Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
File: XinALSYfkT6lv4PCvHwzQUpCvMo.mft (raw, json)
Hash identifier: JL3Js16BqbYfJFaCKvZoLCQAxkFVY7N7ORDF83MOQMc=
Subject key identifier: 4D:99:1E:67:D0:C7:40:0A:54:9B:3B:35:76:67:7B:94:29:72:05:C7
Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
Certificate issuer: /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Certificate serial: 01964EC7A3D6FBFA76FE9CBCEA380A528A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
Manifest number: 0BE2
Signing time: Sat 19 Apr 2025 16:00:28 +0000
Manifest this update: Sat 19 Apr 2025 16:00:28 +0000
Manifest next update: Sun 20 Apr 2025 16:00:28 +0000
Files and hashes: 1: 38xzFnggY2WqYErPpIPdnil2M-I.roa (hash: 3L7P4weXGgXURnYb88EC9SZdycP07LPWwVA0kWFKQpE=)
2: XinALSYfkT6lv4PCvHwzQUpCvMo.crl (hash: Qon1IuRUdH0NkXU7aW1VetbBHfzuce4yVQxLMsfcCLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:a3:d6:fb:fa:76:fe:9c:bc:ea:38:0a:52:8a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Validity
Not Before: Apr 19 16:00:28 2025 GMT
Not After : Apr 20 16:00:28 2025 GMT
Subject: CN=4d991e67d0c7400a549b3b3576677b94297205c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:d2:54:7a:8b:90:b7:cb:5b:17:79:89:e2:
90:28:76:37:f6:31:bb:b3:b9:48:e9:cd:46:20:6a:
94:ad:6b:aa:a5:7a:fa:50:ad:1f:46:5d:ba:83:1d:
9f:dc:4b:0c:da:cd:80:22:ed:66:1c:6f:c8:c8:32:
76:e5:f9:5a:5f:e0:c3:d2:49:ed:5a:aa:48:14:34:
20:a3:c9:4c:94:68:dd:64:bc:3f:d5:21:de:8b:52:
42:f2:22:31:5a:ed:25:15:b8:6e:b8:ae:f2:a2:e4:
58:73:96:e0:73:64:45:0d:80:26:b4:b3:ae:21:ba:
52:ee:d9:ec:65:f9:a1:79:f1:60:37:fc:f2:70:e0:
f5:a9:98:fd:07:63:3b:1e:5c:93:d1:2b:8c:bd:92:
08:63:65:dd:5e:ca:10:55:9a:b2:0f:15:7e:95:d2:
d9:53:a8:66:37:62:11:73:d8:11:0c:32:71:10:8f:
9d:28:03:c9:1e:3c:a4:41:c6:b2:95:64:85:8c:24:
e5:ad:ea:76:93:f1:cd:9a:f6:a2:c5:24:00:44:ba:
c5:73:01:1a:de:77:91:14:e8:ca:e7:80:01:0e:d4:
22:72:78:b4:90:e7:b1:fb:fe:b6:39:2b:f7:eb:88:
72:b3:f2:02:20:e8:41:d4:4b:d4:e1:12:cc:a5:c3:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:99:1E:67:D0:C7:40:0A:54:9B:3B:35:76:67:7B:94:29:72:05:C7
X509v3 Authority Key Identifier:
keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2d:86:75:5a:0a:e2:45:57:59:a6:4f:0f:00:41:d2:ed:af:
9e:f1:ad:9c:3b:c0:28:0e:43:89:fb:0b:76:69:91:f1:cf:84:
b7:7d:c7:31:ec:4b:22:5b:19:e5:4c:f3:70:df:83:84:75:63:
bb:59:1f:53:ff:f7:74:0d:a4:9e:12:a0:dc:1f:2b:2b:75:7a:
f1:d3:8d:4d:70:b5:24:c5:db:17:6a:54:43:14:c7:ef:ad:15:
fc:2e:83:67:b0:ab:9e:4a:92:e7:0c:58:ad:3c:04:45:5f:82:
dd:f6:71:e9:b7:db:26:0c:6d:e4:b5:8e:0a:1c:c9:21:1a:02:
dd:29:94:19:df:ab:25:db:ac:b9:0d:11:41:56:a6:95:85:82:
67:7e:28:48:59:54:9f:77:3b:b0:0d:74:76:36:98:25:6a:b9:
4d:4f:bb:bc:5f:cd:aa:e3:01:4a:b1:73:f2:24:6b:6d:37:6f:
18:27:42:32:e0:5b:7c:57:5d:e1:34:55:e9:c1:81:44:37:cc:
8f:7a:1e:1e:9d:e9:dc:96:9b:b3:da:0a:ff:5d:80:ef:5f:7b:
4b:c2:f8:4a:86:78:71:7c:11:c2:c7:af:ae:c4:c7:b5:a9:76:
d5:c7:4a:bb:00:32:89:a2:37:9a:20:98:29:f5:ba:cb:8d:99:
cb:49:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:21 2025 by rpki-client