Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
File: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft (raw, json)
Hash identifier: 9WQEounQTQrC2gpOE8ylP4NHd3ePgf/imLlzcKGvj44=
Subject key identifier: 10:3A:E0:79:9C:46:0F:FE:ED:DC:34:08:22:86:E1:76:9E:C5:51:98
Authority key identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
Certificate issuer: /CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Certificate serial: 01965613DB70871C76778714E838382BC497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
Manifest number: 11B3
Signing time: Mon 21 Apr 2025 02:01:03 +0000
Manifest this update: Mon 21 Apr 2025 02:01:03 +0000
Manifest next update: Tue 22 Apr 2025 02:01:03 +0000
Files and hashes: 1: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl (hash: UrVoWc9vwxrvp8QBc4L7b7SNj/NlMoUVUUfcNpJGSGc=)
2: gbEdvQz4q0AdyM98MXiZjERkDX4.roa (hash: QnkSlwi1hREwXQkmvd9zqXoHe57V+gXhpktYubECCFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:db:70:87:1c:76:77:87:14:e8:38:38:2b:c4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Validity
Not Before: Apr 21 02:01:03 2025 GMT
Not After : Apr 22 02:01:03 2025 GMT
Subject: CN=103ae0799c460ffeeddc34082286e1769ec55198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:45:c7:8e:37:3c:ec:43:19:fc:52:9a:61:
0f:27:4a:4c:16:bd:48:be:3b:f1:ad:01:6f:82:26:
c0:92:11:cd:9e:3e:31:07:a1:69:80:44:db:2e:e3:
93:e2:68:82:43:50:71:c2:df:52:a4:4d:e8:8e:41:
bf:d0:7a:b1:e5:7c:23:1a:1b:b0:52:3f:c2:5a:06:
9f:6f:0a:fe:b0:d0:b5:6e:51:42:9b:58:20:86:73:
25:10:80:92:73:c7:cb:f8:35:21:b1:12:d3:17:29:
33:a0:8f:e0:13:5e:2e:2e:ff:01:9e:7a:2e:99:af:
38:ff:f6:0d:e7:9a:eb:2e:e1:3d:cd:f9:75:ed:8b:
0a:ae:76:8c:99:16:be:ff:4a:65:14:4a:99:ea:4b:
52:69:ca:83:73:68:b9:ff:d0:18:d0:83:aa:77:69:
3e:65:60:4a:21:21:5b:d8:39:22:e8:6e:00:a9:3a:
01:f6:01:81:b2:de:f7:a8:12:d5:f3:c4:8a:50:ec:
0e:8c:70:25:c1:1a:ae:8e:31:62:c0:92:76:4d:3e:
f2:88:a9:a5:a9:1c:ec:0e:e9:46:e6:36:a4:0b:63:
e5:d5:74:68:56:32:bf:73:85:31:14:1c:67:93:9b:
dd:48:e8:84:13:73:b2:37:ad:25:4c:17:c7:44:4b:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3A:E0:79:9C:46:0F:FE:ED:DC:34:08:22:86:E1:76:9E:C5:51:98
X509v3 Authority Key Identifier:
keyid:5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:21:ce:5e:ca:8c:ec:cf:c4:d5:28:61:92:dc:e7:ed:76:1b:
c8:37:0a:bc:c7:f2:87:03:0f:13:f4:d5:4c:e4:a6:c7:3e:db:
dc:b6:cb:05:dc:80:9e:ed:ec:c7:bd:ff:d3:9f:86:80:5c:62:
5a:35:fd:aa:0f:f8:bf:3e:59:29:c7:e5:63:7f:b9:54:9d:61:
ae:d9:0d:89:35:53:72:ba:27:f1:43:4c:db:0d:c2:b9:95:90:
cd:3a:2c:91:fa:79:25:eb:72:b8:34:8f:17:a9:35:32:13:3a:
83:d6:a5:96:37:76:2f:ac:58:9c:a9:ab:1c:7b:39:46:b0:38:
97:3e:dd:4d:7d:5e:57:1b:71:a0:b7:b5:05:bd:88:ad:47:a7:
17:db:a7:51:db:09:e8:f0:81:88:37:1d:8d:6f:56:e9:a0:ae:
fe:41:07:ed:a6:ca:17:d0:4a:ff:c3:ad:b0:a4:9f:af:51:62:
82:8e:3e:73:6f:ef:46:75:77:5f:9a:55:36:9e:6a:82:6e:0c:
02:76:f0:8d:99:3b:17:06:19:7d:96:5c:52:9f:91:6d:70:ca:
88:38:99:c0:b2:99:64:4b:a0:74:fc:ed:70:4e:c5:01:d2:2a:
c9:49:ca:07:35:a7:c4:09:5c:e8:c5:3e:a3:eb:eb:9a:9c:0b:
91:52:35:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:38 2025 by rpki-client