Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
File: XCnLotrPDvn6IgkAMrsVmhCRQPA.mft (raw, json)
Hash identifier: cQr4BpvalSL2D52XIn2klqCm/CD8DZRsUd3KA3B67mw=
Subject key identifier: 89:30:87:FC:B7:8D:25:8F:15:48:9F:D5:2E:57:44:68:DE:3B:9D:AA
Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Certificate serial: 01964A7CFD62F5E6CE1CBCF2A7670E4FC60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 20:00:27 +0000
Manifest this update: Fri 18 Apr 2025 20:00:27 +0000
Manifest next update: Sat 19 Apr 2025 20:00:27 +0000
Files and hashes: 1: XCnLotrPDvn6IgkAMrsVmhCRQPA.crl (hash: VwVebWdC29TrK5fol9mryyyfB1UB2D9ER0QxSkuFurE=)
2: uMKYK0zWnMRt1XBJkaQ1CMnyyVw.roa (hash: yhNmYUr+FS9v4wFEYBgKw1+Munbk5IEg7AdZjbcucQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7c:fd:62:f5:e6:ce:1c:bc:f2:a7:67:0e:4f:c6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Validity
Not Before: Apr 18 20:00:27 2025 GMT
Not After : Apr 19 20:00:27 2025 GMT
Subject: CN=893087fcb78d258f15489fd52e574468de3b9daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:60:c4:bb:51:75:92:96:5f:ee:34:77:d1:
c7:99:17:b8:17:48:a0:e4:a3:d4:29:45:5c:71:03:
78:f2:b7:42:57:56:1c:66:8e:75:6c:ee:08:d0:ec:
e6:55:af:ef:a6:b9:ef:26:9e:1e:a8:52:2b:8a:0b:
d6:a9:dd:9f:b6:32:28:af:9a:55:37:08:b0:9f:4f:
d0:6d:6b:f3:8a:69:82:ff:15:95:cc:6a:2d:78:d0:
b7:59:d2:fd:78:f1:e4:c3:1e:4b:00:54:56:a1:47:
b1:b9:1d:c5:9c:37:db:cd:8d:5a:9f:ae:b4:a1:a1:
50:83:e2:2b:be:d1:62:52:0a:34:96:72:77:ce:eb:
69:e1:f7:c3:b2:d9:86:19:04:91:87:2f:d5:ff:2c:
48:9d:b7:5e:03:4c:05:6d:53:fe:ab:25:94:18:ac:
0b:72:2c:de:23:57:bc:7b:19:c2:8a:73:ae:85:19:
c4:f3:18:86:aa:15:dc:31:97:0d:52:58:5d:9e:03:
9e:52:67:5e:5b:6d:45:af:b1:80:b3:f2:02:11:af:
1f:75:cb:c9:a5:8a:ab:42:76:db:92:55:d8:06:3c:
8e:34:7e:f4:96:f9:ee:52:3c:52:50:5b:8f:20:5f:
a3:37:16:f9:c6:0e:37:aa:17:b3:a1:c3:e9:99:77:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:30:87:FC:B7:8D:25:8F:15:48:9F:D5:2E:57:44:68:DE:3B:9D:AA
X509v3 Authority Key Identifier:
keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:d3:9c:84:76:71:04:73:85:19:76:2b:68:0d:30:58:1d:db:
32:84:07:34:d8:a5:3c:4a:7a:6c:84:a2:92:1a:ee:87:56:d9:
71:9d:7f:33:1f:9e:cf:cd:84:62:86:d6:ab:ba:13:c1:42:14:
28:b2:7f:8f:8e:75:e8:17:49:01:75:bf:dc:2b:ef:78:08:25:
c3:77:e1:41:55:61:d0:bb:88:cc:7a:b1:02:16:f3:08:0b:42:
31:81:7e:4e:39:d8:04:f8:91:65:78:83:14:12:75:9d:05:20:
b6:56:84:35:c9:d9:18:29:a5:d1:4f:74:8e:b0:4e:d9:ce:18:
fc:3e:da:a4:0a:51:94:c9:2a:ad:f6:e2:a1:17:c1:5a:75:9f:
ad:f8:09:7a:ef:d1:ee:03:c6:40:a5:67:d2:75:63:33:3d:4e:
fa:e2:26:eb:28:a1:ff:d9:37:69:8f:5a:d1:7e:ff:08:cf:35:
05:d5:41:7d:d2:a5:cf:63:d3:68:22:d7:e8:64:63:e3:b2:0e:
f8:b5:ee:c6:e8:65:fc:94:9a:4f:04:f4:55:1e:8e:0f:91:cf:
0b:97:9f:ed:cb:db:ad:e4:4c:52:6f:54:57:48:e9:10:36:54:
f5:9a:5e:6c:c9:8b:fa:1c:e2:8f:d3:07:d0:97:0f:4b:2d:74:
dd:53:a3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:35:49 2025 by rpki-client