Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json)
Hash identifier: 5pvj+GAJEPajc3aWhH+EKPUSz4pZUcfi2fP0EajLeto=
Subject key identifier: BE:55:80:FF:5B:EA:58:63:09:D7:2A:73:64:4A:97:84:C7:F7:7F:13
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 019616900EC0C8ED2C7C8FDE2EAA59BA7096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
Manifest number: 14E3
Signing time: Tue 08 Apr 2025 18:01:01 +0000
Manifest this update: Tue 08 Apr 2025 18:01:01 +0000
Manifest next update: Wed 09 Apr 2025 18:01:01 +0000
Files and hashes: 1: 7I-4Etn_-ATs5ke2k7C_Ri5wOGE.roa (hash: K1mMFeZqT9P2Y1UVAb4tDIF+y7HhkZLZ9faOLYgkjT4=)
2: XufZiysYk33Xck5lo3CwfpdliJQ.roa (hash: 4ytM8O/KmX8CZCFr30YeKBOK7MtkaAq/PPvvT8k7frg=)
3: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: 1qqDgVGOPVm6C6RQu/9gfbBvYvUNGM4c+ANHhZC5A3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:90:0e:c0:c8:ed:2c:7c:8f:de:2e:aa:59:ba:70:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Apr 8 18:01:01 2025 GMT
Not After : Apr 9 18:01:01 2025 GMT
Subject: CN=be5580ff5bea586309d72a73644a9784c7f77f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:43:fe:4d:82:28:61:bc:95:d4:6b:c4:d6:
b5:b4:8a:74:2e:bd:1e:0c:c4:c3:54:24:ea:59:33:
29:ef:6a:aa:a2:b9:c8:fa:16:31:6a:a6:af:8f:db:
71:d6:19:9a:9f:b0:d1:0e:f9:b3:61:ab:13:4f:42:
70:e7:ac:33:ba:86:2a:6e:8e:2d:0e:19:44:2f:ea:
2d:d9:3b:4e:57:93:5d:25:a7:16:26:8e:43:2f:8d:
f2:60:d6:01:42:45:ce:96:68:8c:39:4b:9e:60:83:
c4:96:51:9d:55:0f:7e:09:9a:54:ae:c4:d1:72:b3:
3d:d2:af:82:99:42:48:77:03:8b:ad:9c:48:b4:d9:
b6:6a:7f:ed:64:b4:96:48:1b:78:88:b7:e2:d6:5d:
a9:68:5b:fe:96:9e:4f:95:2a:46:de:18:93:6f:b9:
c1:3c:26:9d:4a:da:a2:9f:37:4c:90:9c:41:de:8f:
cc:57:dc:bf:11:2d:c6:1a:81:46:68:c6:74:8c:96:
d7:65:96:e0:4d:0f:26:21:fb:e1:d5:0a:14:d5:68:
4d:5c:ae:87:87:01:15:40:ac:46:82:b1:d5:5f:8f:
51:7e:02:0b:76:7b:ba:28:bd:39:06:10:3c:0d:b3:
ac:a5:6b:f8:c9:73:8b:c5:bf:94:a8:5a:96:a7:a2:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:55:80:FF:5B:EA:58:63:09:D7:2A:73:64:4A:97:84:C7:F7:7F:13
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d0:9b:f3:23:34:e5:55:4e:af:ba:2d:d9:5d:a4:11:e4:fc:
e1:a4:e2:50:2c:5b:de:86:f4:db:57:66:73:f6:95:0b:1d:d5:
20:04:49:bc:ea:b6:8b:8a:a4:20:6b:ed:bc:36:27:9f:86:a7:
13:91:df:ea:27:f8:b2:c8:82:22:20:53:c8:c8:07:9c:af:c6:
74:a4:04:84:42:11:b7:4f:a4:6d:92:56:61:89:cb:77:d4:77:
a8:f1:47:3c:0b:3f:54:56:93:26:45:55:89:4e:95:f2:65:61:
a8:12:4c:06:68:5a:fc:ea:78:7d:b5:f6:4a:d0:31:10:36:85:
e0:1a:44:11:06:5d:c6:83:98:71:96:56:8d:f8:f6:cb:aa:9a:
86:4a:6f:cc:17:c8:b1:79:e8:97:bb:90:78:b1:69:30:cd:5b:
32:f0:ad:d9:bd:71:ac:20:5b:e0:ca:2d:dc:fc:c2:d0:19:09:
88:2c:29:98:b8:36:7a:b0:1b:5c:ff:93:ba:6e:65:fe:79:97:
0f:2b:65:f3:57:55:06:d6:81:f3:a5:25:d3:1a:d6:05:94:8f:
4a:bb:5d:0f:1e:4f:37:aa:4a:49:3a:80:9e:56:6d:7b:04:6c:
c7:15:d7:d4:16:07:7e:da:27:71:b0:38:a7:77:9f:ca:ea:f8:
ec:b3:a9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:51:22 2025 by rpki-client