Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
File: XZno1XE6XmOCwNE4nWJCgW-db7k.mft (raw, json)
Hash identifier: r6tHwV0wiULrCrBTSPJuctU0Nckgj59r2w9Czn5gWlQ=
Subject key identifier: 37:A9:2E:7A:4C:7E:D4:FA:51:34:A8:0F:D1:F4:56:F5:C4:B6:95:F0
Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
Certificate issuer: /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Certificate serial: 01964D0FED6D9E4BAE3978AA88D3CDAB63F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 08:00:11 +0000
Manifest this update: Sat 19 Apr 2025 08:00:11 +0000
Manifest next update: Sun 20 Apr 2025 08:00:11 +0000
Files and hashes: 1: 1-NGjnQxo4c6IDfqjk5paae-wSfM.roa (hash: 4pr97OcGZEpEysIvYdOK32obqFh3ATs7kdH95HWDctQ=)
2: UUanwV5xGuK3SINsq8WiMNy7Rsw.roa (hash: JbzAaEUNAUROpdNsWj7B0ylMXqQOejnEiOY//pgAVzs=)
3: XZno1XE6XmOCwNE4nWJCgW-db7k.crl (hash: lwvgcJG0M6V0Je/w8v2IGdeBUroyBusoaHqIG7ST6+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:0f:ed:6d:9e:4b:ae:39:78:aa:88:d3:cd:ab:63:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Validity
Not Before: Apr 19 08:00:11 2025 GMT
Not After : Apr 20 08:00:11 2025 GMT
Subject: CN=37a92e7a4c7ed4fa5134a80fd1f456f5c4b695f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:6d:64:5c:24:ad:6c:45:15:ba:92:43:ec:
2c:d8:38:76:bc:09:fa:40:cc:a5:f9:fa:57:4e:52:
e4:fc:81:7e:bf:e7:88:ab:11:e1:c7:d0:f3:1c:3a:
65:c8:24:64:cb:a7:f6:7a:78:87:b7:e8:78:38:08:
5b:47:f4:d8:3d:d7:6a:d1:01:21:4a:4c:1d:0d:03:
22:95:0d:38:b8:b5:8f:03:00:5e:4d:26:5e:3b:6f:
b3:6b:f7:09:56:ff:5e:27:61:fa:fd:db:f4:be:48:
f3:cb:61:af:e6:af:e5:f2:31:55:72:51:9d:bb:da:
9d:05:26:87:14:27:95:05:5f:b4:f6:31:36:af:a2:
45:c0:73:80:a1:15:8d:36:6a:e3:0a:00:e5:c6:cc:
fd:6b:41:6f:2b:7a:54:19:84:7d:70:65:d5:d8:21:
10:db:50:df:04:cf:4f:85:69:c1:99:17:9e:cc:ef:
0c:08:ec:b8:bd:84:08:44:7c:8b:ab:c9:c9:3d:d0:
98:91:00:94:24:33:b6:a7:88:b9:46:e5:59:d7:82:
a2:b1:75:44:0f:53:76:e7:53:e4:3c:b8:7d:69:77:
c5:e1:a5:85:56:ae:2b:03:89:26:ad:92:d3:83:8f:
51:85:16:56:86:fb:2e:6b:28:5b:cb:de:de:de:d8:
34:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A9:2E:7A:4C:7E:D4:FA:51:34:A8:0F:D1:F4:56:F5:C4:B6:95:F0
X509v3 Authority Key Identifier:
keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:31:6c:13:c2:8a:c4:f4:f2:fa:38:b3:5f:84:e5:1f:17:75:
1a:f2:c6:bd:d0:6a:eb:d0:10:8d:b0:51:46:f4:e7:c7:e2:cd:
3f:c3:fc:e7:e9:c9:4e:5a:1e:52:ef:c0:2c:ac:bb:7b:71:28:
68:01:68:46:54:e5:a7:94:aa:c2:9d:11:e8:ec:1e:9c:91:ed:
02:e2:35:87:8c:84:f7:1c:9e:11:94:76:df:26:99:32:a5:1b:
69:de:85:b3:5a:19:de:9b:51:52:05:bb:79:09:5d:bc:f6:7c:
12:72:81:be:92:df:a3:34:d1:c4:19:ed:11:69:2c:70:4d:0f:
18:95:55:8d:21:7f:fa:ca:0d:0a:7c:f3:48:0c:20:a1:92:a1:
01:09:7b:69:c7:f8:79:f9:81:fc:0f:a8:82:d8:1f:ec:ef:8d:
30:ee:b5:28:b5:56:19:5d:20:34:28:a6:bd:06:42:f5:cb:cf:
17:89:35:54:7c:25:2b:99:bb:5c:26:ba:21:90:28:77:6a:f2:
84:99:44:f7:08:10:4c:1a:b3:ca:de:cc:d4:c7:a7:01:3f:76:
51:12:fe:20:0f:e8:c8:66:24:d7:b8:43:6a:8c:51:cc:ab:5a:
10:3b:19:2e:19:8d:1d:47:b3:82:b6:4f:10:55:e2:40:38:9b:
a2:7b:b8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:34:36 2025 by rpki-client