Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
File: XCnLotrPDvn6IgkAMrsVmhCRQPA.mft (raw, json)
Hash identifier: oRip0vdqqt1FDFGUVgCvfno+WSlMyrMAZvVdN+l6/3Q=
Subject key identifier: D1:04:49:1B:79:3B:45:DC:E2:BD:A7:B3:59:CA:3D:80:55:64:E7:51
Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Certificate serial: 01958F2A4996D0F24ED7595EEAC530FF6D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
Manifest number: 1496
Signing time: Thu 13 Mar 2025 11:01:08 +0000
Manifest this update: Thu 13 Mar 2025 11:01:08 +0000
Manifest next update: Fri 14 Mar 2025 11:01:08 +0000
Files and hashes: 1: XCnLotrPDvn6IgkAMrsVmhCRQPA.crl (hash: 4+Vi1g+PbsvoOZMVdRW1PZXocpuhYh7/gJF69SZLxrw=)
2: uMKYK0zWnMRt1XBJkaQ1CMnyyVw.roa (hash: yhNmYUr+FS9v4wFEYBgKw1+Munbk5IEg7AdZjbcucQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:49:96:d0:f2:4e:d7:59:5e:ea:c5:30:ff:6d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Validity
Not Before: Mar 13 11:01:08 2025 GMT
Not After : Mar 14 11:01:08 2025 GMT
Subject: CN=d104491b793b45dce2bda7b359ca3d805564e751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:92:28:45:b9:19:fb:6b:5e:b0:ea:fb:25:54:
33:70:79:13:92:d7:83:d2:d2:8f:df:5a:bd:2e:d8:
4e:27:63:2f:cf:71:bb:1c:56:36:6e:fa:8e:1a:28:
8a:87:79:3e:c8:cc:d6:a5:ce:0a:19:4d:4c:68:5f:
71:26:48:09:b3:82:ed:60:1a:f8:be:f1:c8:5c:0c:
bf:6a:0d:6c:98:41:ce:41:0f:b9:e8:27:45:e8:04:
06:7a:ed:b8:9e:38:ce:93:c0:64:09:83:08:49:ce:
69:e1:ca:d0:49:e0:25:0d:a6:97:1e:a8:0f:c4:6b:
76:ac:74:d6:7b:9d:56:ed:75:bf:a2:b8:b5:d9:07:
3f:30:0c:61:08:7d:4b:11:58:37:a4:8b:6c:bb:98:
03:f1:a3:9a:a3:d7:79:07:b9:9d:80:95:fd:e0:ac:
6c:c1:e0:f6:62:38:52:3c:af:7a:06:e1:1f:ab:0c:
16:92:a1:5f:54:5e:3a:60:72:06:6c:39:c1:48:f1:
af:19:88:c8:1d:f3:2b:4d:57:78:ff:97:ab:81:77:
16:8d:c6:6c:da:4b:d4:c2:8a:23:3f:e4:49:f1:48:
ac:43:b4:67:74:40:a7:aa:02:9a:a1:74:c8:3d:c4:
68:b6:d9:f4:e1:0c:a2:ce:5f:fc:ae:eb:3f:83:94:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:04:49:1B:79:3B:45:DC:E2:BD:A7:B3:59:CA:3D:80:55:64:E7:51
X509v3 Authority Key Identifier:
keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5b:dc:44:88:e7:a4:12:11:24:72:9f:61:16:ce:92:d1:7e:
3e:22:40:86:bc:0a:ff:05:39:b0:33:63:64:b2:d2:5b:95:08:
ab:ae:0e:42:d3:84:69:7f:e1:8f:3e:ff:3b:32:ac:3d:fe:75:
70:3e:00:98:6a:19:4b:ef:0e:9c:2c:bf:04:f6:0f:5b:f7:09:
1e:32:39:c7:91:d1:75:51:cc:07:91:3b:8a:44:26:39:fa:a3:
f1:56:6d:f2:21:7c:ae:76:e0:bd:ee:92:96:61:b8:d8:4b:9b:
82:36:a9:b3:93:25:cd:1a:66:3c:80:79:b9:a1:53:47:bf:70:
bc:ec:23:4b:75:62:6b:85:ea:51:74:6a:13:4f:7f:04:30:b7:
72:b1:1c:f5:6f:9c:4f:f6:45:30:9a:85:c3:89:8d:2c:f8:8b:
bc:bd:dc:01:24:e3:b9:8f:49:f8:76:5a:9d:2e:3f:90:7a:cf:
9e:1f:3e:e6:2b:f6:e9:d2:18:14:e0:d0:23:d9:04:93:78:e5:
81:c7:03:62:fa:82:e4:9e:a2:e6:d4:a1:b8:fc:63:21:5d:ff:
d5:f7:0e:62:45:3c:c2:2d:aa:a1:24:e8:c3:63:3f:a9:03:ca:
0f:d1:b3:55:65:39:03:91:25:bd:5a:94:13:fd:85:48:b1:d6:
41:b7:aa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:19 2025 by rpki-client