Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: JH2BduBQJhyIzo2aWL4SFdWinndFGpxHhiLKnsX5gXU=
Subject key identifier: FC:E2:50:00:33:EA:B1:2A:8E:92:96:FA:C6:2B:6C:A5:9D:87:BF:9E
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 01965D961F5388A4241D33DC9D23AA13816B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 07CC
Signing time: Tue 22 Apr 2025 13:00:41 +0000
Manifest this update: Tue 22 Apr 2025 13:00:41 +0000
Manifest next update: Wed 23 Apr 2025 13:00:41 +0000
Files and hashes: 1: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: 0Sn5JC68W2YnOrvTaM9XVAUMJMDY/ana8UXjkocQuUA=)
2: gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa (hash: K0MEtWJdFKd4YOcyYI4uKnZtszhLsEQLNua4LTuOi4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:96:1f:53:88:a4:24:1d:33:dc:9d:23:aa:13:81:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Apr 22 13:00:41 2025 GMT
Not After : Apr 23 13:00:41 2025 GMT
Subject: CN=fce2500033eab12a8e9296fac62b6ca59d87bf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:27:2e:44:c7:cc:6e:aa:91:17:2d:02:15:
f6:39:d5:ce:db:e7:b2:86:1b:7e:b6:7a:11:d6:c2:
04:74:69:8e:bf:17:fb:53:61:e2:db:02:e2:d4:6f:
a9:c6:1b:e1:7c:04:d8:82:5f:25:93:2a:c0:b4:6f:
33:20:b3:77:af:95:ec:04:c4:12:9b:d2:ba:d3:62:
7d:f4:90:a0:32:49:d3:d1:0d:26:2b:31:e1:86:49:
be:20:68:20:d3:c1:17:16:03:50:28:fe:78:86:32:
90:3d:f3:a0:3a:d5:85:7b:e6:76:13:49:10:ca:60:
02:c4:e5:b7:75:60:27:66:cc:b4:8f:1c:a5:9e:c6:
2d:35:f7:48:d0:ef:9a:a6:02:fc:f2:34:67:54:f5:
1d:c0:32:3c:65:07:93:38:f9:25:39:fc:83:60:05:
0f:89:a1:e0:f7:15:ec:41:04:8b:2a:b9:db:b9:a9:
9b:6e:d2:e6:96:1a:78:87:24:19:74:fa:38:2a:47:
8e:de:97:88:dd:88:28:eb:de:6f:e3:80:c8:f0:44:
9a:4d:93:77:75:76:01:ae:26:05:90:e0:a5:4d:0b:
9f:4c:9b:9c:df:b4:d8:68:9e:d5:19:08:3e:a1:5b:
10:29:85:62:14:11:d7:f0:aa:a2:e8:e1:8e:dd:56:
f9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E2:50:00:33:EA:B1:2A:8E:92:96:FA:C6:2B:6C:A5:9D:87:BF:9E
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9e:79:01:dd:60:fc:ed:3e:ca:04:41:51:55:92:18:c7:17:
78:89:9c:89:06:6d:79:ce:7e:44:2f:37:9e:5e:17:75:d0:a2:
64:41:0e:7a:58:08:a3:51:90:aa:cb:6d:90:71:9f:fc:c4:ac:
b6:f4:26:bb:7c:0f:07:f7:d9:02:85:4b:2d:20:3e:21:1b:1e:
41:15:1b:0a:69:dc:22:e8:8c:5d:b6:97:0f:9c:c5:16:65:a3:
8e:d6:49:e1:96:d6:39:49:fe:53:16:35:f4:f9:5d:9c:e4:4b:
8e:31:2f:d1:ed:33:88:ad:e9:19:9d:8d:49:f0:60:0c:b0:1f:
13:71:a1:10:47:1c:56:05:92:be:a9:d8:ed:c4:7a:80:71:be:
1f:cc:a7:cc:b9:f3:8c:13:61:c1:cc:86:16:cc:4d:63:23:c6:
9b:4d:99:6d:69:b7:c1:46:25:3f:d5:57:6d:6e:64:d4:d3:cf:
04:1d:34:79:d3:34:39:11:ac:cc:3d:22:95:83:39:67:77:bd:
d8:5b:cc:10:dc:76:62:98:ca:f2:d6:fe:63:a4:41:4e:78:d1:
9d:61:f0:d8:07:88:10:0e:a8:58:e6:b8:eb:94:e4:72:b3:52:
73:cb:7a:80:65:cb:49:8c:77:88:98:c2:a6:ce:4e:bf:50:15:
ac:86:e5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:02:26 2025 by rpki-client