Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
File: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft (raw, json)
Hash identifier: GBONrTj4/muS4J9p4I6X31KW1HGliJeu9Sral4y/TTo=
Subject key identifier: 87:9F:32:DF:75:10:4F:CC:64:18:71:E3:A5:24:5B:76:D8:89:86:06
Authority key identifier: 5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
Certificate issuer: /CN=5fab019d98b88c585d5f016204113c839ae067d1
Certificate serial: 01964DB4E7604E227935AB072444A83B7F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
Manifest number: 0320
Signing time: Sat 19 Apr 2025 11:00:23 +0000
Manifest this update: Sat 19 Apr 2025 11:00:23 +0000
Manifest next update: Sun 20 Apr 2025 11:00:23 +0000
Files and hashes: 1: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl (hash: p28zSYThxUpVxnEKvUx9h72lUpmOOjtXRpbL6ktZpOc=)
2: zN7bolKHX5-8_T6xAiHUcxzsXEU.roa (hash: Ja9ytSf2n5JngXin2znXRtSQXJwWKPjF0nquQXGWBgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:e7:60:4e:22:79:35:ab:07:24:44:a8:3b:7f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fab019d98b88c585d5f016204113c839ae067d1
Validity
Not Before: Apr 19 11:00:23 2025 GMT
Not After : Apr 20 11:00:23 2025 GMT
Subject: CN=879f32df75104fcc641871e3a5245b76d8898606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a2:bb:08:23:7d:f7:0b:f0:dd:ee:e1:be:5a:
01:77:3b:24:f2:e3:6a:c2:23:c2:1a:a2:05:09:0d:
e4:a0:0c:96:37:92:1b:f2:2a:a6:bd:fe:95:e0:99:
fd:49:8b:34:f2:4f:05:41:b5:f0:34:30:83:ed:c3:
e5:c9:54:24:86:a7:6e:ab:4c:d7:a4:57:d6:06:82:
84:1c:94:6b:98:03:41:b7:57:ac:89:51:c3:ff:25:
ec:8b:3e:f9:ff:c5:6d:fa:f4:99:3d:0b:80:79:3f:
86:59:a8:85:8f:db:b7:49:6e:84:0b:bd:fa:6c:e4:
a1:32:c1:ec:90:0b:1c:94:41:e8:9f:5e:1e:37:a4:
46:f1:64:37:d0:92:e7:45:37:10:af:8c:e2:da:66:
83:01:66:55:74:77:c3:d0:ad:1d:7e:e5:11:e2:ac:
0d:69:59:ae:3b:f7:4c:1c:23:fe:bf:9b:72:ef:dd:
b7:61:9e:e2:29:a7:62:12:f4:c6:c2:63:91:e1:0a:
9b:a7:fb:aa:b6:a4:f6:14:ef:cd:df:2c:3f:5a:1a:
ad:b3:2d:21:35:72:de:e3:e4:7f:37:af:69:73:08:
a1:fe:43:69:27:47:eb:69:45:8e:56:f5:d1:99:69:
fa:89:61:8f:ed:3e:99:18:8f:22:2a:90:2c:38:cd:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9F:32:DF:75:10:4F:CC:64:18:71:E3:A5:24:5B:76:D8:89:86:06
X509v3 Authority Key Identifier:
keyid:5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:12:da:d3:65:c6:97:92:29:17:2d:49:8c:c6:23:82:21:00:
e4:75:d9:83:ff:77:b2:f8:a1:5a:e0:fd:46:58:5b:ba:fa:46:
28:b6:5c:90:51:fb:7a:1e:1b:58:d3:dc:6f:9a:7d:96:de:1a:
1e:90:68:ce:a5:90:ee:31:4b:d3:3f:da:de:67:73:0e:71:42:
08:d5:96:df:94:10:9d:55:58:bd:61:e1:4d:54:7d:b7:c9:4f:
4d:01:a9:5b:99:2a:78:ad:db:2a:58:f6:b6:ed:18:49:9b:27:
4c:22:7c:bb:b7:44:e8:97:9a:72:b8:8b:b1:67:bd:10:6b:5e:
d0:82:d3:6a:d4:87:d5:4a:9b:80:a2:14:58:44:69:70:a6:cb:
20:34:ea:16:69:8a:63:18:56:d3:cf:2c:b9:b0:5a:09:30:56:
80:6f:14:5d:6e:57:95:ff:3c:63:b9:e6:09:ea:9a:de:e9:52:
85:2a:11:95:f8:71:f6:75:29:79:2d:3c:8d:92:db:d2:62:28:
b9:af:e7:09:82:26:18:cd:62:05:87:57:2e:88:b3:44:9a:df:
c2:ec:d3:28:1f:f5:37:73:bf:80:ec:28:ca:21:06:2b:31:3e:
0d:83:ea:89:fa:9e:15:7c:08:01:01:34:fa:dd:79:eb:0f:d8:
bd:42:b5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:21:07 2025 by rpki-client