Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
File: xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft (raw, json)
Hash identifier: ejLd+1JXGjuwxa1Jq2D6OzlGV/45AzHwEMpxG/2GExY=
Subject key identifier: 5A:A6:5A:42:D2:B6:F5:1B:65:8D:F1:38:9E:11:8E:AF:40:91:0B:0E
Authority key identifier: C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB
Certificate issuer: /CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
Certificate serial: 01958F2A9ACAF8EAB5B035C6DA10B184C58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
Manifest number: 149A
Signing time: Thu 13 Mar 2025 11:01:28 +0000
Manifest this update: Thu 13 Mar 2025 11:01:28 +0000
Manifest next update: Fri 14 Mar 2025 11:01:28 +0000
Files and hashes: 1: OvOkWatHrFgmj60O6Cjij4Ojo9Q.roa (hash: vl4YZSTqxlbqeunj3GnUeIqLip/YzNXqb6yP9ApEp70=)
2: W_HszaJ5NOP0MnKr_gX_tIwwzrM.roa (hash: KBxuRHIVq96Z+ZSk6DOhyPHLuGESXEU5ZMYMHCDEzBE=)
3: xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl (hash: 0KnFfpeJJk73dy/FqyjHpx8Dh+OSgGGNv9RVM2TrqNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:9a:ca:f8:ea:b5:b0:35:c6:da:10:b1:84:c5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
Validity
Not Before: Mar 13 11:01:28 2025 GMT
Not After : Mar 14 11:01:28 2025 GMT
Subject: CN=5aa65a42d2b6f51b658df1389e118eaf40910b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ec:80:2e:5b:b9:dd:cf:c9:ad:2b:8f:9e:d1:
95:e6:a9:5d:f1:b2:75:01:4a:c6:94:ec:c4:4b:3a:
23:dd:91:f6:55:2b:a2:4a:16:7f:cd:3b:d4:db:ea:
2d:a8:9a:f1:c3:8b:72:dc:36:4c:c4:61:f9:c5:f0:
4f:aa:13:0a:4d:90:67:9e:fe:a2:71:b9:c9:d4:81:
8e:c6:70:b0:4d:02:f4:dc:69:20:35:09:8e:52:07:
6b:34:68:f9:42:6a:74:01:97:a2:a4:97:35:f1:1c:
5e:68:e0:7d:fb:4d:e8:b2:7b:a2:1d:e4:16:24:e1:
7e:cc:62:e4:18:a9:fb:8a:f7:cf:5f:56:fc:f9:12:
1d:a4:bd:28:9a:70:c6:76:8b:79:8f:9e:18:33:6b:
7d:24:5e:b0:cb:fd:02:3a:58:da:7d:2d:69:48:8b:
9c:38:ad:92:17:4d:70:4a:6d:b6:2f:26:85:15:70:
e6:72:b1:38:f5:70:8c:1d:0a:43:de:01:97:8f:bd:
2e:65:4d:f3:9d:36:f0:b2:e3:29:13:98:38:0a:ee:
09:63:93:55:c8:d2:27:dc:16:3a:ea:1c:7f:3e:a6:
ad:fc:6b:57:b9:bc:8e:a0:fa:f0:ec:a2:ed:02:d3:
c5:fe:6f:47:de:4c:68:a0:fc:f6:06:7f:c2:5a:e2:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A6:5A:42:D2:B6:F5:1B:65:8D:F1:38:9E:11:8E:AF:40:91:0B:0E
X509v3 Authority Key Identifier:
keyid:C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d5:84:06:44:f7:5b:6a:3e:e4:22:e3:51:35:80:ce:8d:e6:
7a:99:4d:d3:c0:2b:b0:f9:a8:a2:3c:b3:84:2d:25:67:de:c1:
e0:2a:7e:bc:f5:cc:e1:e8:dd:82:46:19:05:79:70:7a:92:7e:
e4:38:b5:58:ea:fa:61:ee:07:e5:e3:27:b3:ac:e0:93:de:fb:
8e:a7:2f:4e:42:13:c7:a8:c9:eb:5f:e7:1c:54:69:3e:4c:f7:
da:a1:eb:d2:73:f3:ea:b0:d0:3a:4d:d3:7b:b5:62:46:28:f7:
15:0c:61:6c:b0:54:da:14:ad:32:31:4b:a0:f8:d2:eb:63:61:
8c:96:9c:6f:38:f5:d3:6b:7a:7e:f4:22:94:32:0b:e9:f9:db:
3e:bd:c6:ad:af:3f:02:98:b3:f7:0b:d9:d4:cf:2a:bb:fa:b7:
ad:34:e4:5d:29:bc:4a:45:f1:65:28:e2:93:8e:62:e8:d8:3d:
30:f3:0c:7d:91:89:8f:b6:7e:d5:cd:df:1f:51:f5:26:93:d6:
c2:d9:42:4e:47:60:c0:39:09:84:41:c3:5e:30:c5:73:c7:ed:
2e:e4:f5:b1:8c:34:6d:05:53:5c:92:fb:5b:cb:0f:79:c4:d8:
51:cd:75:12:3a:5f:e1:f7:ec:85:31:22:16:a3:e0:c4:79:80:
31:a1:f3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:50:18 2025 by rpki-client