Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
File: XS8h5aT74BUgX2zviK-uGc0GphI.mft (raw, json)
Hash identifier: 90iooZxsZt2cch6xjoISPhe9Ab5S76Kjo0TvCBpuTYs=
Subject key identifier: 2A:CC:0C:45:D2:3E:F8:B8:40:8A:E1:11:FA:81:62:B5:68:26:1B:DA
Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Certificate issuer: /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Certificate serial: 01964D7EC5FDFFFBC732E3C30B1FE4317280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
Manifest number: 148D
Signing time: Sat 19 Apr 2025 10:01:15 +0000
Manifest this update: Sat 19 Apr 2025 10:01:15 +0000
Manifest next update: Sun 20 Apr 2025 10:01:15 +0000
Files and hashes: 1: 3s8R9sRZRUNgHAycT7iMGkpoqeI.roa (hash: LAbsSBnsWLcRul98ZPfO4H8aiix0SGvDORk1UP26ViE=)
2: XS8h5aT74BUgX2zviK-uGc0GphI.crl (hash: kB+4TvP9u/qR1GIsHKPMbUiOTW0wZwli9pgjW1R/kaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:c5:fd:ff:fb:c7:32:e3:c3:0b:1f:e4:31:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Validity
Not Before: Apr 19 10:01:15 2025 GMT
Not After : Apr 20 10:01:15 2025 GMT
Subject: CN=2acc0c45d23ef8b8408ae111fa8162b568261bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:29:20:ba:2d:32:09:6d:bf:6b:37:20:92:
81:d9:67:24:d8:86:55:53:28:a6:3a:1f:40:03:5f:
5d:08:c1:23:36:51:85:e2:6e:d2:5e:ec:39:f4:a7:
d4:11:8a:c8:b1:1f:0f:36:98:ab:b1:04:a5:45:a4:
e8:42:c4:37:7d:80:2e:02:f3:e0:11:c6:72:9f:68:
5f:44:44:9e:9f:ec:69:ca:c4:1a:9b:a0:a0:a0:eb:
ad:a7:a8:87:8a:30:89:79:dc:47:f1:a5:da:64:ea:
6a:e2:30:13:0b:56:a3:9c:f4:0b:47:01:fc:aa:79:
97:a5:b5:ce:16:69:aa:02:5b:65:19:43:bb:35:bb:
9b:4b:95:70:97:c8:8a:49:30:6f:5e:02:b8:5b:cb:
a5:c1:bc:4f:e0:89:2c:2f:2f:41:61:2e:c7:37:60:
f2:cc:ff:d8:15:6f:38:8a:46:18:80:04:40:8f:ef:
e7:c8:70:2a:b8:14:82:92:95:6d:1a:5c:e3:02:32:
aa:aa:ac:a8:10:9d:9b:0a:c4:16:e3:6e:f6:bc:46:
06:8f:c9:b8:3a:ea:79:75:05:ba:d7:0f:75:ae:3f:
32:e3:cc:5a:f4:df:2f:82:1f:8b:88:95:f9:01:8d:
64:e1:77:57:15:cd:49:8e:68:6b:1c:d5:b7:1c:55:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CC:0C:45:D2:3E:F8:B8:40:8A:E1:11:FA:81:62:B5:68:26:1B:DA
X509v3 Authority Key Identifier:
keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:13:b4:b3:5f:ba:16:e1:92:b1:c0:6e:ff:3c:46:b0:d8:d3:
99:fb:67:c4:eb:fe:6c:26:e0:58:93:b2:46:9d:49:41:17:9e:
f2:88:34:73:a4:17:54:6f:ef:d1:37:0f:1e:da:ec:28:66:10:
ad:91:45:e1:54:2e:aa:5d:e2:69:54:6f:61:d8:e3:74:a9:58:
f2:e9:fa:b2:21:45:c0:ff:38:39:ae:0d:61:af:36:a5:6e:a1:
28:c8:54:c6:0a:e9:c5:46:a4:48:a5:72:4e:24:a8:96:70:93:
7c:1b:2d:e4:2d:d4:14:c3:44:6b:4c:38:b6:5b:20:1e:03:a9:
f9:1d:94:8a:e8:8c:56:c9:21:18:b0:ad:0e:07:b1:da:bc:74:
50:41:7d:2f:eb:11:e4:ef:d0:bb:1d:b5:69:46:fe:24:c0:70:
28:98:8a:e9:22:5e:e1:a2:bb:4e:0a:10:cc:50:c8:e9:53:9f:
d3:17:e0:f4:fc:d9:7a:55:1d:26:74:f8:5e:58:54:bf:10:c6:
90:9a:15:e3:de:ef:8d:61:84:32:68:92:cf:2b:ec:7e:04:15:
32:68:f7:6c:b0:d6:fa:27:bd:e6:8a:26:22:30:1b:4c:57:e9:
ba:ed:ab:f2:5e:bb:9e:40:f8:f3:30:15:1a:1c:ee:b0:fd:48:
d7:b7:a4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:08:41 2025 by rpki-client