Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: DM+qB94xHPnHCntw4EYHTe69Ppx9inF7c1kIGVX4b5w=
Subject key identifier: F4:63:89:B6:C4:92:88:1E:A9:1F:AD:B6:49:71:E9:5C:BF:F2:D0:8D
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 01963EAF93FBFC3F63097DC0832988F6BEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 12CC
Signing time: Wed 16 Apr 2025 13:00:16 +0000
Manifest this update: Wed 16 Apr 2025 13:00:16 +0000
Manifest next update: Thu 17 Apr 2025 13:00:16 +0000
Files and hashes: 1: 1-odAb-HXEiGLPx5y_PADnZMBf0g.roa (hash: 4z0B6lGqXvXr1EDmabK3iy+SlaX1WPh7Y1Hx0zBd0iM=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: 8Phs7ZVa7HouR0d2N7iUcORGJ2OcOqAreorF6ifAF5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:93:fb:fc:3f:63:09:7d:c0:83:29:88:f6:be:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Apr 16 13:00:16 2025 GMT
Not After : Apr 17 13:00:16 2025 GMT
Subject: CN=f46389b6c492881ea91fadb64971e95cbff2d08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:ce:f0:68:1f:00:c4:ba:9b:3a:e2:a1:23:
7d:ad:1c:7d:a1:85:cf:7a:2e:31:84:8e:46:e8:aa:
65:a1:ae:1b:36:ed:74:8f:ed:e0:34:47:00:36:dd:
78:a9:02:ea:45:76:86:37:bf:77:61:2f:9a:39:5d:
8f:d3:8c:2d:86:01:c5:af:fb:99:a1:de:42:63:c5:
79:9c:c7:10:d0:1a:7e:c5:59:ad:62:36:62:0f:47:
c5:23:d8:37:46:30:f5:81:07:57:36:90:24:4c:d3:
12:1f:97:b5:9e:9b:ab:82:38:f5:d9:47:ae:54:76:
4f:95:0a:9b:4a:cd:d5:23:f1:b6:77:3b:85:48:2a:
f9:da:b0:1e:94:23:a7:56:21:6d:14:14:30:d0:6c:
14:7a:5a:36:1c:3e:ef:e0:f8:07:d9:ef:a3:30:ff:
6b:47:64:79:6d:85:ee:ad:eb:12:25:c4:f6:be:74:
f7:4b:75:fe:f5:7d:a3:c8:a1:58:ff:d0:33:8f:c9:
7c:1e:80:d8:d6:8c:2d:9a:5a:19:02:46:81:a7:88:
47:b3:4c:b9:d6:2b:e5:8a:16:ca:06:bd:88:93:b7:
27:93:5f:df:5d:e3:c8:6d:b8:db:17:9f:3d:d1:50:
b0:c4:12:05:67:39:a8:84:1d:65:f5:29:b0:45:e4:
f9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:63:89:B6:C4:92:88:1E:A9:1F:AD:B6:49:71:E9:5C:BF:F2:D0:8D
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:81:c3:c6:ab:8c:21:47:de:2a:01:23:ee:bd:3f:56:ef:1c:
e3:91:91:aa:f4:63:c8:b1:26:7b:15:9b:98:92:a2:a6:97:50:
d8:3f:28:70:16:0d:fb:bb:20:c6:7a:7f:d5:e1:02:22:c4:f7:
0b:f4:e9:90:83:88:a9:b7:5b:1c:df:9b:dd:7d:d9:19:98:ad:
ad:ba:b3:05:23:04:29:11:9a:c4:58:28:58:c9:fe:c0:58:4c:
80:d8:5d:41:80:48:a5:a8:e0:d7:12:b8:c2:ab:fa:3a:d6:f9:
44:df:3f:b1:50:56:3c:ce:06:69:1f:4c:01:85:a3:43:01:4b:
d5:21:53:95:73:9a:59:1c:d9:2d:d5:35:48:03:31:7e:6f:4c:
bd:35:a5:36:f8:09:fd:01:42:83:fb:c9:c4:7a:f9:8c:f3:de:
54:cd:67:56:ac:60:96:26:62:9f:5e:3a:7e:e3:eb:f8:44:81:
cd:bc:72:bf:5b:84:92:bb:c4:20:87:b2:5b:96:8b:7f:e0:3a:
0b:7a:23:98:6e:fc:68:af:2c:8b:79:d7:31:8b:a2:85:16:b9:
cf:d3:8c:f0:b4:7d:e5:38:1e:5a:97:1d:77:f4:78:fe:b7:83:
7a:84:d0:41:bb:d9:a8:0e:dd:40:77:5b:b2:34:99:d4:f2:a7:
1f:9e:7e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:01:25 2025 by rpki-client