Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
File: XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft (raw, json)
Hash identifier: hjUpAwLabwteDKSIC48+CwX16rpVRcMJ2+P5bawVizY=
Subject key identifier: 6B:CE:48:A9:2A:C8:E8:C5:C1:C5:86:65:8F:80:B7:3A:9B:C6:52:29
Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
Certificate issuer: /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Certificate serial: 0196594B880B40C77D5675B90302A4DDEF07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
Manifest number: 0B2B
Signing time: Mon 21 Apr 2025 17:00:44 +0000
Manifest this update: Mon 21 Apr 2025 17:00:44 +0000
Manifest next update: Tue 22 Apr 2025 17:00:44 +0000
Files and hashes: 1: FBX0FyPBfgM5SwvSaWt3-Nf-3Ug.roa (hash: Xc41MAtSc+ruCG6VKyrq0wjruSgKp5EwL1g2WUQj6WQ=)
2: XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl (hash: Vnf0E9DJiBWB/CKPQagJYofPq3YYtEO2vKUZItGjmH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:88:0b:40:c7:7d:56:75:b9:03:02:a4:dd:ef:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Validity
Not Before: Apr 21 17:00:44 2025 GMT
Not After : Apr 22 17:00:44 2025 GMT
Subject: CN=6bce48a92ac8e8c5c1c586658f80b73a9bc65229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:52:32:f4:61:fe:0c:27:4e:38:66:aa:80:a8:
c7:f8:bb:19:c7:79:cd:a4:ae:c7:c9:44:a3:26:3f:
c8:5a:b2:ef:0a:6f:04:d4:88:59:8e:d6:c9:24:ea:
0a:65:7d:1e:86:e0:01:fe:8a:e0:c9:24:d9:e2:db:
98:1c:ed:9b:9d:54:b7:0d:a8:9a:c7:64:7a:a0:aa:
14:65:b6:9e:21:12:19:c2:14:39:74:4d:b1:f9:ec:
91:8e:4d:98:c4:84:ae:5b:3b:c1:b5:42:ee:5b:c7:
ca:7b:c9:3c:f5:c8:58:71:bc:9a:6c:bb:3d:2f:78:
ff:59:cf:b5:53:ec:27:a8:fc:a2:f8:b4:cc:36:80:
7f:7f:93:79:33:db:80:e2:b8:5a:78:2e:04:11:c6:
72:61:8d:c2:da:ce:66:8e:24:d4:74:13:da:7b:11:
31:0c:f7:4e:32:f3:66:01:62:20:ab:8d:81:84:c0:
7a:a7:e9:f0:9d:88:fc:f9:47:78:67:8d:01:6c:13:
d2:f1:e4:91:4b:00:f2:87:e7:d2:20:93:d8:7e:ad:
59:50:9c:4d:8b:91:78:d8:66:48:6d:47:bb:90:ce:
27:cf:cd:94:06:0f:82:fd:07:54:c2:0f:c4:7e:23:
34:be:0b:2a:f1:2b:81:61:a4:cd:84:f8:a3:ee:5d:
42:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CE:48:A9:2A:C8:E8:C5:C1:C5:86:65:8F:80:B7:3A:9B:C6:52:29
X509v3 Authority Key Identifier:
keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:51:8e:c2:d4:24:b4:fa:0d:ee:59:8f:74:39:2f:0c:a1:5c:
9f:57:e5:67:47:cb:77:a7:5b:52:59:39:b4:8d:b7:03:16:13:
7a:18:64:c9:0a:1d:50:7a:51:85:ec:54:60:12:a8:83:a5:fb:
31:16:8d:d2:b1:16:88:b9:37:7f:08:b8:01:e4:27:24:d4:e6:
25:6e:a6:b1:e2:ab:4e:9e:e3:34:aa:4b:f9:38:30:23:57:e4:
85:a5:3b:41:62:99:07:d5:52:b7:1a:fe:b1:d6:b4:02:cf:85:
75:79:ab:0e:23:40:dc:40:8a:8d:36:2c:f8:93:35:0f:62:7e:
8f:93:55:ea:28:a2:32:d0:fe:dc:54:cf:ef:99:13:92:3e:4d:
50:8d:ad:83:e2:91:3c:9f:da:72:fa:c3:36:d8:03:70:b3:cf:
09:a7:58:8e:79:02:43:2c:de:30:1c:6b:8e:b9:bf:8a:68:c7:
93:62:e1:3b:b6:39:03:48:4f:0f:87:c0:a3:ff:24:0e:f8:cd:
ec:aa:22:6b:81:9f:ab:06:21:c2:59:6a:ff:8a:6a:c8:71:80:
3a:e8:0e:2c:04:1c:d6:c7:19:f0:6c:1a:00:65:2a:22:95:05:
4b:f3:a3:12:7b:59:82:51:7e:13:60:31:f0:8b:a6:4d:5c:5c:
66:89:10:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:16 2025 by rpki-client