Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
File: XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft (raw, json)
Hash identifier: IyB/Ift0/2QDqibJtpjIcbBWPnzHBwei/iuHyP7yDEg=
Subject key identifier: 20:DD:BD:2C:EC:19:63:DE:1F:6D:3B:75:6A:FF:04:A4:92:55:12:02
Authority key identifier: 5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF
Certificate issuer: /CN=5e4098f206850488b72cdde8387c3181c63f8cdf
Certificate serial: 01963DD3E8B3076930ABDEAB562238AEBE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
Manifest number: 02A2
Signing time: Wed 16 Apr 2025 09:00:19 +0000
Manifest this update: Wed 16 Apr 2025 09:00:19 +0000
Manifest next update: Thu 17 Apr 2025 09:00:19 +0000
Files and hashes: 1: XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl (hash: EA1uu0LmeF3JeKBLwqX8k8XnwFAEzPlbmjLZrI5A3+k=)
2: Zalmb79lgnJ8ZqrgJMNHmIB0_a8.roa (hash: qT5QBRK21+1uxjdCx9gW03qYws/IDIrgYu8jrzg9fD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:d3:e8:b3:07:69:30:ab:de:ab:56:22:38:ae:be:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4098f206850488b72cdde8387c3181c63f8cdf
Validity
Not Before: Apr 16 09:00:19 2025 GMT
Not After : Apr 17 09:00:19 2025 GMT
Subject: CN=20ddbd2cec1963de1f6d3b756aff04a492551202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:04:16:e9:33:f9:71:e6:20:d8:07:f0:87:
d0:c7:0b:e3:9a:c2:fd:a8:36:9c:d2:bb:2f:22:b8:
99:94:21:d4:e0:65:c3:eb:e5:2b:a2:7e:78:cf:b4:
fe:7e:c3:ca:46:12:e6:df:b4:e7:3a:ba:bc:24:fe:
84:ed:99:1b:f8:d7:86:60:5a:57:6c:e7:ef:8f:6a:
0a:49:c0:de:d2:60:6b:d5:db:74:a2:d4:b6:12:09:
9a:89:44:05:3e:f5:6e:45:59:80:4f:6d:a9:6b:9b:
24:d4:e2:78:3b:32:97:65:39:a7:49:7c:7c:cb:57:
31:ed:10:88:94:49:b1:a2:53:46:e3:8f:3c:50:2d:
7c:05:c4:ce:ce:c4:77:12:a8:94:d7:77:d1:a8:a7:
af:06:49:4a:bd:11:f5:bc:b8:85:34:b9:b2:7c:a8:
f6:7e:fe:e9:e7:08:a1:c3:bf:c8:71:37:0f:82:6a:
32:df:11:78:00:eb:c9:73:c3:c1:bf:aa:e2:38:a6:
4e:7c:1d:0c:05:c4:b9:5e:e4:47:86:7d:59:4c:93:
10:38:45:d1:95:b6:a3:09:aa:bf:6c:19:3d:28:73:
84:f5:74:b1:a9:61:c6:1a:a2:33:33:d6:6a:c2:88:
56:e3:d1:12:79:00:16:24:bf:5c:20:52:86:4c:07:
b8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DD:BD:2C:EC:19:63:DE:1F:6D:3B:75:6A:FF:04:A4:92:55:12:02
X509v3 Authority Key Identifier:
keyid:5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:22:2d:45:d6:4d:80:0e:4e:40:83:df:47:6e:47:54:60:2e:
ad:ad:01:8b:00:86:f5:a4:a5:fc:52:24:f3:f2:c3:e6:d8:12:
7a:c6:44:1e:98:83:40:fe:90:8d:5b:df:69:81:2a:2d:60:01:
98:5f:bf:38:06:9c:d9:53:be:58:4f:2c:92:19:1d:5a:24:f6:
36:4a:04:f6:d9:46:57:7a:c8:87:2e:18:38:69:b3:96:b4:e1:
91:1d:fd:04:a5:ce:90:56:b7:2a:b0:ff:b5:fb:e8:a3:e7:e1:
4a:7c:aa:b9:61:ab:9e:54:14:0b:c5:72:f2:f9:b8:ab:86:cf:
3b:9e:a8:f4:dc:d4:12:a6:e2:4b:e1:1c:d9:b6:e3:4d:30:0a:
3c:7e:07:4b:81:02:e1:e4:fe:34:e7:e5:17:e0:b4:3f:0b:22:
a8:b1:57:df:19:f8:67:25:d2:cb:48:13:5c:03:a3:4f:73:87:
6e:6f:0e:a2:a7:19:34:8a:09:41:5b:96:30:1d:93:eb:16:89:
f5:75:52:be:73:fe:f5:d6:5f:a5:7b:85:9f:43:c4:07:ce:db:
58:28:4d:e8:6e:5b:a3:ad:e7:77:ec:59:c0:b0:2a:bb:58:11:
dd:5f:15:e5:76:f4:c2:bc:37:7a:53:83:b9:a5:37:a1:0f:05:
10:a4:b9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:56:51 2025 by rpki-client