
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: o7uIAQe1lGtqtDnSaMpLh9JUgQwjR+JiyekO8QhjS3I=
Subject key identifier: 31:99:ED:95:81:F0:45:53:16:A3:71:E6:37:F3:6F:D3:B0:23:44:8B
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 0196410C13712F120DBA36BD3B717660755B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 027F
Signing time: Thu 17 Apr 2025 00:00:32 +0000
Manifest this update: Thu 17 Apr 2025 00:00:32 +0000
Manifest next update: Fri 18 Apr 2025 00:00:32 +0000
Files and hashes: 1: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: 4VCMQOiBZvWsxqv618O8v7D63BbCw8ZLHlgqHZfb31I=)
2: ZAeLAjytL7R3eCxSRuoyHN6_7mw.roa (hash: fwgZ3FgELKfh9d5JZWpb+7kZ9OlNjMIWIM8CDC2wbXE=)
3: sS98ShuiZY9gamFcZrqcbFzjMbs.roa (hash: BxhyjLfYrjzjXEBjZnGso78ZHOLYRxMopWgqZ0QBVko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:0c:13:71:2f:12:0d:ba:36:bd:3b:71:76:60:75:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Apr 17 00:00:32 2025 GMT
Not After : Apr 18 00:00:32 2025 GMT
Subject: CN=3199ed9581f0455316a371e637f36fd3b023448b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:88:69:28:d4:9a:18:70:69:2f:89:60:70:f2:
61:87:63:93:d1:af:f8:87:c9:9a:7e:e2:14:e1:72:
ad:e9:12:68:9a:f3:9a:54:ed:7a:7d:29:14:06:f3:
71:fa:01:9f:bc:65:8d:2d:62:f3:4f:d4:68:e9:33:
45:91:af:6f:d8:29:b6:6d:2c:a9:13:09:81:ac:94:
15:ce:b7:53:2b:02:7a:44:b7:09:1c:ef:78:11:f7:
9a:22:2a:8c:22:0b:29:01:8e:e3:94:93:ee:df:3e:
78:38:d2:ba:af:5a:e8:8f:79:3d:a1:21:44:09:60:
39:ce:99:87:03:32:7f:43:cc:10:45:a6:64:82:3c:
ee:d3:8c:85:54:92:e5:72:f5:e4:50:2a:ed:c5:fb:
bf:f8:af:2c:c3:7b:ff:80:ca:f7:d9:85:33:bb:20:
eb:c9:fc:4a:24:c5:9b:b4:35:8d:2b:83:42:42:2f:
b3:6b:df:1d:2b:4c:69:2c:58:00:9a:ac:7b:c0:29:
3b:b5:08:23:28:d6:99:30:07:df:6f:02:72:c9:38:
46:76:24:fb:5e:23:e5:fc:da:21:f2:86:d7:86:87:
55:c9:06:0b:d5:44:d4:8e:a4:66:50:42:6a:c7:42:
a8:09:58:18:b4:9f:7f:8e:30:db:54:a3:04:c6:5f:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:99:ED:95:81:F0:45:53:16:A3:71:E6:37:F3:6F:D3:B0:23:44:8B
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:82:c8:42:ee:a2:69:5b:e3:d4:be:46:a6:39:aa:7f:65:2e:
5b:4a:bf:f7:c4:02:7d:c8:0e:8b:71:dc:e5:90:35:0b:96:a0:
84:7d:d4:b1:02:78:f4:ff:71:8d:1f:ca:11:3f:ef:fa:06:d7:
4f:03:9e:a0:cb:18:b4:c2:59:c9:df:8a:b1:f8:86:b7:5e:57:
b8:b9:db:93:e1:5f:ae:3d:a6:69:c4:e9:79:39:0c:8d:06:1f:
da:df:aa:23:47:32:e9:aa:be:9c:88:d7:45:84:2e:64:4a:07:
65:fb:0b:4c:0c:99:78:34:7e:fb:de:0e:f0:92:08:6a:da:31:
55:30:b4:77:44:29:08:dd:67:d1:04:3c:5f:8a:08:34:6d:38:
3c:4e:c8:1c:5e:82:4e:82:2f:60:1b:91:27:32:51:c4:8f:fd:
67:d3:f2:b5:4b:eb:b2:9b:5c:d0:07:05:e9:c3:ea:f7:f6:a9:
4b:05:7d:fd:61:63:0f:98:27:94:57:7d:52:93:9a:da:fe:b4:
7d:90:f1:99:2e:2b:1f:ae:a3:db:fe:35:c0:5b:8d:32:bf:4f:
5a:08:fd:45:0e:dc:85:1a:36:29:7f:bc:97:50:7e:cb:08:0e:
19:bb:60:7f:7d:d6:53:51:21:7b:22:b1:c2:00:46:84:5d:c1:
c9:09:5a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:31:12 2025 by rpki-client