Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft
File: XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft (raw, json)
Hash identifier: R7G/Bd/d6MNQ67m7pQmdq6DtlXPd8Rq2QEGgOEndhvk=
Subject key identifier: 3D:FF:CB:67:29:66:2B:7F:A0:F8:5E:C2:78:A8:F8:3B:36:7A:9F:D6
Authority key identifier: 5D:A3:8F:7C:3E:CA:D2:9E:C5:06:44:B7:00:68:B9:2A:1B:E4:70:74
Certificate issuer: /CN=5da38f7c3ecad29ec50644b70068b92a1be47074
Certificate serial: 01964BFE518FA09690FEAF8196DC6D90BD1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft
Manifest number: 042E
Signing time: Sat 19 Apr 2025 03:01:20 +0000
Manifest this update: Sat 19 Apr 2025 03:01:20 +0000
Manifest next update: Sun 20 Apr 2025 03:01:20 +0000
Files and hashes: 1: SzmhUfWJuFhyT5TGLouRAgBLoIM.roa (hash: Qov0MeRXvHn6kZBTJQaoc48+Yw0xT2B5xVOV+b6Nifs=)
2: XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl (hash: ASME5o3qchEsiU8sOWBP2wIPp3NruFcWwIbGBAMvy24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fe:51:8f:a0:96:90:fe:af:81:96:dc:6d:90:bd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da38f7c3ecad29ec50644b70068b92a1be47074
Validity
Not Before: Apr 19 03:01:20 2025 GMT
Not After : Apr 20 03:01:20 2025 GMT
Subject: CN=3dffcb6729662b7fa0f85ec278a8f83b367a9fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9d:57:e7:96:5f:d8:b2:58:ef:a4:44:b6:de:
32:f4:bd:0a:46:2f:21:46:09:cb:56:c2:d6:87:2e:
ac:7d:c2:34:05:76:c3:6d:ec:e2:64:da:a7:29:a4:
41:df:34:ea:07:de:3c:a9:76:a4:57:ca:3b:26:9d:
06:50:1d:f0:83:06:08:f1:ae:ce:f7:db:2b:2f:5d:
e8:21:d7:0f:e4:eb:f3:17:0d:1b:66:54:31:0e:6d:
2b:e0:b0:1c:a5:83:ec:32:7e:60:26:f8:78:56:c7:
c0:74:fb:41:c6:80:1e:6c:cd:dc:49:32:83:9b:d5:
82:21:8e:95:d1:f1:68:60:6a:9f:1d:ed:cc:ba:0f:
51:14:1b:8e:8c:65:ac:7e:dd:f4:82:4d:de:fa:8f:
7a:22:38:5e:9c:08:69:84:df:23:5c:c6:59:8c:64:
59:ca:bd:48:5d:cb:7c:e5:5e:85:75:b7:8d:35:fd:
0f:66:9c:1a:af:58:93:27:a2:a1:be:c1:7a:d6:65:
3d:5a:d3:aa:a9:9c:9c:03:95:9b:ff:82:c4:5c:47:
69:96:e1:30:75:46:f1:64:75:14:8c:50:53:e2:c9:
13:80:21:69:1d:4a:02:b2:4d:d3:2d:5b:03:05:34:
03:c5:0c:29:08:d5:c9:55:4e:c0:21:2c:6a:32:49:
92:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FF:CB:67:29:66:2B:7F:A0:F8:5E:C2:78:A8:F8:3B:36:7A:9F:D6
X509v3 Authority Key Identifier:
keyid:5D:A3:8F:7C:3E:CA:D2:9E:C5:06:44:B7:00:68:B9:2A:1B:E4:70:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a1:aa:81:17:c8:6a:a9:f7:c5:34:a2:66:3b:6b:0b:dc:a8:
0e:19:01:8f:22:14:52:b5:3d:e2:2a:6d:7d:8d:5d:e5:d3:2c:
f9:0f:09:04:68:a0:0c:49:e9:5d:6f:54:cd:00:51:f9:e4:0d:
98:d9:7b:16:bd:07:d0:ea:39:82:fe:27:c9:2b:ae:22:48:55:
ef:85:10:aa:6a:42:3b:a2:40:77:ea:e0:73:e9:c0:ba:6b:28:
66:2d:0b:82:2b:8a:a2:60:4b:e9:a4:1b:95:c3:91:e9:1b:ca:
11:38:95:3e:5b:36:83:08:d8:b1:e9:b0:ac:27:79:77:2d:93:
3c:10:8c:ca:b1:ba:0f:35:c7:a2:66:8a:c1:b6:39:3b:8e:59:
d8:69:a4:3e:86:4b:a1:bc:93:f6:ca:22:8a:8a:c7:28:93:ca:
2e:2c:fb:5d:1f:15:8b:6f:0d:df:7e:48:31:8f:5c:cf:1c:6e:
10:74:70:a4:87:18:b5:80:bc:1e:35:f2:bf:8c:c3:25:50:ee:
d7:46:64:18:5b:e1:46:77:0b:9c:e7:60:d6:9a:c8:ef:8a:5b:
dc:19:ff:04:65:0d:b7:45:d3:af:ef:40:cb:2e:9a:75:f3:23:
fd:ee:b7:c7:a9:78:e8:a3:2f:b3:e2:13:a8:fc:9a:ad:ab:69:
ed:2f:53:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:50:35 2025 by rpki-client