53:aa:16:43:3e:0e:d8:
60:cb:8c:90:83:b9:bf:26:ac:88:8e:af:cc:8d:64:
0e:78:90:1f:5b:ad:7e:08:01:8d:43:87:f0:e6:3b:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B3:39:F3:A9:03:B5:C7:5C:2E:B0:5C:B3:15:BB:18:E1:CE:BB:C8
X509v3 Authority Key Identifier:
keyid:5D:C8:73:09:87:6C:EC:40:4F:00:7B:F6:DA:04:34:C0:BD:C6:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:96:ff:30:aa:e4:91:3b:d6:4c:45:ec:44:c3:87:0c:76:91:
cf:55:75:70:d5:78:c4:df:29:1b:25:a2:0a:8a:f7:1a:19:55:
43:11:ef:e2:8a:dd:a8:d0:3d:9d:73:79:f5:ae:c3:19:26:fb:
7b:0f:ed:dc:fe:0d:07:41:8a:2b:d0:1a:46:c1:22:26:2c:df:
38:f5:9c:f2:73:80:37:49:f4:e2:08:d7:f3:60:ea:28:2c:39:
b7:2a:d5:a6:f8:a5:cc:91:59:23:73:14:1c:1a:38:3a:27:df:
0d:fa:cd:84:0e:83:06:51:50:19:02:fe:61:aa:ee:aa:e0:22:
e4:da:90:50:9f:df:56:e1:58:5f:4d:23:2c:c3:58:20:a1:de:
19:f5:a9:f7:8f:07:65:c6:c9:e6:86:26:98:52:8f:19:19:02:
33:6a:54:31:74:95:41:6e:4e:b7:38:cc:9b:50:84:dd:e2:5d:
06:d4:96:66:2c:7d:a1:69:80:43:25:92:ac:70:4a:23:ca:d8:
04:1d:8e:f3:90:41:fb:6a:37:20:0e:a2:8a:f6:ee:12:b5:f4:
df:bc:c8:2d:f0:c0:d6:03:1c:c6:19:e6:d5:16:c3:6a:e3:ba:
91:57:63:e4:48:d6:88:b7:3b:dd:de:86:80:93:b8:ac:02:96:
8b:6f:b7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:39:00 2025 by rpki-client