Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
File: XPiK3BnqrRPWhbgew5k1vUssaa0.mft (raw, json)
Hash identifier: wabr79+PtZGV8uJOPJIFmpl0OHYvVNEgsa/mUcU8ah0=
Subject key identifier: F5:DD:D8:E9:70:27:9D:FB:75:D8:11:F0:CB:01:11:EC:C4:8A:BA:62
Authority key identifier: 5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
Certificate issuer: /CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Certificate serial: 01958BF236F6D8518A6AED4E40F472E9516A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
Manifest number: 139B
Signing time: Wed 12 Mar 2025 20:01:01 +0000
Manifest this update: Wed 12 Mar 2025 20:01:01 +0000
Manifest next update: Thu 13 Mar 2025 20:01:01 +0000
Files and hashes: 1: 2m-5sAN7fZLZtnlN4KyM3kDb8rA.roa (hash: GBh4Fs12dTfnHuJfy5lqzt0sICQWCnX0b8Yq+RaFO/k=)
2: XPiK3BnqrRPWhbgew5k1vUssaa0.crl (hash: dzccgr98XokjkBU22t5bPlq1Rk02LXUq1ZRmKCDTdhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:36:f6:d8:51:8a:6a:ed:4e:40:f4:72:e9:51:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Validity
Not Before: Mar 12 20:01:01 2025 GMT
Not After : Mar 13 20:01:01 2025 GMT
Subject: CN=f5ddd8e970279dfb75d811f0cb0111ecc48aba62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:55:ec:3c:97:3d:db:69:0a:ab:1c:45:5e:
87:1e:ef:73:28:02:b2:81:d5:9e:24:86:c4:25:24:
46:63:8d:a3:d1:69:7b:01:87:55:e3:d1:8c:64:b5:
31:a6:79:34:79:46:61:69:a8:eb:39:99:f5:19:37:
34:6b:fe:5c:4c:23:a2:e2:65:1d:80:a6:31:e1:cc:
fa:25:70:72:1c:93:ad:a3:9a:d0:8a:a0:e1:fd:ef:
55:4d:33:60:74:e1:f2:1f:1e:aa:43:ee:58:e1:23:
39:cf:cd:81:5a:72:76:41:ba:ed:86:94:8d:f7:a1:
b0:02:71:4c:98:0f:28:18:8e:c7:06:d1:33:90:64:
a8:6a:36:b0:9e:14:8c:67:e0:48:99:5e:97:9b:9e:
32:d8:a0:48:64:6e:3c:c5:ed:37:26:57:c4:be:c6:
36:a8:79:64:a2:6f:5f:e7:44:64:3b:b9:dd:d9:3e:
27:84:bc:45:b6:d9:e4:3e:ed:26:76:62:29:e5:8a:
b0:24:c9:83:3e:24:6c:8b:39:1c:90:49:df:e2:d8:
08:c4:73:d8:94:4f:91:0c:8c:6d:59:e0:87:ce:5a:
db:5a:5b:ef:81:97:be:02:d0:6e:d5:ec:0c:ef:a0:
94:63:87:62:bb:5f:bf:48:a3:5b:6e:7d:c1:b0:84:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DD:D8:E9:70:27:9D:FB:75:D8:11:F0:CB:01:11:EC:C4:8A:BA:62
X509v3 Authority Key Identifier:
keyid:5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c6:58:d6:f2:df:e0:14:ce:54:ad:6b:93:36:1a:b5:af:2c:
ae:72:2e:ee:d2:d4:10:8e:35:3c:3f:66:0a:e6:a8:b3:10:59:
01:c4:a8:23:9b:ab:4e:0f:1d:25:5d:85:55:b3:da:cc:49:bc:
e9:c9:d4:63:8f:94:5d:2d:35:89:2c:2d:cd:de:45:eb:70:2c:
e2:75:52:f9:7f:83:52:01:4f:9e:3a:d0:19:cb:cb:16:54:98:
9a:50:83:97:e4:14:d6:73:37:52:05:b0:93:4a:35:17:41:f7:
a1:52:d4:0b:73:76:c4:dd:5c:16:2d:02:37:e0:1c:77:5c:8c:
9e:7f:81:03:b2:72:19:b7:10:5e:08:dd:6b:db:01:55:2f:cf:
e9:a1:dc:15:9f:14:ea:b0:92:18:8a:53:3d:1b:3d:6c:39:ac:
63:1e:43:f0:c5:d2:c9:5f:f6:b8:46:bd:e5:3a:92:f3:8c:2c:
f8:78:1d:95:cf:57:fc:c0:09:09:a7:72:2a:be:9e:cd:39:86:
75:59:33:1e:7f:70:2b:ce:43:3c:ba:f1:16:9c:9b:eb:b3:fb:
91:71:20:2f:59:94:a0:b3:0b:3a:44:b0:7a:ef:cf:5f:3a:bf:
a4:19:1e:82:b3:6a:dc:11:cc:d5:6a:fd:28:0e:aa:ae:25:15:
b3:e5:bd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:51 2025 by rpki-client