Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json)
Hash identifier: rBVzzRZHOnIZChiwESeNJnzjYYPgoFXU/9t5xwlg5OY=
Subject key identifier: 12:0A:EF:43:6B:92:E3:3B:F3:77:D0:B5:A9:7D:BE:AC:B5:F5:A4:41
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 01965BA7B0CF3B89A97BC8F32AB0190398A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
Manifest number: 0CC2
Signing time: Tue 22 Apr 2025 04:00:38 +0000
Manifest this update: Tue 22 Apr 2025 04:00:38 +0000
Manifest next update: Wed 23 Apr 2025 04:00:38 +0000
Files and hashes: 1: AJZHmYeOjA6WzhCmkrG9-Q9R6e0.roa (hash: 2w9YT9FL9nWS9KMiSVT8Wf4Dme3XTUtS7KQ1r9kXdzY=)
2: IrihvyoC5WVtLyMsMa-SiimzVD4.roa (hash: jGXp7eSTl1p8h9SmYiq1Qn2/jPZ9ZUDFjn3K5+ZYCZI=)
3: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: R9mWontJC6kE54D80lNlZXSsZSID8/mzXy0inly8cPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:b0:cf:3b:89:a9:7b:c8:f3:2a:b0:19:03:98:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Apr 22 04:00:38 2025 GMT
Not After : Apr 23 04:00:38 2025 GMT
Subject: CN=120aef436b92e33bf377d0b5a97dbeacb5f5a441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f6:e7:29:8b:6e:24:bf:df:0f:9f:4e:11:12:
0b:b8:9f:32:72:ec:29:81:47:39:c9:4e:4c:84:1d:
77:ce:f2:76:5f:c1:db:2d:bb:ec:38:97:eb:2b:5a:
fd:3b:34:29:09:3a:e9:cb:66:ec:e9:8d:a7:d2:9d:
0c:ee:cf:98:f1:47:8a:a3:ad:eb:7d:83:33:a0:43:
3c:59:b8:19:d4:ed:08:cf:9f:9f:8a:fc:2d:78:90:
9b:0f:54:4e:75:86:16:a4:cb:86:c9:6f:ab:12:bf:
00:28:2f:ab:30:1e:0c:02:0d:45:18:db:aa:ae:af:
7d:f0:b6:f6:6d:35:06:b7:ac:b6:64:5f:84:1c:fe:
d7:7e:e8:76:f3:2f:5e:f9:9a:e2:f5:bd:b3:4c:3e:
ca:5e:99:c7:43:76:10:21:b1:26:ad:eb:a5:a2:65:
ce:df:0b:44:5a:7c:92:2a:49:3b:6b:d6:80:29:bc:
fc:d0:c0:2c:de:78:b2:2d:49:ac:2f:57:fe:fa:7a:
57:e8:49:95:c3:f9:89:e1:2f:fd:2f:81:94:e4:30:
ca:25:04:48:1a:2e:e9:3d:48:34:04:c1:52:5d:3c:
c0:ea:2a:34:20:f7:ac:08:12:64:9e:31:73:d6:cc:
7f:47:84:e2:2d:58:60:bb:27:5c:87:82:9e:1f:a3:
7d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0A:EF:43:6B:92:E3:3B:F3:77:D0:B5:A9:7D:BE:AC:B5:F5:A4:41
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:28:0d:36:bd:66:b4:c6:80:eb:87:dc:ad:d3:b3:c8:75:46:
f9:f0:f2:28:ef:bf:71:ed:0b:64:97:bb:3d:10:7e:be:8b:f1:
5e:7f:8c:7b:61:cc:d0:60:64:32:0d:64:77:79:3e:65:8a:9f:
93:86:a5:95:69:f5:d5:0d:87:d1:34:ee:ed:40:ad:0b:00:a1:
a4:cb:98:1e:a2:02:2e:e7:dd:f1:dd:a5:fd:fd:f4:fa:29:1a:
54:b9:6f:b7:f7:e5:f0:f9:7e:a5:d6:86:c8:05:a2:e0:0e:2f:
5c:f4:1d:69:1e:ee:41:5e:ca:c1:50:f4:39:4c:c4:38:77:b7:
1d:de:0d:98:d6:49:37:6f:a9:ea:5c:57:7d:40:4e:53:c9:36:
00:c2:66:37:2b:ab:16:39:e8:ca:d5:2d:0f:01:33:46:64:5b:
ae:7e:21:a0:44:2f:42:fd:52:b1:86:f4:6f:ea:ed:1a:60:05:
39:58:6a:25:18:54:7d:84:0a:94:8b:a9:a1:d8:3f:66:b4:3d:
a5:a2:9b:be:2a:5e:64:45:63:f2:d2:40:69:bc:66:6f:2c:bd:
ca:f4:38:c9:86:59:95:51:08:98:05:8e:56:12:c6:0b:bd:06:
58:d7:fb:84:cc:14:b2:1d:f8:cc:f6:5a:b1:81:11:b8:dc:36:
37:1f:3c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:32:27 2025 by rpki-client